updated regex for SSH scanning to include more matches (#1012)

Co-authored-by: Sam Stepanyan <[email protected]>
OWASP · Feb 17, 2025 · d143f43 · d143f43
1 parent 507a098
commit d143f43
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nettacker/modules/scan/port.yaml b/nettacker/modules/scan/port.yaml
@@ -1083,7 +1083,7 @@ payloads:
               reverse: false
 
             ssh:
-              regex: "openssh|\\-OpenSSH\\_|\\r\\nProtocol mism|\\_sshlib|\\x00\\x1aversion info line too long|SSH Windows NT Server|WinNT sshd|sshd| SSH Secure Shell|WinSSHD"
+              regex: "openssh|\\-OpenSSH\\_|\\r?\\n?Protocol mism|\\_sshlib|\\x00\\x1aversion info line too long|SSH Windows NT Server|WinNT sshd|sshd| SSH Secure Shell|WinSSHD|SSH-[\\d.]+-[A-Za-z0-9_\\-]+|SSH-[\\d.]+\\r?\\n?"
               reverse: false
 
             telnet: