add mikrotik CVE-2026-67276 pubkey bypass + webfig traversal

Bumps github.com/runZeroInc/excrypto to v0.39.0 to pick up large RSA
public exponent support (excrypto#78, mirrors zgrab2#714):

• rsa.PublicKey.E is now *big.Int across the stack
• x/crypto/ssh.parseRSA drops the BitLen() > 24 cap (now only requires
  odd, E >= 3)
• x/crypto/ssh/agent drops BitLen() > 30 cap
• configurable rsa.MaxPublicExponentBitLen DoS gate (default 1024)

Adds end-to-end test coverage to verify the entire sshamble chain
accepts an RSA key whose E exceeds the historical 32-bit cap (here
~1397 bits, comparable to keys observed in the wild):

• badkeys/tests/rsa_2048_large_e.yml — fixture exercising the YAML
  test harness (x509 PKIX parse + PrefixFromPublicKey).
• badkeys/large_e_test.go — TestLargeRSAExponentChain verifies the
  x509 PKIX round-trip, the SSH wire-format round-trip
  (ssh.NewPublicKey -> Marshal -> ParsePublicKey), and badkeys
  fingerprinting all preserve a multi-hundred-bit E. Both paths
  produce identical fingerprints, confirming consistency across the
  PKIX and SSH layers.

Picks up runZeroInc/excrypto@v0.37.1 which tolerates SSH_MSG_DISCONNECT
packets that omit the trailing language-tag string, fixing:

ssh: unmarshal error for field Language of type disconnectMsg

against non-conformant/embedded SSH servers. Also bumps incidental
indirect deps (fsnotify, pelletier/go-toml) via go mod tidy.

This release improves interact handling and introduces two new command-line options:

• --one-session-only This boolean option instructs sshamble to skip additional checks after the first successful session for that target. This is helpful for devices where many methods bypass authentication.
• --session-poke This string option defines what bytes to send into new sessions to elicit responses. This field can be plain ascii or escaped hex strings. For exampleshow version\r\n\x0a\x0d will send a show version command followed by two CRLFs. Please take into account your local shell handling when using this feature (place the argument in single-quotes, etc.).

Full Changelog: v0.3.2...v0.3.3

Clarify that all output is JSONL (NDJSON) and update dependencies

Full Changelog: v0.3.1...v0.3.2

Update analyzers.

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Compare

Choose a tag to compare

v0.2.1

Compare

Choose a tag to compare

v0.0.5

Compare

Choose a tag to compare

v0.0.4

Compare

Choose a tag to compare

v0.0.3

Compare

Choose a tag to compare

v0.0.1

Compare

Choose a tag to compare