What tools are required to use this SSH penetration testing skill?

You should have Nmap, Hydra or Medusa, ssh-audit, Metasploit Framework, and Python with the Paramiko library installed on your system.

Can I use this skill to audit non-standard SSH ports?

Yes, the skill provides specific commands and methodologies for identifying and testing SSH services running on alternate ports like 2222 or 22222.

Is this skill intended for automated attacks?

While it provides automation scripts, it is designed as a guided methodology for authorized security professionals to conduct structured penetration tests.

How does it handle SSH key-based authentication testing?

It includes workflows for identifying exposed private keys, testing key permissions, and attempting logins with common key filenames.

Does this skill support SSH tunneling and pivoting?

Absolutely. It covers local, remote, and dynamic port forwarding (SOCKS proxy) as well as ProxyJump configurations for chaining through multiple hosts.

SSH Penetration Testing

Name: SSH Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

Seguridad y Pruebas

Conducts comprehensive security audits and penetration tests on SSH services to identify and exploit vulnerabilities.

This skill provides a specialized framework for assessing the security posture of Secure Shell (SSH) implementations. It guides users through the complete penetration testing lifecycle—from initial service discovery and version enumeration to advanced credential attacks, vulnerability exploitation, and complex network pivoting via SSH tunneling. Designed for security professionals and system administrators, it ensures that SSH configurations are robustly audited using industry-standard tools like Nmap, Hydra, and Metasploit while offering best practices for post-exploitation and remediation.

Características Principales

01Advanced SSH tunneling, port forwarding, and proxying techniques

020 GitHub stars

03Python-based automation scripts using the Paramiko library

04Multi-tool credential attack methodologies using Hydra and Medusa

05Automated SSH service discovery and banner grabbing

06Detailed configuration auditing for weak ciphers and algorithms

Casos de Uso

01Performing authorized red-team engagements to test credential strength

02Auditing enterprise SSH server configurations for security compliance

03Setting up secure network pivots during complex infrastructure testing

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill