GitHub Outdated RSA SSH Host key
ID: github-outdated-key
Severity: info
Author: naglis
Tags: file,keys,github,ssh,rsa
Description
Section titled “Description”At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com.
YAML Source
Section titled “YAML Source”id: github-outdated-key
info: name: GitHub Outdated RSA SSH Host key author: naglis severity: info description: | At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com. reference: - https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/ - https://web.archive.org/web/20230316194229/https://docs.github.com/en/enterprise-cloud@latest/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints metadata: verified: true tags: file,keys,github,ssh,rsafile: - extensions: - all
extractors: - type: regex regex: - SHA256:nThbg6kXUpJWGl7E1IGOCspRomTxdCARLviKw6E5SY8 - ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa\+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf\+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB\+weqqUUmpaaasXVal72J\+UX2B\+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7\+wC604ydGXA8VJiS5ap43JXiUFFAaQ==# digest: 4a0a004730450220169010ee7c5c08bf75ff9dfc5bf9753e13a925b411e21212007cdc7aef3830ea022100893153f087e86ce685308e2fe6c4a125fffda28199286d0a2c9b1e1f37b19856:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "file/keys/github/github-outdated-key.yaml"