ssh-mitm

Fixed

• use password cmd arg with all auth methods
• changed none auth to be rfc conform

Added

• added keyboard-interactive authentication as alternative to password authentication

Fixed

• fixed "variable referenced before assignment" bug

Added

• added '--version' cmd argument

Changed

• Changed remote software name to 'SSHMITM_VERSIONSTRING'

Fixed

• fixed transparent mode in AppImage

Fixed

• fixed error when parsing converted IPv4 to IPv6 addresses

Added

• added new plugin to debug ssh command traffic

Fixed

• increase buffer length to avoid broken connections with git
• do not close session on eof

Fixed

• fixed ssh command ssh -C <command>
• ssh command now compatible with git

Added

• added default algorithms for OpenSSH 8.5 and 8.6 (CVE-202014145)

Changed

• sftp client is created only on sftp subsystem request

Added

• support remote port forwarding (ssh -R)
• support for proxyjump (ssh -W /-J) over the ssh-mitm server
• remote tunnel injection feature

Changed

• handling of local port forwarding (passes through the tcpip stream to the remote)

Added

• compatibility with dropbear ssh clients

Added

• implemented CVE-2020-14002 (Putty information leak)
• option to use ed25519 host keys

Removed

• removed injectorshell because it will be integrated in ssh-mitm-plugins (maintained by @The5imon)

Added

• added port forwarding (only client to proxy at the moment)

Fixed

• fixed pseudo terminal on exec command

NEW: added option to configure host key algorithm
NEW: added support for ssh command executions

CHANGE: moved entrypoints to __entrypoints__.py file
CHANGE: updated logo url in docs

NEW: added module summaries to help text (--help)
CHANGE: enhancements >= 0.2.1 required

CHANGE: Switched to enhancements >= 0.2.0

NEW: added tcp proxy feature to implement port forwarding (tcp proxy can also used standalone)

• NEW: Added full support for OpenSSH 8.4 agent forwarding in scp/sftp (by Simon Böhm @The5imon )