To: full-disclosure@xxxxxxxxxxxxxxxxx Subject: SSHatter 0.6 From: Tim Brown <timb@xxxxxxxxxxxxxxxxxxxx> Date: Sat, 6 Oct 2007 16:53:30 +0100 All, SSHatter, the SSH brute forcer is now up to release 0.6. New since the last announcement include: * Changes allowing rudimentary username enumeration via timing attacks (as described in http://www.securityfocus.com/archive/1/archive/1/448025/100/0/thread