概要
The SSH Penetration Testing skill provides a complete methodology for auditing and exploiting SSH service security. It guides users through every critical phase of an assessment, from initial service discovery and banner grabbing to advanced configuration auditing with tools like ssh-audit. It includes specialized patterns for credential brute-forcing with Hydra and Medusa, key-based authentication testing, and identified vulnerability exploitation for known OpenSSH CVEs. Additionally, it provides detailed workflows for network pivoting via local, remote, and dynamic SSH tunneling, making it an essential tool for security professionals and system administrators.
