2-factor authentication support

[pwnstorm]

What feature you'd like to see or proposal

It would be great to add a 2FA support

[manfred-kaiser]

Thanks for the suggestion 👍

There are different kinds of 2FA. SSH-MITM has support for FIDO tokens (which is not really 2FA)

Adding support for TOTP tokens requires full support for keyboard interactive authentication. At the moment, keyboard interactive is partially implemented, because it was required to intercept FIDO tokens.

Implementing keyboard interactive is on my road map, but I have not enough time to implement it in the near future 😞

Perhaps I will write a guide how to implement custom authentication providers for SSH-MITM. This should allow to customize the authentication process for 2FA.

[manfred-kaiser]

The latest development version has some improvements. By implementing a feature to hide SSH-MITM's tracks in the remote server logs, the authentication process was rewritten.

This should allow to implement other authentication mechanisms such as 2 factor auth with keyboard interactive.

2 factor authentication (except FIDO tokens) has no priority, but perhaps some improvements in SSH-MITM make it easier to implement it.