Ssh Penetration Testing

This walks you through the full SSH pentest methodology, from discovery and enumeration to credential attacks and post-exploitation. You get Nmap scripts for service detection, Hydra and Medusa commands for brute forcing, ssh-audit for finding weak ciphers and key exchanges, and comprehensive tunneling techniques including local/remote port forwarding and SOCKS proxies. The Paramiko section is cut off but the rest is detailed enough to follow without filling in gaps. It's thorough on the offensive side but light on defensive recommendations beyond identifying misconfigurations. Good for authorized assessments where you need a structured approach rather than just running tools blindly. Remember this is strictly for authorized testing, the legal boundaries around SSH attacks are not ambiguous.

skills.sh installs: 242
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill ssh-penetration-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Mandatory confirmation gate Before any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target, ask for the exact target URL, IP, account, or resource and confirmation of written authorization and permitted scope. Show the exact command(s), explain their expected effect, and wait for explicit confirmation in the current conversation. Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

SSH Penetration Testing

Purpose

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.