SSHamble is now available!

SSHamble simulates potential attack scenarios, including unauthorized remote access due to unexpected state transitions, remote command execution in post-session login implementations, and information leakage through unlimited high-speed authentication requests. The SSHamble interactive shell provides raw access to SSH requests in the post-session (but pre-execution) environment, allowing for simple testing of environment controls, signal processing, port forwarding, and more.

Get SSHamble on GitHub

runZero Research

DEF CON 32: SSHamble: Unexpected Exposures in SSH

This presentation digs deep into SSH, the lesser-known implementations, many of the surprising security issues found along the way, and how to exploit them.

Download PDF

runZero Hour

SSHamble Edition

Didn't make it to DEF CON 32? We got you! This special episode of runZero Hour explores all things SSH, including our new open-source tool: SSHamble.

Watch Now

Research Research Report: Volume 1

Explore the surprising state of asset security

Delve into our findings on the state of security in enterprise infrastructure, revealing alarming gaps and unexpected trends, from network segmentation decay to dark matter accumulation.

Download the Report

Why SSHamble?

SSHamble: Unexpected exposures in the Secure Shell

The Secure Shell (SSH) can be found in nearly everything; from network devices, to source code forges, to Windows-based file transfer tools. While OpenSSH is still the most prominent implementation, it's now just one of dozens, and these include a handful of libraries that drive a wide range of applications. How do these implementations stack up on the security side? runZero dove deep to find out.

Our researchers discovered a broad range of weaknesses across SSH implementations and applications that impact critical network security devices and software. These long standing issues have remained undiscovered due to the lack of tooling available to exercise the layers of the SSH protocol. Enter SSHamble, our new open source tool.

Learn More

Meet the team behind SSHamble

HD Moore

Founder & CEO

HD Moore is the founder and CEO of runZero. Previously, he founded the Metasploit Project and served as the main developer of the Metasploit Framework, which is the world's most widely used penetration testing framework.

Experience the runZero Platform

Get complete visibility into IT, OT, & IoT — without agents, credentials, or hardware.

Start a Free Trial