mirror of
https://github.com/s-b-repo/rustsploit
synced 2026-06-27 09:54:12 +00:00
s-b-repo
05cfdc6d22
Ports: - MCP server migrated to official rmcp SDK (v1.7); all 29 tools/7 resources preserved - Recog (Rapid7) fingerprint engine + DBs, wired into service_scanner - JARM + JA3/JA3S TLS fingerprinting (tls_fingerprint) + jarm_scan module - SecLists checksum-pinned wordlist catalog Fixes / features: - Full-internet sweep host-cap consistency - Pre-config confirm-before-harvest + ModuleCtx.prompt_only mode; service_scanner batch-mode output gating - HTTP client connection-pool reuse (cached) + bounded pool_idle_timeout - show options: +scan_order/exclusions/target_rps/module_rps - NEW: per-run output auto-save to ~/.rustsploit/loot/<module> <time> results.txt (append mode, all stdout+stderr; src/results_sink.rs) - docs: drop stale check()/CheckResult + build.rs references - assorted module additions + tommy interactive guide Build: restore Cargo.lock (clean clone was unbuildable without it: transitive cookie/time conflict). Working dir: clean build (0 warnings), 40/40 tests green.
68 lines
3.2 KiB
XML
68 lines
3.2 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!--
|
|
Vendored from Rapid7 Recog (https://github.com/rapid7/recog), BSD-2-Clause.
|
|
Trimmed subset of xml/ssh_banners.xml for rustsploit's recog matcher.
|
|
-->
|
|
<fingerprints matches="ssh.banner">
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-OpenSSH[_-]([\d.]+)(?:p(\d+))?\s+(.*)$">
|
|
<description>OpenSSH running on a Linux/Unix host with an OS comment</description>
|
|
<example service.version="8.9" service.product="OpenSSH">SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6</example>
|
|
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
<param pos="1" name="service.version"/>
|
|
<param pos="3" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
|
|
</fingerprint>
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-OpenSSH[_-]([\d.]+)(?:p\d+)?$">
|
|
<description>OpenSSH with no trailing OS comment</description>
|
|
<example service.version="7.4" service.product="OpenSSH">SSH-2.0-OpenSSH_7.4</example>
|
|
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
<param pos="1" name="service.version"/>
|
|
</fingerprint>
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-dropbear[_-]([\d.]+)$">
|
|
<description>Dropbear SSH server, common on embedded devices</description>
|
|
<example service.version="2020.81" service.product="Dropbear SSH">SSH-2.0-dropbear_2020.81</example>
|
|
<param pos="0" name="service.vendor" value="Matt Johnston"/>
|
|
<param pos="0" name="service.family" value="Dropbear SSH"/>
|
|
<param pos="0" name="service.product" value="Dropbear SSH"/>
|
|
<param pos="1" name="service.version"/>
|
|
</fingerprint>
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-ROSSSH$">
|
|
<description>MikroTik RouterOS SSH service</description>
|
|
<example>SSH-2.0-ROSSSH</example>
|
|
<param pos="0" name="service.vendor" value="MikroTik"/>
|
|
<param pos="0" name="service.family" value="RouterOS"/>
|
|
<param pos="0" name="service.product" value="RouterOS"/>
|
|
<param pos="0" name="os.vendor" value="MikroTik"/>
|
|
<param pos="0" name="os.family" value="RouterOS"/>
|
|
<param pos="0" name="os.product" value="RouterOS"/>
|
|
</fingerprint>
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-libssh[_-]([\d.]+)$">
|
|
<description>libssh server library banner</description>
|
|
<example service.version="0.9.6">SSH-2.0-libssh_0.9.6</example>
|
|
<param pos="0" name="service.vendor" value="libssh"/>
|
|
<param pos="0" name="service.family" value="libssh"/>
|
|
<param pos="0" name="service.product" value="libssh"/>
|
|
<param pos="1" name="service.version"/>
|
|
</fingerprint>
|
|
|
|
<fingerprint pattern="^SSH-[\d.]+-Cisco-([\d.]+)$">
|
|
<description>Cisco network device SSH service</description>
|
|
<example service.version="1.25">SSH-2.0-Cisco-1.25</example>
|
|
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
<param pos="0" name="service.family" value="IOS"/>
|
|
<param pos="0" name="service.product" value="IOS"/>
|
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
<param pos="0" name="os.family" value="IOS"/>
|
|
<param pos="1" name="service.version"/>
|
|
</fingerprint>
|
|
|
|
</fingerprints>
|