Agent skill · security · aiskillstore
ssh-penetration-testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.
Why this skill is useful
Adds comprehensive methodologies and executable scripts for SSH penetration testing that are not commonly found in public documentation.
What it needs
Requires hydra, medusa, metasploit, nmap, python, ssh-audit installed locally. About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
SSH Penetration Testing Purpose Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security. Prerequisites Required Tools Nmap with SSH scripts Hydra or Medusa for brute-forcing ssh-audit for configuration analysis Metasploit Framework Python with Paramiko library Required Knowledge SSH protocol fundamentals Public/private key authentication Port forwarding concepts Linux command-line proficiency Outputs and Deliverables 1. SSH Enumeration Report - Versions, algorithms, configurations 2. Credential Assessment - Weak passwords, default credentials 3. Vulnerability Assessment - Known CVEs, misconfigurations 4. Tunnel Documentation - Port forwarding configurations Core Workflow Phase 1: SSH Service Discovery Identify SSH services on target networks: Phase 2: SSH Enumeration Gather detailed information about SSH services: Phase 3: SSH Configuration Auditing Identify weak configurations: Key configuration weaknesses to identify: Weak key exchange algorithms (diffie-hellman-group1-sha1) Weak ciphers (arcfour, 3des-cbc) Weak MACs (hmac-md5, hmac-sha1-96) Deprecated protocol versions Phase 4: Credential Attacks Brute-Force with Hydra Brute-Force with Medusa Password Spraying Phase 5: Key-Based Authentication Testing Test for weak or exposed keys: Check for exposed keys: Phase 6: Vulnerability Exploitation Search for known vulnerabilities: Phase 7: SSH Tunneling and Port Forwarding Local Port Forwarding Forward local port to remote service: Remote Port Forwarding Expose local service to remote network: Dynamic Port Forwarding (SOCKS Proxy) Create SOCKS proxy for network pivoting: ProxyJump (Jump Hosts) Chain through multiple SSH servers: Phase 8: Post-Exploitation Activities after gaining SSH access: Phase 9: Custom SSH Scripts with Paramiko Python-based SSH automation: Phase 10: Metasplo …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/ssh-penetration-testing