Is this skill suitable for hardening my own servers?

Yes, the configuration auditing phase is specifically designed to identify weak algorithms and ciphers, providing recommendations for server hardening.

What tools are required to use this SSH penetration testing skill?

This skill utilizes standard security industry tools including Nmap, Hydra, Medusa, ssh-audit, Metasploit, and Python libraries like Paramiko.

Can I use this skill to find specific SSH vulnerabilities?

Absolutely. It includes workflows for identifying known CVEs, such as username enumeration (CVE-2018-15473) and roaming vulnerabilities.

Does this skill support SSH tunneling and pivoting?

Yes, it provides detailed command structures for local, remote, and dynamic (SOCKS) port forwarding, as well as ProxyJump for multi-host chaining.

Can Claude Code automate SSH brute-forcing with this skill?

While Claude provides the precise commands and logic for tools like Hydra, actual execution depends on your local environment and adherence to authorized testing policies.

SSH Penetration Testing

Name: SSH Penetration Testing
Author: sickn33

bysickn33

•

1,991

•

Security & Testing

Conducts comprehensive SSH security assessments including enumeration, vulnerability exploitation, and advanced tunneling techniques.

This skill provides a battle-tested framework for auditing and testing Secure Shell (SSH) services. It guides AI agents through the entire penetration testing lifecycle, from initial service discovery and banner grabbing to sophisticated configuration auditing using tools like ssh-audit. Users can leverage detailed methodologies for credential attacks with Hydra and Medusa, explore known CVEs, and implement complex network pivoting strategies through local, remote, and dynamic port forwarding. It is an essential toolkit for security researchers and system administrators aiming to harden remote access infrastructure or conduct authorized Red Team operations.

Key Features

01Post-exploitation guidance and Paramiko-based custom automation scripts

02Comprehensive configuration auditing for weak ciphers and algorithms

03Automated SSH service discovery and banner grabbing workflows

04Credential assessment methodologies for brute-forcing and password spraying

051,991 GitHub stars

06Advanced network pivoting via local, remote, and dynamic SSH tunneling

Use Cases

01Establishing secure pivots and tunnels in complex network environments

02Auditing enterprise SSH servers for compliance and security hardening

03Testing remote access resilience during authorized penetration tests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sickn33/antigravity-awesome-skills ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill