SSH-MITM(1)

NAME
SSH-MITM - ssh audits made simple

SYNOPSIS

ssh-mitm [-V|--version] [-h|--help] [-d|--debug]
    [--paramiko-log-level {warning,info,debug}]
    [--disable-workarounds]
    <subcommand> [<args>]

DESCRIPTION
This manual page explains the SSH-MITM program.

SSH-MITM is a man in the middle SSH Server for security audits and malware analysis. Password and publickey authentication are supported and SSH-MITM is able to detect, if a user is able to login with publickey authentication on the remote server. This allows SSH-MITM to acccept the same key as the destination server. If publickey authentication is not possible, the authentication will fall back to password-authentication. When publickey authentication is possible, a forwarded agent is needed to login to the remote server. In cases, when no agent was forwarded, SSH-MITM can rediredt the session to a honeypot.

OPTIONS

-v, --version
    Prints the SSH-MITM suite version that the ssh-mitm program came from.

-h, --help
    show help message and exit.

-d, --debug
    more verbose output of status information

--paramiko-log-level {warning,info,debug}
    set paramikos log level

--disable-workarounds
    disable paramiko workarounds

SSH-MITM SUBCOMMANDS
SSH-MITM is devided into several commands. Those commands can be used for client and server audits. Each command can be called as "ssh-mitm <subcommand> [<args>]" or "ssh-mitm-<subcommand> [<args>]". For examplple "ssh-mitm server" or "ssh-mitm-server" starts the man in the middle server.

  SUBCOMMANDS

ssh-mitm-audit(1)
    audit tools for ssh servers.

ssh-mitm-server(1)
    start the ssh-mitm server.