skills.rest
AndyAnh174
AndyAnh174COMMUNITY
Explore all skills by this author →
WebsiteGitHub

SSH Penetration Testing

Enumerates SSH configurations and tests credentials with Nmap, Hydra, and ssh-audit.

Updated Jan 8, 2026
Search Tags:#vulnerability assessment#penetration testing#security audit#ssh#credential attack#port forwarding
One-click install
npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill ssh-penetration-testing-andyanh174
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: SSH Penetration Testing
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/ssh-penetration-testing
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill ssh-penetration-testing-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, hydra, medusa, ssh-audit, metasploit, paramiko, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for identifying and mitigating vulnerabilities within SSH services, ensuring robust security.

Core Features & Use Cases

  • Vulnerability Assessment: Detects weak configurations, outdated protocols, and known exploits.
  • Credential Attacks: Facilitates brute-force and password spraying against SSH logins.
  • Tunneling & Pivoting: Enables secure network access through SSH tunnels and dynamic port forwarding.
  • Use Case: A security analyst needs to assess the security posture of a newly deployed SSH server. This Skill can be used to discover open SSH ports, enumerate supported algorithms, audit configurations for weaknesses, and attempt to find valid credentials.

Quick Start

Use the SSH Penetration Testing skill to enumerate SSH services on the IP address 192.168.1.100.

Frequently Asked Questions about SSH Penetration Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a brute force attack on SSH to test for weak credentials?▼

Perform SSH credential attacks using brute-forcing tools like Hydra and Medusa to systematically test passwords against target logins. This identifies weak credentials and validates authentication security posture.

How can I enumerate SSH configurations and check for weak algorithms?▼

Enumerate SSH configurations and algorithms using ssh-audit to detect weak configurations, outdated protocols, and supported cryptographic algorithms. This reveals security weaknesses requiring mitigation.

Can I use Nmap for SSH service discovery and vulnerability assessment?▼

Use Nmap for SSH service discovery to find open ports and detect known exploits. This vulnerability assessment identifies exposed services and outdated protocols needing remediation.

How do I set up SSH tunneling and dynamic port forwarding for secure network access?▼

Set up SSH tunneling and dynamic port forwarding for secure network access and pivoting. This enables secure data transmission through encrypted tunnels across network segments.

Does this SSH penetration testing workflow include Python script examples?▼

This SSH penetration testing workflow includes Python script examples using Paramiko. These scripts automate vulnerability exploitation, enumeration, and secure tunneling techniques for auditing SSH security.

Related Skills

Explore More Software Engineering Skills→
chainreactorschainreactors
235

gogo

Automate network reconnaissance to identify live hosts, open ports, and service fingerprints.

Official
Intermediate
utsavthakurutsavthakur

linux-lateral-movement

Perform Linux lateral movement via SSH, credential harvesting, and pivoting.

Community
Advanced
zebbernzebbern
4.5k

SSH Penetration Testing

Automate SSH security assessments with enumeration, credential attacks, and vulnerability exploitation.

Community
Advanced
EastSwordEastSword
52

security_reporter

Generate standardized security vulnerability analysis reports with CVSS 3.1 scoring.

Community
Advanced