Is this skill suitable for hardening my own servers?

Yes, the configuration auditing phase is specifically designed to identify weak algorithms and ciphers, providing recommendations for server hardening.

What tools are required to use this SSH penetration testing skill?

This skill utilizes standard security industry tools including Nmap, Hydra, Medusa, ssh-audit, Metasploit, and Python libraries like Paramiko.

Can I use this skill to find specific SSH vulnerabilities?

Absolutely. It includes workflows for identifying known CVEs, such as username enumeration (CVE-2018-15473) and roaming vulnerabilities.

Does this skill support SSH tunneling and pivoting?

Yes, it provides detailed command structures for local, remote, and dynamic (SOCKS) port forwarding, as well as ProxyJump for multi-host chaining.

Can Claude Code automate SSH brute-forcing with this skill?

While Claude provides the precise commands and logic for tools like Hydra, actual execution depends on your local environment and adherence to authorized testing policies.

SSH Penetration Testing

Name: SSH Penetration Testing
Author: sickn33

bysickn33

•

1,991

보안 및 테스팅

Conducts comprehensive SSH security assessments including enumeration, vulnerability exploitation, and advanced tunneling techniques.

소개

This skill provides a battle-tested framework for auditing and testing Secure Shell (SSH) services. It guides AI agents through the entire penetration testing lifecycle, from initial service discovery and banner grabbing to sophisticated configuration auditing using tools like ssh-audit. Users can leverage detailed methodologies for credential attacks with Hydra and Medusa, explore known CVEs, and implement complex network pivoting strategies through local, remote, and dynamic port forwarding. It is an essential toolkit for security researchers and system administrators aiming to harden remote access infrastructure or conduct authorized Red Team operations.

주요 기능

Post-exploitation guidance and Paramiko-based custom automation scripts
Comprehensive configuration auditing for weak ciphers and algorithms
Automated SSH service discovery and banner grabbing workflows
Credential assessment methodologies for brute-forcing and password spraying
1,991 GitHub stars
Advanced network pivoting via local, remote, and dynamic SSH tunneling

사용 사례

Establishing secure pivots and tunnels in complex network environments
Auditing enterprise SSH servers for compliance and security hardening
Testing remote access resilience during authorized penetration tests

소개

주요 기능

Post-exploitation guidance and Paramiko-based custom automation scripts
Comprehensive configuration auditing for weak ciphers and algorithms
Automated SSH service discovery and banner grabbing workflows
Credential assessment methodologies for brute-forcing and password spraying
1,991 GitHub stars
Advanced network pivoting via local, remote, and dynamic SSH tunneling

사용 사례

Establishing secure pivots and tunnels in complex network environments
Auditing enterprise SSH servers for compliance and security hardening
Testing remote access resilience during authorized penetration tests