{"id":24702952,"url":"https://github.com/richlamdev/ssh-default-banners","last_synced_at":"2025-10-09T09:30:26.674Z","repository":{"id":140093642,"uuid":"206881240","full_name":"richlamdev/ssh-default-banners","owner":"richlamdev","description":"Nmap NSE script to identify Debian, Ubuntu, FreeBSD version based on default SSH banner response.  Intended for Penentration Testing, OSCP (PEN-200), HackTheBox (HTB), TryHackMe, RootMe ","archived":false,"fork":false,"pushed_at":"2025-08-17T19:49:32.000Z","size":108,"stargazers_count":33,"open_issues_count":1,"forks_count":2,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-10-09T00:44:45.315Z","etag":null,"topics":["banner-grabbing","debian","enumeration","ethical-hacking","freebsd","hacking","htb","lua","network-analysis","nmap","nse-script","openssh","openssh-server","oscp","penetration-testing","raspberry-pi","ssh","ssh-banner","ssh-server","ubuntu"],"latest_commit_sha":null,"homepage":"","language":"Lua","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/richlamdev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-09-06T22:10:45.000Z","updated_at":"2025-10-03T04:12:45.000Z","dependencies_parsed_at":"2023-11-22T05:42:49.753Z","dependency_job_id":null,"html_url":"https://github.com/richlamdev/ssh-default-banners","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/richlamdev/ssh-default-banners","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/richlamdev%2Fssh-default-banners","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/richlamdev%2Fssh-default-banners/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/richlamdev%2Fssh-default-banners/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/richlamdev%2Fssh-default-banners/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/richlamdev","download_url":"https://codeload.github.com/richlamdev/ssh-default-banners/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/richlamdev%2Fssh-default-banners/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279001135,"owners_count":26083022,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["banner-grabbing","debian","enumeration","ethical-hacking","freebsd","hacking","htb","lua","network-analysis","nmap","nse-script","openssh","openssh-server","oscp","penetration-testing","raspberry-pi","ssh","ssh-banner","ssh-server","ubuntu"],"created_at":"2025-01-27T05:51:42.046Z","updated_at":"2025-10-09T09:30:26.669Z","avatar_url":"https://github.com/richlamdev.png","language":"Lua","readme":"# ssh-default-banners\nDefault SSH banner responses\n\nList of default banner responses for Debian, Ubuntu, and FreeBSD\n\n## ssh-os.nse:\n\nIdentifies Ubuntu, FreeBSD, or Debian version based on response of SSH banner.\n\nIdentifies the following versions:\n\nUbuntu 4.10 to 25.04\n\nFreeBSD 4.3 to 14.2-RELEASE\n\nDebian 3.x to 13.x\n\nRaspbian 7.x to 11.x (tentative 11.x version recognition)\n\n\nNote: The accuracy of the response is based on the default banner response.\nA number of scenarios may provide an inaccurate result from the target host:\n\n* different OpenSSH version or alternative SSH server installed\n* edited/omitted banner via sshd_config\n* hexedit of OpenSSH binary; modified banner\n* recompiled OpenSSH\n\n#### Usage:\n```\nnmap -p22 -sV --script ssh-os.nse \u003ctarget\u003e\n  OR\nnmap -p \u003cport number\u003e -sV --script ssh-os.nse \u003ctarget\u003e\n```\n\n#### Medium Post:\n\nhttps://medium.com/@richlam.dev/nmap-ubuntu-debian-freebsd-version-discovery-ssh-oh-ece7e46af26e\n\n#### Nmap Pull Request:\n\nhttps://github.com/nmap/nmap/pull/1728\n\n#### Some banners from:\n\nhttps://github.com/rapid7/recog/blob/master/xml/ssh_banners.xml\n\n#### TODO:\n\n1. Update FreeBSD SSH banner recognition to regex entire banner response; this\nwill better distinguish between FreeBSD versions.\n\n2. Migrate banner lookup references from within the script to external files.\nEventually, the number of lookup tables within the script will be too unwieldly.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frichlamdev%2Fssh-default-banners","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frichlamdev%2Fssh-default-banners","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frichlamdev%2Fssh-default-banners/lists"}