Can I use this skill for network pivoting?

Yes, it includes detailed methodologies for local port forwarding, remote port forwarding, and dynamic port forwarding (SOCKS proxy) to facilitate network movement.

What tools are required for this SSH penetration testing skill?

This skill utilizes industry-standard tools including Nmap for discovery, Hydra or Medusa for brute-forcing, ssh-audit for configuration analysis, and Paramiko for Python automation.

How does it help with SSH hardening?

The skill includes a dedicated configuration auditing phase that identifies weak key exchange algorithms, deprecated ciphers, and MACs that should be disabled to harden the service.

Does it support automated SSH credential testing?

Absolutely. It provides configurations for multi-tool brute-forcing and custom Paramiko scripts for automated login attempts and command execution.

SSH Penetration Testing Toolset

Name: SSH Penetration Testing Toolset
Author: zebbern

byzebbern

•

2,883

セキュリティとテスト

Conducts comprehensive SSH security assessments including enumeration, credential testing, and vulnerability exploitation.

概要

This skill equips Claude with a robust methodology for auditing and testing Secure Shell (SSH) services. It provides step-by-step guidance for service discovery, banner grabbing, and configuration auditing using industry-standard tools like Nmap, Hydra, and ssh-audit. Beyond enumeration, it facilitates advanced techniques such as local/remote port forwarding, SOCKS proxying for network pivoting, and automated Python-based credential testing with Paramiko, making it an essential companion for security professionals performing infrastructure audits.

主な機能

Advanced SSH tunneling and network pivoting techniques
2,883 GitHub stars
Automated SSH service discovery and version enumeration
Multi-tool credential testing workflows using Hydra and Medusa
Post-exploitation automation and persistence identification
Comprehensive security configuration auditing for weak algorithms

ユースケース

Performing authorized brute-force tests to validate password policy compliance
Auditing internal server infrastructure for weak SSH configurations and deprecated versions
Setting up secure tunnels and pivots during complex network security assessments

概要

主な機能

Advanced SSH tunneling and network pivoting techniques
2,883 GitHub stars
Automated SSH service discovery and version enumeration
Multi-tool credential testing workflows using Hydra and Medusa
Post-exploitation automation and persistence identification
Comprehensive security configuration auditing for weak algorithms

ユースケース

Performing authorized brute-force tests to validate password policy compliance
Auditing internal server infrastructure for weak SSH configurations and deprecated versions
Setting up secure tunnels and pivots during complex network security assessments