SSH Penetration Testing
This is a comprehensive SSH security testing workflow that walks you through the full penetration testing methodology, from initial enumeration with Nmap and ssh-audit to credential attacks with Hydra, then exploitation and post-compromise activities. It assumes you've got the standard toolkit installed (Metasploit, Paramiko, the usual suspects). Honestly, it's more of a structured checklist than automation, which makes sense for this type of work where you need to understand what you're doing at each step. If you're learning SSH pentesting or want a systematic approach to auditing SSH services, this gives you the roadmap. Just remember this is educational and authorized testing only, the legal disclaimers matter here.
- GitHub stars
- 30.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill 'SSH Penetration Testing' --agent claude-codeInstalls into .claude/skills of the current project.
Files
SSH Penetration Testing
Purpose
Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.
Prerequisites
Required Tools
- Nmap with SSH scripts
- Hydra or Medusa for brute-forcing
- ssh-audit for configuration analysis
- Metasploit Framework
- Python with Paramiko library
Required Knowledge
- SSH protocol fundamentals
- Public/private key authentication
- Port forwarding concepts
- Linux command-line proficiency
Outputs and Deliverables
- SSH Enumeration Report - Versions, algorithms, configurations
- Credential Assessment - Weak passwords, default credentials
- Vulnerability Assessment - Known CVEs, misconfigurations
- Tunnel Documentation - Port forwarding configurations
Core Workflow
Phase 1: SSH Service Discovery
Identify SSH services on target networks:
# Quick SSH port scan
nmap -p 22 192.168.1.0/24 --open
# Common alternate SSH ports
nmap -p 22,2222,22222,2200 192.168.1.100
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Categories
- Testing & QA, Security
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Top 100 Web Vulnerabilities Reference
- Windows Privilege Escalation
- Wireshark Network Traffic Analysis
- WordPress Penetration Testing
- Writing Hookify Rules
- Senior Data Scientist3.2K
- Senior Backend2.7K
- Markitdown2.5K
- Senior Frontend2.1K
- Scientific Writing2K
- Literature Review2K
- Market Research Reports1.9K
- Ui Ux Pro Max1.9K
- Exploratory Data Analysis1.9K
- Mobile Design1.8K
- Senior Data Engineer1.8K
- Ui Design System1.7K
- Stable Diffusion Image Generation1.7K
- Scientific Visualization1.6K
- Remotion1.5K
- Prompt Engineer1.5K
- Whisper1.5K
- Citation Management1.4K
- Scientific Slides1.4K
Recommended
More Testing & QA
WordPress Penetration Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins"0skills.sh installs
battle-testhoangnguyen0403/agent-skills-standardDeep audit of a skills directory against the Skill Creator standard. Produces a scored report and phased remediation plan.0skills.sh installssecurity-testhoangnguyen0403/agent-skills-standardFast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.0skills.sh installs
playwright-rollmicrosoft/playwright-pythonRoll Playwright Python to a new version0skills.sh installs