skills.rest
KaiserWhoLearns
KaiserWhoLearnsCOMMUNITY
Explore all skills by this author →
Website𝕏@KaiserWhoLearnsGitHub

ssh-penetration-testing

Enumerate SSH services and audit configurations for weaknesses.

Updated Jan 15, 2026
Search Tags:#security#audit#ssh#enumeration#tunneling#penetration-testing#credential-testing
One-click install
npx skills add https://github.com/KaiserWhoLearns/skillsbench --skill ssh-penetration-testing-kaiserwholearns
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssh-penetration-testing
Source: https://github.com/KaiserWhoLearns/skillsbench/tree/main/tasks/fix-erlang-ssh-cve/environment/skills/ssh-penetration-testing
Command: npx skills add https://github.com/KaiserWhoLearns/skillsbench --skill ssh-penetration-testing-kaiserwholearns

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SSH services are frequently misconfigured or vulnerable to weak credentials, enabling unauthorized access and lateral movement. This Skill provides a structured methodology to enumerate SSH services, test credentials, audit configurations, and explore tunneling and post-exploitation techniques.

Core Features & Use Cases

  • SSH enumeration and version detection to determine exposed services and supported algorithms.
  • Credential testing and brute-force resistance assessment using common tools.
  • Configuration auditing to identify weak key exchange, ciphers, MACs, and protocol settings.
  • Tunneling and port-forwarding workflows to validate secure access and pivoting risks.
  • Post-exploitation workflow guidance for safe assessment and evidence collection in authorized environments.

Quick Start

Provide a target host and credentials to initiate a standard SSH security assessment and enumeration.

Frequently Asked Questions about ssh-penetration-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit SSH configurations for weak ciphers and key exchange algorithms?▼

To audit SSH configurations, you can run ssh-audit to detect weak key exchange algorithms, supported ciphers, and MAC settings. This identifies misconfigurations in protocol versions and algorithm choices across Linux servers and cloud environments.

How do I enumerate SSH services and detect exposed versions?▼

SSH enumeration involves scanning target hosts with nmap to identify exposed SSH services and detect specific software versions. This determines supported algorithms and potential vulnerabilities before deeper credential testing.

What is the best way to test SSH credential strength during a penetration test?▼

You can assess brute-force resistance in SSH security assessments by using tools like hydra or medusa to automate credential testing against target hosts. This validates authentication policy strength and identifies weak credentials.

How does SSH tunneling and port forwarding work in red team engagements?▼

SSH tunneling enables port forwarding to validate secure access and assess pivoting risks during red team engagements. It allows testers to route traffic through compromised SSH services to reach internal networks.

Can I use Paramiko scripting for custom SSH post-exploitation workflows?▼

Yes, you can use Paramiko scripting to automate custom SSH post-exploitation workflows and evidence collection. This enables safe assessment of compromised Linux servers through programmatic service interaction.

Related Skills

Explore More Software Engineering Skills→
jokken79jokken79
1

SSH Penetration Testing

Assess SSH services, configurations, and credential weaknesses in authorized engagements.

Community
Advanced
bipinksbipinks
3

security-hardening

Automate CIS-based security hardening for Linux servers and cloud environments.

Community
Advanced
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced