metasploit-gs/documentation/modules/auxiliary/scanner/ssh/ssh_version.md

Description

SSH, Secure SHell, is an encrypted network protocol used to remotely interact with an Operating System at a command line level. SSH is available on most every system, including Windows, but is mainly used by *nix administrators.

This module identifies the version of SSH service in use by the server based on the server's banner. Any SSH server should return this information.

Vulnerable Application

This module is tested on several different SSH services, such as:

• Virtual testing environment: SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8
• github.com: SSH-2.0-babeld-38be96bc
• gitlab.com: SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8

Verification Steps

1. Do: use auxiliary/scanner/ssh/ssh_version
2. Do: set rhosts [ips]
3. Do: run

Scenarios

SSH-2.0 on GitHub

msf5 auxiliary(scanner/ssh/ssh_version) > use auxiliary/scanner/ssh/ssh_version
msf5 auxiliary(scanner/ssh/ssh_version) > set RHOSTS github.com
RHOSTS => github.com
msf5 auxiliary(scanner/ssh/ssh_version) > run

[+] 140.82.118.4:22       - SSH server version: SSH-2.0-babeld-38be96bc
[*] github.com:22         - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed