SSH-MITM-SERVER(1)

💖 SSH-MITM-SERVER(1) 💖

okay bestie, so this is the manual for SSH-MITM — aka ssh audits made simple ✨ like literally the whole point is making audit stuff not a nightmare, and honestly? it ate.

🌸 SYNOPSIS 🌸

---

## 🦋 DESCRIPTION 🦋

okay so this whole page is literally just explaining the **SSH-MITM-SERVER** program to you. that's it. that's the vibe. no cap, it's giving "here's everything you need to know about running the server" energy and we're obsessed 💅

---

## ✨ OPTIONS ✨

### 🎀 server 🎀

- **`--listen-port`** — the listen port of SSH-MITM. like where it's gonna be listening for stuff, y'know?
- **`--transparent`** — enables transparent mode (requires root). so like, you need root for this one bestie, no skipping that part 🙈
- **`--remote-host`** — remote host to connect to (default `127.0.0.1`). this is where it's connecting out to, and yeah the default is localhost fr fr
- **`--remote-port`** — remote port to connect to (default `22`). standard ssh port as the default, iconic behavior honestly
- **`--auth-username`** — optional username for remote authentication. only if you need it, it's optional bestie
- **`--auth-password`** — optional password for remote authentication. same vibe, optional
- **`--host-key`** — host key file. this is the file with your host key, simple as that
- **`--host-key-algorithm`** — host key algorithm (default `rsa`). the values you can pick from are:
  - `dss`
  - `rsa`
  - `ecdsa`
  - `ed25519`
- **`--host-key-length`** — host key length for `dss` and `rsa` (default `2048`). note that's only for those two algorithms, iykyk
- **`--request-agent-breakin`** — enables agent forwarding and tries to break in to the agent, if not forwarded. like it's gonna try to get in there regardless, lowkey aggressive but that's the point 💀
- **`--banner-name`** — set a custom string as server banner. make it cute, make it yours
- **`--store-scp-files`** — store files from scp. it's literally gonna save them
- **`--store-sftp-files`** — store files from sftp. same energy, different protocol
- **`--enable-trivial-auth`** — enables "trivial success authentication" spoofing attack. yes it's a spoofing attack, that's the whole feature 🔥
- **`--hide-credentials`** — do not log credentials (useful for presentations). so like if you're presenting and don't want your creds just vibing on screen, this is for you bestie 🫶
- **`--enable-auth-fallback`** — use a honeypot if no agent was forwarded to login with publickey auth. fallback plan activated ✨
- **`--fallback-host`** — fallback host for the honeypot. where the honeypot lives
- **`--fallback-port`** — fallback port for the honeypot. which port the honeypot is on
- **`--fallback-username`** — username for the honeypot. who the honeypot is
- **`--fallback-password`** — password for the honeypot. the honeypot's password, periodt
- **`--store-ssh-session`** — store ssh session in scriptreplay format. saving the whole session in that specific format
- **`--session-log-dir`** — directory to store ssh session logs. where those logs are gonna live

---

> okay that's literally everything bestie, every single flag accounted for, no cap 💜

---

and that's the whole manual fr fr — this is **SSH-MITM 6.0.1**, brought to you by the SSH-MITM Manual era, and we're signing off 🎀✨ stay slay, stay secure, and remember: audits don't have to be boring 💅🌸