SSH MITM

[ecthros]

Here's the idea:

Use tcpkiller to kill one of their current connections over ssh. They think that their internet is messed up or something, so they log back in.

In the time it takes, set up arp spoofing, so they send us the traffic.

Modify the traffic so that it sends the connection to us instead. this allows us to ask for a username and password, then we can create a ssh connection with the server to make it look like nothing is going wrong, allowing us to look at all their traffic on the ssh connection as well as the credentials.

I'm not sure how the process is gonna work but I think it's a cool idea - i havent been able to find anything anywhere about it