Ssh Mitm

Ssh Mitm - intercept and analyze SSH traffic | Awesome Repos

Features

Transparent Interception Proxies - Terminates client and server connections independently to provide full visibility into encrypted session data and authentication flows.
Man-in-the-Middle Frameworks - Terminates client and server connections independently to provide full visibility into encrypted session data and authentication flows.
Traffic Proxying and Interception - Acts as a modular tool for intercepting and modifying secure shell traffic, including file transfers and network tunnels.
Proxy Security Auditors - Serves as a transparent proxy for auditing authentication flows and client security behavior in real time.
Interception Proxies - Inspects and manipulates authentication flows to capture credentials or force interactive fallbacks.
Authentication Testing - Probes remote servers and simulates client responses to evaluate the robustness of authentication methods and multi-factor security.
SSH Security Tools - Analyzes client and server authentication behavior to identify vulnerabilities and weak configurations in remote access implementations.
Tunneling and Proxying - Enables remote port forwarding and proxy jump capabilities to facilitate complex network traversal.
NETCONF Subsystem Interceptions - Provides real-time inspection and modification of NETCONF operations within secure shell tunnels.
SSH Session Simulations - Facilitates testing of authentication robustness by simulating SSH environments entirely in memory.
Interception Proxies - Intercepts file transfers to store copies or replace files on the fly during active sessions.
Traffic Protocol Inspection - Parses and manipulates encapsulated data streams including network tunnels, file transfers, and terminal output during active sessions.
Application-Layer Protocol Inspections - Captures and parses encapsulated traffic like NETCONF, SOCKS tunnels, and file transfers within secure shell connections.
Authentication Credential Captures - Intercepts passwords and public key authentication attempts to audit how sensitive credentials are handled.
Bypass Testing - Exploits authentication negotiation vulnerabilities to circumvent hardware-based security requirements during testing.
Authentication Method Auditing - Probes remote servers for supported authentication methods and validates public keys to identify security misconfigurations.
Client Behavior Auditing - Identifies potential vulnerabilities in authentication handling by analyzing how clients respond to manipulated server responses.
Multi-Factor Authentication Bypass Testing - Intercepts authentication requests to establish sessions using basic credentials, bypassing hardware-based multi-factor confirmations.
Encapsulated Traffic Inspection - Captures and inspects TCP tunnels, SOCKS forwarding, and remote command sessions to monitor encapsulated communications.
Session Auditing - Decrypts and displays live terminal output while logging command execution and state transitions for security auditing.
SSH Agent Forwarding - Utilizes forwarded authentication agents to establish connections to remote servers after session interception.
Host Key Auto-Generators - Supports multiple host key algorithms and persists generated keys to maintain consistent server identity.
Vulnerability Analysis - Evaluates connecting software security by observing key negotiation and protocol behaviors to detect implementation weaknesses.
Security Testing and Auditing - Examines negotiation behavior during connection attempts to identify known vulnerabilities and security weaknesses in remote session software.
Asynchronous Session Management - Manages concurrent sessions as asynchronous coroutines to ensure stable performance during high-volume traffic analysis.
Plugin-Based Extensibility - Enables developers to inject custom interception logic and automated responses into the proxy workflow through modular plugins.
Live User Session Mirroring - Mirrors active sessions to enable real-time monitoring and command injection while remaining transparent to the user.

Open-source alternatives to Ssh Mitm

Similar open-source projects, ranked by how many features they share with Ssh Mitm.

voorivex/pentest-guide
Voorivex/pentest-guide
2,761View on GitHub
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
bugbountybypassowasp-tests
View on GitHub2,761
kgretzky/evilginx2
kgretzky/evilginx2
14,627View on GitHub
Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a target web service. By acting as a reverse proxy, the tool intercepts and relays web requests to capture credentials and session tokens in real time, enabling the bypass of multi-factor authentication mechanisms through session cookie hijacking. The platform distinguishes itself by integrating infrastructure orchestration with modular template-driven content injection. It automates the deployment of proxy servers, manages the lifecycle of encryption certificates, and applies conte
Go
View on GitHub14,627
andresriancho/w3af
andresriancho/w3af
4,850View on GitHub
w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing
Pythonappseccross-site-scriptingscanner
View on GitHub4,850
wifiphisher/wifiphisher
wifiphisher/wifiphisher
14,631View on GitHub
Wifiphisher is a modular security framework designed for wireless penetration testing and social engineering auditing. It functions as a platform for security professionals to assess the resilience of Wi-Fi networks by simulating unauthorized access, performing man-in-the-middle interceptions, and executing credential-harvesting scenarios. The tool distinguishes itself through its ability to combine rogue access point deployment with dynamic phishing interfaces. By forcing wireless clients to associate with deceptive infrastructure, the framework can capture network metadata and inject it int
Pythonaccess-pointattackmalware
View on GitHub14,631

See all 30 alternatives to Ssh Mitm

ssh-mitmssh-mitm

Features

Open-source alternatives to Ssh Mitm

Voorivex/pentest-guide

kgretzky/evilginx2

andresriancho/w3af

wifiphisher/wifiphisher

Star history

Open-source alternatives to Ssh Mitm

Voorivex/pentest-guide

kgretzky/evilginx2

andresriancho/w3af

wifiphisher/wifiphisher