What tools are required to use the SSH Penetration Testing skill?

This skill utilizes industry-standard tools including Nmap for discovery, Hydra or Medusa for credential testing, ssh-audit for configuration analysis, and Metasploit for vulnerability exploitation.

Does this skill provide guidance on SSH hardening?

Yes, it includes a specific phase for configuration auditing that identifies weak key exchange algorithms, ciphers, and MACs, providing the necessary information to harden the service.

Can I use this skill to set up network pivots?

Absolutely. The skill contains detailed instructions for local and remote port forwarding, as well as dynamic port forwarding to create SOCKS proxies for network pivoting.

Is Python automation supported in this skill?

Yes, the skill provides ready-to-use Python snippets using the Paramiko library for automating SSH connections, command execution, and custom brute-force scripts.

SSH Penetration Testing

Name: SSH Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

보안 및 테스팅

Conducts comprehensive SSH security audits including service discovery, configuration analysis, credential testing, and advanced tunneling techniques.

This skill provides a complete methodology for evaluating and exploiting SSH services during authorized security assessments. It guides users through the entire penetration testing lifecycle, from initial enumeration and banner grabbing to complex credential attacks using tools like Hydra and Medusa. Beyond simple access testing, the skill covers deep configuration auditing with ssh-audit, vulnerability exploitation for known CVEs via Metasploit, and sophisticated post-exploitation maneuvers like local, remote, and dynamic port forwarding. It is an essential resource for security professionals and system administrators aiming to identify and remediate SSH-based security risks.

주요 기능

01Comprehensive brute-force and password spraying techniques

020 GitHub stars

03Advanced SSH tunneling and SOCKS proxy configuration guidance

04Detailed configuration auditing for weak ciphers and algorithms

05Custom Python automation scripts using the Paramiko library

06Automated service discovery and banner grabbing workflows

사용 사례

01Identifying and hardening misconfigured SSH services against modern threats

02Performing authorized infrastructure security assessments and audits

03Establishing secure network pivoting and jump host configurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill

주요 기능

01Comprehensive brute-force and password spraying techniques

020 GitHub stars

03Advanced SSH tunneling and SOCKS proxy configuration guidance

04Detailed configuration auditing for weak ciphers and algorithms

05Custom Python automation scripts using the Paramiko library

06Automated service discovery and banner grabbing workflows

사용 사례

01Identifying and hardening misconfigured SSH services against modern threats

02Performing authorized infrastructure security assessments and audits

03Establishing secure network pivoting and jump host configurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill