SSH-MITM Files

What's Changed

Added

• CVE-2026-60000: GSSAPI username validity oracle audit tool (ssh-mitm audit gssapi-usercheck)
• interactive tutorial system (ssh-mitm tutorial)
• NETCONF forwarder (experimental)
• PowerShell remoting (PSRP over SSH) interception, with a PSRP session logging plugin
• multiple host keys (RSA, ECDSA, Ed25519), with a persistent host key across restarts
• new ssh-mitm mock-server subcommand
• MOSH session monitoring (ssh-mitm mosh client)
• interactive plugin browser (--plugins)
• reproducible AppImage packaging (hash-pinned toolchain, byte-identical builds)
• keyboard-interactive authentication is now intercepted and logged by default
• none authentication is now forwarded to the remote server
• banner passthrough in both directions
• asciinema session recording
• remote server fingerprint verification (--remote-fingerprints)
• credential-based remote authentication (AuthenticatorRemote)

Fixed

• mirror shell: status banner, hardened against mid-session channel close
• fixed broken SFTP file transfers and incorrect error responses for missing files
• fixed connection drop when the remote closed a command channel early
• terminal resize and signal forwarding to the remote server
• subsystems no longer started before upstream auth completes
• connection limit (--max-connections) now enforced
• graceful server shutdown on Ctrl-C
• fixed mosh on systems with old cryptography packages
• fixed interception of clients using SSH agent host-key restrictions
• fixed Terrapin detection and reporting (ChaCha20 was never considered vulnerable)
• snap: permission errors reading the host key now show a helpful hint

Changed

• reduced connection footprint during public key lookup
• Python 3.11 or newer is now required
• DSS/DSA keys are no longer supported
• pinned paramiko to exactly 5.0.0 (relies on private internals; see tests/test_paramiko_compat.py)

Removed

• removed the production and docs extras; install ssh-mitm directly

New Contributors

• @jgiere made their first contribution in https://github.com/ssh-mitm/ssh-mitm/pull/191
• @Benjamin-Loison made their first contribution in https://github.com/ssh-mitm/ssh-mitm/pull/212

Full Changelog: https://github.com/ssh-mitm/ssh-mitm/compare/5.0.1...6.0.0