reverse-ssh

Establish reverse SSH tunnels for interactive shell access and port forwarding.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill reverse-ssh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reverse-ssh
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/shells/reverse-ssh
Command: npx skills add https://github.com/AeonDave/malskill --skill reverse-ssh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables establishing reverse SSH tunnels from a victim machine to an attacker machine, providing interactive shell access even when the victim is behind a NAT or firewall and cannot be directly reached.

Core Features & Use Cases

  • Bypass NAT/Firewalls: Connect to systems that are not directly exposed to the internet.
  • Interactive Shell Access: Gain a stable SSH shell on the victim machine.
  • Port Forwarding: Tunnel specific ports through the established reverse SSH connection.
  • SOCKS5 Proxy: Set up a SOCKS5 proxy for broader network access.
  • Use Case: Accessing a development server within a private network from your home machine without configuring complex port forwarding on the network edge.

Quick Start

Execute the reverse-ssh binary on the victim machine, providing the attacker's IP address and port to establish the tunnel.

Frequently Asked Questions about reverse-ssh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I establish an SSH connection to a machine behind a NAT or firewall?

To establish an SSH connection behind a NAT or firewall, you can use a reverse SSH tunnel. This initiates an outbound connection from the target system to your server, bypassing inbound network restrictions to provide interactive shell access.

What is a reverse SSH tunnel and when do I need one?

A reverse SSH tunnel is a technique where a target machine connects outward to an attacker-controlled server. You need it when the target is behind a firewall or NAT and cannot accept direct inbound SSH connections from the internet.

How do I set up a SOCKS5 proxy through an SSH tunnel?

You can set up a SOCKS5 proxy through an SSH tunnel by executing the reverse-ssh binary on the target machine. This establishes a connection to your server and enables SOCKS5 proxy tunneling for broader network access and port forwarding.

Can I use reverse SSH tunneling on different operating systems?

Yes, reverse SSH tunneling supports cross-compilation for various operating systems. You can compile and execute the binary on the target machine regardless of the OS, ensuring comprehensive remote access across different environments.

What is the best way to access a development server within a private network?

The best way to access a development server within a private network is using a reverse SSH tunnel. It connects the internal server to your external machine, avoiding complex port forwarding configurations on the network edge.