This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and sessions are logged to disk. Of course, the victim's SSH client will complain that the server's key has changed. But because 99.99999% of the time this is caused by a legitimate action (OS re-install, configuration change, etc), many/most users will disregard the warning and continue on. NOTE: Only run the modified sshd_mitm in a VM or container! Ad-hoc edits were made to the OpenSSH sources in critical regions, with no regard to their security implications. Its not hard to imagine these edits introduce serious vulnerabilities.

Features

  • The quickest & easiest way to get started is to use the Docker image with SSH MITM pre-built
  • Find targets on the LAN, and ARP spoof them
  • Shell and SFTP sessions will be logged in the ssh_mitm_logs directory
  • To test out changes to the OpenSSH source code, use the dev/redeploy.sh script
  • To re-generate a full patch to the OpenSSH sources, use the dev/regenerate_patch.sh script
  • Only run the modified sshd_mitm in a VM or container

Project Samples

SSH MITM Screenshot 1

Project Activity

See All Activity >

Categories

MiTM (Man-in-The-Middle) Attack

License

MIT License

Follow SSH MITM

SSH MITM Web Site

Other Useful Business Software
Point of Sale. Powerful and Simple. Icon
Point of Sale. Powerful and Simple.

For retail store owners and multi-location retail operations needing a tool to manage sales, inventory, staff and channels in one place

Vibe Retail is an all-in-one retail point-of-sale and operations platform built for single-store and multi-location retailers seeking to unify inventory, sales, staff and customer data from one mobile-friendly interface. The system lets you track inventory across locations and warehouses, handle item variations (size, color, material), manage purchase orders and supplier deliveries, print custom barcodes, and transfer stock between stores in real time. On the sales side, Vibe supports multiple payment types (cards, cash, checks, gift cards, EBT), layaway workflows, serial number tracking, delivery management, loyalty programs and branded receipts. Retailers can integrate with online platforms (such as Shopify and WooCommerce), sync in-store and online sales, access 40+ real-time reports on sales, inventory and performance, set up promotions and discounts, and print receipts from mobile devices.
Learn More
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of SSH MITM!

Additional Project Details

Programming Language

C

Related Categories

C MiTM (Man-in-The-Middle) Attack Tool

Registered

2023-08-14
Report inappropriate content