Quick #regreSSHion checker (based on software version) for #nuclei CVE-2024-6387

regreSSHion.yaml

id: CVE-2024-6387

info:
  name: RegreSSHion detect (based on software version)
  author: UnaPibaGeek
  severity: High
  description: Regression (CVE-2024-6387) software version checker.
  classification:
    cve-id: CVE-2024-6387
  metadata:
    max-request: 2
    vendor: OpenSSH
    product: OpenSSH
  tags: cve,cve2024,regresshion,openssh,ssh

tcp:
  - host:
      - '{{Hostname}}'
      - '{{Host}}:22'
    inputs:
      - data: "SSH-2.0-OpenSSH_9.0\r\n"
    matchers:
      - type: regex
        part: body
        regex:
          - 'OpenSSH_(8\.[5-9]p?[12]?|9\.[0-7]p?[12]?|[0-3]\.[0-9]p?[12]?|4\.[0-3]p?[12]?)'