Which tools are required to use this SSH penetration testing skill?

This skill leverages industry-standard security tools including Nmap (with SSH scripts), Hydra, Medusa, ssh-audit, and the Metasploit Framework.

Does it support automated SSH scripting?

Absolutely. It provides specific implementation patterns for Python's Paramiko library to automate connection testing, command execution, and custom brute-force logic.

How does the skill handle network pivoting?

It provides comprehensive guides for Local, Remote, and Dynamic (SOCKS Proxy) port forwarding, as well as ProxyJump configurations for chaining through multiple hosts.

Can this skill help with SSH server hardening?

Yes, it includes a dedicated configuration auditing phase that identifies weak key exchange algorithms, deprecated ciphers, and insecure MACs to provide hardening suggestions.

SSH Penetration Testing

Name: SSH Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

Security & Testing

Conducts comprehensive SSH security audits, credential assessments, and vulnerability exploitation to identify and remediate remote access weaknesses.

This skill provides a complete, phase-based methodology for testing and securing SSH services, ranging from initial service discovery and banner grabbing to advanced tunneling techniques and post-exploitation activities. It guides users through systematic workflows including configuration auditing for weak algorithms, automated credential testing with industry-standard tools like Hydra and Medusa, and identifying known CVEs. Designed for security professionals and system administrators, it ensures that SSH implementations are hardened against modern attack vectors while providing practical templates for network pivoting and secure port forwarding.

Key Features

01Python-based SSH automation patterns using the Paramiko library

02Advanced SSH tunneling, port forwarding, and SOCKS proxy configurations

03Detailed configuration auditing for weak ciphers and exchange algorithms

04Automated SSH service discovery and banner grabbing

05Comprehensive credential attack workflows for brute-forcing and password spraying

060 GitHub stars

Use Cases

01Establishing secure network pivots and jump hosts to navigate complex internal architectures

02Identifying weak user credentials and exposed private keys during authorized security assessments

03Auditing enterprise SSH configurations for security compliance and infrastructure hardening

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill

Key Features

01Python-based SSH automation patterns using the Paramiko library

02Advanced SSH tunneling, port forwarding, and SOCKS proxy configurations

03Detailed configuration auditing for weak ciphers and exchange algorithms

04Automated SSH service discovery and banner grabbing

05Comprehensive credential attack workflows for brute-forcing and password spraying

060 GitHub stars

Use Cases

01Establishing secure network pivots and jump hosts to navigate complex internal architectures

02Identifying weak user credentials and exposed private keys during authorized security assessments

03Auditing enterprise SSH configurations for security compliance and infrastructure hardening

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill