Merge pull request #8604 from projectdiscovery/pussycat0x-patch-6

SSH Server CBC Mode Ciphers Enabled

javascript/enumeration/ssh-cbc-mode-ciphers.yaml

@@ -0,0 +1,43 @@
+id: ssh-cbc-mode-ciphers
+
+info:
+  name: SSH Server CBC Mode Ciphers Enabled
+  author: pussycat0x
+  severity: low
+  description: |
+    "SSH Server CBC Mode Ciphers Enabled" signifies that the SSH server supports Cipher Block Chaining (CBC) mode ciphers, which are known for potential vulnerabilities. This configuration poses a security risk, and it's recommended to disable CBC ciphers in favor of more secure alternatives for enhanced protection during data transmission.
+  reference:
+    - https://www.tenable.com/plugins/nessus/70658
+  metadata:
+    verified: true
+    shodan-query: product:"OpenSSH"
+  tags: javascript,ssh,misconfig,network
+
+javascript:
+  - code: |
+      let m = require("nuclei/ssh");
+      let c = m.SSHClient();
+      let response = c.ConnectSSHInfoMode(Host, Port);
+      to_json(response);
+
+    args:
+      Host: "{{Host}}"
+      Port: "22"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "client_to_server_ciphers"
+          - "server_to_client_ciphers"
+        condition: and
+
+      - type: word
+        words:
+          - "aes128-cbc"
+          - "aes192-cbc:"
+          - "aes256-cbc"
+          - "3des-cbc"
+          - "blowfish-cbc"
+          - "cast128-cbc"
+        condition: or