This release improves interact handling and introduces two new command-line options:

• --one-session-only This boolean option instructs sshamble to skip additional checks after the first successful session for that target. This is helpful for devices where many methods bypass authentication.
• --session-poke This string option defines what bytes to send into new sessions to elicit responses. This field can be plain ascii or escaped hex strings. For exampleshow version\r\n\x0a\x0d will send a show version command followed by two CRLFs. Please take into account your local shell handling when using this feature (place the argument in single-quotes, etc.).

Full Changelog: v0.3.2...v0.3.3

Clarify that all output is JSONL (NDJSON) and update dependencies

Full Changelog: v0.3.1...v0.3.2

Update analyzers.

Full Changelog: v0.3.0...v0.3.1

Full Changelog: v0.2.1...v0.3.0

What's Changed

Dependency updates

Full Changelog: v0.2.0...v0.2.1

What's Changed

• Switch to https://github.com/runZeroInc/excrypto for forked dependencies
• Automatic badkeys.info blocklist lookups
• Additional authentication bypass methods
• Wider algorithm and host key support
• Experimental blind exec vuln checks
• Target filtering with --skip-versions

Full Changelog: v0.0.5...v0.2.0

Correct regressions with excrypto usage

Updated dependencies

Identify compromised hostkeys using the badkeys project data.

Add binaries for Windows on ARM64