SSH MITM Tool
SSH MITM Tool This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and sessions are logged to disk. Of course, the victim’s SSH client will complain that the server’s key has changed. But because 99.99999% of the time this is caused by a legitimate action (OS re-install, configuration change, etc), many/most users will disregard the warning and continue on. Initial Setup 1.) Install zlib and openssl headers: sudo apt install zlib1g-dev libssl-dev 2.) Download OpenSSH v7.5p1 and verify its signature: wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz.asc gpg --import RELEASE_KEY.asc gpg --verify openssh-7.5p1.tar.gz.asc openssh-7.5...