ssh penetration testing

SKILL.md

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

| nc 22 | Banner grabbing | | ssh-audit | Configuration audit | | nmap --script ssh | SSH NSE scripts | | searchsploit openssh | Find exploits |

| Hydra | hydra -l user -P pass.txt ssh://host | | Medusa | medusa -h host -u user -P pass.txt -M ssh | | Ncrack | ncrack -p 22 --user admin -P pass.txt host | | Metasploit | use auxiliary/scanner/ssh/sshlogin |

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques. Source: jpropato/siba.

View raw