From ee675a60608f17a4b1e6e8a133ead5237dd75386 Mon Sep 17 00:00:00 2001
From: Prince Chaddha <cyberbossprince@gmail.com>
Date: Thu, 9 Nov 2023 12:19:16 +0530
Subject: [PATCH] Create ssh-password-auth.yaml

---
 javascript/enumeration/ssh-password-auth.yaml | 31 +++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 javascript/enumeration/ssh-password-auth.yaml

diff --git a/javascript/enumeration/ssh-password-auth.yaml b/javascript/enumeration/ssh-password-auth.yaml
new file mode 100644
index 0000000000..85cd794169
--- /dev/null
+++ b/javascript/enumeration/ssh-password-auth.yaml
@@ -0,0 +1,31 @@
+id: ssh-password-auth
+
+info:
+  name: SSH Password-based Authentication
+  author: princechaddha
+  severity: info
+  reference:
+    - https://nmap.org/nsedoc/scripts/ssh-auth-methods.html
+  metadata:
+    max-request: 1
+    shodan-query: product:"OpenSSH"
+  tags: ssh,js,enum,network
+
+javascript:
+  - code: |
+      var m = require("nuclei/ssh");
+      var c = m.SSHClient();
+      var response = c.ConnectSSHInfoMode(Host, Port);
+      to_json(response);
+
+    args:
+      Host: "{{Host}}"
+      Port: "22"
+
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"UserAuth":'
+          - '"password"'
+        condition: and
\ No newline at end of file