<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/comments/feed</id>
  <title>Most recent comments.</title>
  <updated>2026-09-17T11:26:00.398183+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent comments.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/comment/c83a5095-cd84-42e7-858b-3979ae75e818</id>
    <title>CVE-2024-6387 HASSH Fingerprints</title>
    <updated>2026-09-17T11:26:00.401791+00:00</updated>
    <author>
      <name>Alexandre Dulaunoy</name>
      <uri>https://cve.circl.lu/user/adulau</uri>
    </author>
    <content># CVE-2024-6387 HASSH Fingerprints

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints for vulnerable OpenSSH versions. The generated database can be used to query Shodan or Censys to identify potentially vulnerable OpenSSH servers. The hasshdb.txt database can also be used with my Nmap NSE script available at hassh-utils.

from: [https://github.com/0x4D31/cve-2024-6387_hassh](https://github.com/0x4D31/cve-2024-6387_hassh)</content>
    <link href="https://vulnerability.circl.lu/comment/c83a5095-cd84-42e7-858b-3979ae75e818"/>
    <published>2024-07-07T06:21:50.543465+00:00</published>
  </entry>
</feed>
