SSH Audit - file

[pussycat0x]

Template / PR Information

• References:
  https://vishalraj82.medium.com/hardening-openssh-security-37f5d634015f

nuclei -u  /etc/ssh/sshd_config  -t .             

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.2.7

                projectdiscovery.io

[INF] Current nuclei version: v3.2.7 (outdated)
[INF] Current nuclei-templates version: v9.9.3 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 56
[INF] Templates loaded for current scan: 15
[WRN] Loading 15 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[ssh-key-auth-required] [file] [info] /etc/ssh/sshd_config
[hide-last-login-information] [file] [info] /etc/ssh/sshd_config
[change-default-port] [file] [info] /etc/ssh/sshd_config
[disable-ssh-forwarding] [file] [info] /etc/ssh/sshd_config
[disable-empty-password] [file] [info] /etc/ssh/sshd_config
[disable-ssh-protocol-1] [file] [info] /etc/ssh/sshd_config
[idle-timeout-interval] [file] [info] /etc/ssh/sshd_config
[limit-maximum-authentication-attempts] [file] [info] /etc/ssh/sshd_config
[enable-ssh-privilege-separation] [file] [info] /etc/ssh/sshd_config
[limit-ssh-users-access] [file] [info] /etc/ssh/sshd_config
[ssh-ip-whitelist] [file] [info] /etc/ssh/sshd_config
[limit-ssh-group] [file] [info] /etc/ssh/sshd_config

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[DhiyaneshGeek]

Hi @pussycat0x

Weak Matcher (Need to Add Valid Matcher) - the below mentioned templates contains only negative matcher & extension - all , results in False Positive

• Disable SSH Protocol 1
• Disable SSH Empty Password
• Enable Privilege Separation in SSH
• Hide SSH Last Login Information
• Set SSH Idle Timeout Interval
• Limit SSH Users Group Access
• Limit SSH Users Access