| 724 |
|
*/ |
| 725 |
|
}; |
| 726 |
|
|
| 727 |
+ |
/* |
| 728 |
+ |
* Scanner to detect vulnerable SSH versions that normally exist on hacked |
| 729 |
+ |
* routers and IoT devices. Don't forget to add this scanner to a user block. |
| 730 |
+ |
*/ |
| 731 |
+ |
scanner { |
| 732 |
+ |
name = "ssh"; |
| 733 |
+ |
|
| 734 |
+ |
protocol = SSH:22; |
| 735 |
+ |
|
| 736 |
+ |
target_string = "SSH-1.99-OpenSSH_5.1"; |
| 737 |
+ |
target_string = "SSH-2.0-dropbear_0.51"; |
| 738 |
+ |
target_string = "SSH-2.0-dropbear_0.52"; |
| 739 |
+ |
target_string = "SSH-2.0-dropbear_0.53.1"; |
| 740 |
+ |
target_string = "SSH-2.0-dropbear_2012.55"; |
| 741 |
+ |
target_string = "SSH-2.0-dropbear_2013.62"; |
| 742 |
+ |
target_string = "SSH-2.0-dropbear_2014.63"; |
| 743 |
+ |
target_string = "SSH-2.0-OpenSSH_4.3"; |
| 744 |
+ |
target_string = "SSH-2.0-OpenSSH_5.1"; |
| 745 |
+ |
target_string = "SSH-2.0-OpenSSH_5.5p1"; |
| 746 |
+ |
target_string = "SSH-2.0-ROSSSH"; |
| 747 |
+ |
target_string = "SSH-2.0-SSH_Server"; |
| 748 |
+ |
}; |
| 749 |
+ |
|
| 750 |
|
|
| 751 |
|
/* |
| 752 |
|
* User blocks define what scanners will be used to scan which hostmasks. |