SSH Penetration Testing
Warn
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use various offensive security tools including Nmap, Hydra, Medusa, and the Metasploit Framework for target discovery, service enumeration, and automated credential brute-forcing.
- [PERSISTENCE]: In the post-exploitation section, the skill provides specific commands to establish persistence on a compromised host by appending an SSH public key to the authorized_keys file.
- [DYNAMIC_EXECUTION]: The skill includes a standalone Python script that utilizes the paramiko library to programmatically attempt SSH connections, perform brute-force attacks, and execute commands on remote systems.
Audit Metadata