What problem does it solve? Security testers need a structured methodology to assess SSH service security, from discovering exposed services and weak configurations to testing credentials and documenting vulnerabilities, without assembling commands from scattered sources. ## Core Features & Use Cases - SSH Enumeration and Auditing: Discover SSH services with Nmap, grab banners, enumerate algorithms, and audit configurations with ssh-audit to find weak ciphers and key exchange methods. - Credential and Key Testing: Run brute-force and password-spraying attacks with Hydra, Medusa, or Metasploit, and test key-based authentication with found private keys. - Tunneling and Post-Exploitation: Set up local, remote, and dynamic port forwarding, chain jump hosts with ProxyJump, and automate SSH actions with Python Paramiko scripts. - Use Case: During an authorized engagement, you find port 22 open on a target. Use this Skill to enumerate the OpenSSH version, audit weak algorithms, test for CVE-2018-15473 username enumeration, and pivot into the internal network via a SOCKS proxy. ## Quick Start Ask the AI to enumerate and audit the SSH service on an authorized target host and report weak configurations and testable credentials.
