at.ssh_mitm.server.metainfo.xml

<?xml version="1.0" encoding="UTF-8"?>
<component type="console-application">
  <id>at.ssh_mitm.server</id>
  <metadata_license>CC0-1.0</metadata_license>
  <project_license>GPL-3.0</project_license>
  <name>SSH-MITM</name>
  <developer id="at.ssh_mitm">
    <name>Manfred Kaiser</name>
  </developer>
  <summary>SSH-MITM - ssh audits made simple</summary>
  <description>
    <p>SSH-MITM is a man in the middle SSH Server for security audits and malware analysis.</p>
    <p>Password and publickey authentication are supported and SSH-MITM is able to detect, if a user is able to login with publickey authentication on the remote server. This allows SSH-MITM to accept the same key as the destination server. If publickey authentication is not possible, the authentication will fall back to password-authentication.</p>
    <p>When publickey authentication is possible, a forwarded agent is needed to login to the remote server. In cases, when no agent was forwarded, SSH-MITM can rediredt the session to a honeypot.</p>
    <p>Features</p>
    <ul>
      <li>publickey and password authentication</li>
      <li>Phishing FIDO Tokens (Information from OpenSSH)</li>
      <li>hijacking and logging of terminal sessions</li>
      <li>store and replace files during SCP/SFTP file transferes</li>
      <li>port porwarding with SOCKS 4/5 support</li>
      <li>intercept MOSH connections</li>
      <li>audit clients against known vulnerabilities</li>
      <li>plugin support</li>
    </ul>
  </description>
  <provides>
    <binary>ssh-mitm</binary>
  </provides>
  <url type="homepage">https://github.com/ssh-mitm/ssh-mitm</url>
  <url type="help">https://docs.ssh-mitm.at/</url>
  <url type="bugtracker">https://github.com/ssh-mitm/ssh-mitm/issues</url>
  <releases>
    <release version="5.0.0" date="2024-07-06">
      <description>
        <p>Changed</p>
        <ul>
          <li>easier plugin development</li>
          <li>merged SOCKS4 and SOCKS5 module in a single module</li>
          <li>prepend entry points with "sshmitm" to avoid name conflicts</li>
          <li>updated vulnerability db</li>
        </ul>
      </description>
    </release>
  </releases>
  <keywords>
    <keyword>ssh</keyword>
    <keyword>security</keyword>
    <keyword>audit</keyword>
    <keyword>mitm</keyword>
    <keyword>proxy</keyword>
  </keywords>
  <content_rating type="oars-1.0" />
  <screenshots>
    <screenshot type="default">
      <image>https://docs.ssh-mitm.at/_images/intro.png</image>
      <caption>SSH-MITM in action: A tool for intercepting and manipulating SSH connections.</caption>
    </screenshot>
    <screenshot>
      <image>https://docs.ssh-mitm.at/_images/ssh-mitm-password.png</image>
      <caption>SSH-MITM: Tool displaying intercepted SSH connection details and authentication information.</caption>
    </screenshot>
  </screenshots>
</component>