sshmitm.tutorial.tutorials.mirrorshell package

Tutorial: SSH Session Mirroring (mirrorshell).

class sshmitm.tutorial.tutorials.mirrorshell.MirrorshellTutorial

Bases: Tutorial

description: ClassVar[str] = 'Learn how SSH-MITM mirrors a live shell session to the attacker, allowing command injection into an unattended terminal.'

docs: ClassVar[dict[str, str]] = {'Logfile Inc. Assessment': 'https://docs.ssh-mitm.at/get_started/scenario.html', 'Terminal Sessions': 'https://docs.ssh-mitm.at/audit_guide/sessions.html'}

lab_service_labels: ClassVar[dict[str, str]] = {'mock_port': 'router01.logfileinc.internal'}

requires: ClassVar[list[Requirement]] = [<sshmitm.tutorial._requirements.RandomKeyPair object>, <sshmitm.tutorial._requirements.RandomSecret object>]

steps: list[Step] = [Step(id='intro', title='What you will learn', content='', condition=<sshmitm.tutorial._conditions.TRUE object>, victim_action=None, command=None, copyable=[], hint_waiting='', hint_done='Introduction read. ✓'), Step(id='start-sshmitm', title='Start SSH-MITM', content='', condition=<sshmitm.tutorial._conditions.PortOpen object>, victim_action=None, command='ssh-mitm server --remote-host {proxy_target_address} --remote-port {mock_port} --listen-port {sshmitm_port}', copyable=[], hint_waiting='Waiting for SSH-MITM to start on port {sshmitm_port}…', hint_done='SSH-MITM is running on port {sshmitm_port}. ✓'), Step(id='intercept', title='Connect to the mirrored session and find the SNMP secret', content='', condition=<sshmitm.tutorial._conditions.UserInput object>, victim_action=<sshmitm.tutorial._client_actions.KeepAliveShellAction object>, command=None, copyable=[], hint_waiting="The network admin's session is open. Check the SSH-MITM terminal for the mirrorshell port and connect. The terminal may appear blank — type 'help' to get started.", hint_done='Correct! You successfully extracted the SNMP community string. ✓')]