Can I use this skill for network pivoting?

Yes, it includes detailed methodologies for local port forwarding, remote port forwarding, and dynamic port forwarding (SOCKS proxy) to facilitate network movement.

What tools are required for this SSH penetration testing skill?

This skill utilizes industry-standard tools including Nmap for discovery, Hydra or Medusa for brute-forcing, ssh-audit for configuration analysis, and Paramiko for Python automation.

How does it help with SSH hardening?

The skill includes a dedicated configuration auditing phase that identifies weak key exchange algorithms, deprecated ciphers, and MACs that should be disabled to harden the service.

Does it support automated SSH credential testing?

Absolutely. It provides configurations for multi-tool brute-forcing and custom Paramiko scripts for automated login attempts and command execution.

SSH Penetration Testing Toolset

Name: SSH Penetration Testing Toolset
Author: zebbern

byzebbern

•

2,883

•

Security & Testing

Conducts comprehensive SSH security assessments including enumeration, credential testing, and vulnerability exploitation.

This skill equips Claude with a robust methodology for auditing and testing Secure Shell (SSH) services. It provides step-by-step guidance for service discovery, banner grabbing, and configuration auditing using industry-standard tools like Nmap, Hydra, and ssh-audit. Beyond enumeration, it facilitates advanced techniques such as local/remote port forwarding, SOCKS proxying for network pivoting, and automated Python-based credential testing with Paramiko, making it an essential companion for security professionals performing infrastructure audits.

Key Features

01Advanced SSH tunneling and network pivoting techniques

022,883 GitHub stars

03Automated SSH service discovery and version enumeration

04Multi-tool credential testing workflows using Hydra and Medusa

05Post-exploitation automation and persistence identification

06Comprehensive security configuration auditing for weak algorithms

Use Cases

01Performing authorized brute-force tests to validate password policy compliance

02Auditing internal server infrastructure for weak SSH configurations and deprecated versions

03Setting up secure tunnels and pivots during complex network security assessments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zebbern/claude-code-guide ssh-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill