SSH Penetration Testing
Fail
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing a wide range of offensive security tools, including Nmap, Hydra, Medusa, and Metasploit, which are used to attack SSH services.
- [COMMAND_EXECUTION]: Phase 8 includes commands to establish persistent access by appending a public key to the 'authorized_keys' file and checking for privilege escalation opportunities via 'sudo -l'.
- [DATA_EXFILTRATION]: The methodology includes commands to locate and read sensitive SSH private keys (e.g., id_rsa, id_dsa) across the file system and within user directories.
- [EXTERNAL_DOWNLOADS]: Phase 5 contains instructions to use 'curl' to attempt to download private keys from remote web-accessible directories, which could be used to facilitate credential theft.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests untrusted data from network service banners and audit tool outputs while possessing extensive shell execution capabilities.
- Ingestion points: Network banners (nc/telnet), Nmap script outputs, ssh-audit results.
- Boundary markers: None identified.
- Capability inventory: Shell command execution (nmap, hydra, ssh, msfconsole, sudo, find, echo), file system writing, and network operations.
- Sanitization: None identified.
Recommendations
- AI detected serious security threats
Audit Metadata