Agent skill · Security

ssh-penetration-testing

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

Nick44,086★ · +407/wk · 1 repos on radarProfile →
claude-codecodexcursorMIT
Install
npx skills add sickn33/agentic-awesome-skills --skill ssh-penetration-testing --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 13 KB
Bundled scripts: none
Declared author: zebbern
Path: skills/ssh-penetration-testing/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 44,414 · +328 this week
Language: Python
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

> **⚠️ AUTHORIZED USE ONLY** > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written permission from the system owner before using this tool. > Misuse of this tool is illegal and strictly prohibited. > **Mandatory confirmation gate** > Before any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target, ask for the exact target URL, IP, account, or resource and confirmation of written authorization and permitted scope. > Show the exact command(s), explain their expected effect, and wait for explicit confirmation in the current conversation. > Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab. # SSH Penetration Testing ## Purpose Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security. ## Prerequisites ### Required Tools - Nmap with SSH scripts - Hydra or Medusa for brute-forcing - ssh-audit

What's inside
Steps it walks through
  1. Purpose
  2. Prerequisites
  3. Required Tools
  4. Required Knowledge
  5. Outputs and Deliverables
  6. Core Workflow
  7. Phase 1: SSH Service Discovery
  8. Phase 2: SSH Enumeration
  9. Phase 3: SSH Configuration Auditing
  10. Phase 4: Credential Attacks
  11. Phase 5: Key-Based Authentication Testing
  12. Phase 6: Vulnerability Exploitation
  13. Phase 7: SSH Tunneling and Port Forwarding
  14. Phase 8: Post-Exploitation
Commands it runs
Quick SSH port scan
nmap -p 22 192.168.1.0/24 --open
Common alternate SSH ports
nmap -p 22,2222,22222,2200 192.168.1.100
Full port scan for SSH
nmap -p- --open 192.168.1.100 | grep -i ssh
Service version detection
nmap -sV -p 22 192.168.1.100
Banner grabbing
nc 192.168.1.100 22
More from agentic-awesome-skills
All skills →
About this skill
What does the ssh-penetration-testing skill do?

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

How do I install it?

Run `npx skills add sickn33/agentic-awesome-skills --skill ssh-penetration-testing --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going