# SSH Penetration Testing

> This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.

- Skill: `dokhacgiakhoa/ssh-penetration-testing` (Agent Skill, multi-file: 20 files)
- Install (CLI): `npx skillmds@latest add dokhacgiakhoa/ssh-penetration-testing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dokhacgiakhoa/ssh-penetration-testing/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: Dokhacgiakhoa (https://skillmd.com/u/dokhacgiakhoa)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/dokhacgiakhoa/ssh-penetration-testing

---


# SSH Penetration Testing

## Purpose

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

## Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Tools](./sub-skills/required-tools.md)
### 2. [Required Knowledge](./sub-skills/required-knowledge.md)
### 3. [Phase 1: SSH Service Discovery](./sub-skills/phase-1-ssh-service-discovery.md)
### 4. [Phase 2: SSH Enumeration](./sub-skills/phase-2-ssh-enumeration.md)
### 5. [Phase 3: SSH Configuration Auditing](./sub-skills/phase-3-ssh-configuration-auditing.md)
### 6. [Phase 4: Credential Attacks](./sub-skills/phase-4-credential-attacks.md)
### 7. [Phase 5: Key-Based Authentication Testing](./sub-skills/phase-5-key-based-authentication-testing.md)
### 8. [Phase 6: Vulnerability Exploitation](./sub-skills/phase-6-vulnerability-exploitation.md)
### 9. [Phase 7: SSH Tunneling and Port Forwarding](./sub-skills/phase-7-ssh-tunneling-and-port-forwarding.md)
### 10. [Phase 8: Post-Exploitation](./sub-skills/phase-8-post-exploitation.md)
### 11. [Phase 9: Custom SSH Scripts with Paramiko](./sub-skills/phase-9-custom-ssh-scripts-with-paramiko.md)
### 12. [Phase 10: Metasploit SSH Modules](./sub-skills/phase-10-metasploit-ssh-modules.md)
### 13. [SSH Enumeration Commands](./sub-skills/ssh-enumeration-commands.md)
### 14. [Brute-Force Options](./sub-skills/brute-force-options.md)
### 15. [Port Forwarding Types](./sub-skills/port-forwarding-types.md)
### 16. [Common SSH Ports](./sub-skills/common-ssh-ports.md)
### 17. [Legal Considerations](./sub-skills/legal-considerations.md)
### 18. [Technical Limitations](./sub-skills/technical-limitations.md)
### 19. [Evasion Techniques](./sub-skills/evasion-techniques.md)