ssh-penetration-testing
Warn
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes multiple command-line tools for discovery, enumeration, and password brute-forcing.
- Evidence: Implementation of
nmap,hydra,medusa,nc, andtelnetcommands for scanning and credential attacks in SKILL.md. - [DATA_EXFILTRATION]: Instructions include harvesting sensitive data and private credentials from target systems.
- Evidence: Commands to locate and read private SSH keys (
id_rsa, etc.) and search bash history files for hardcoded passwords in SKILL.md. - [REMOTE_CODE_EXECUTION]: The skill enables the execution of arbitrary commands on remote hosts through specialized tools.
- Evidence: Usage of Metasploit modules and Python scripts employing the
paramikolibrary for post-exploitation command execution in SKILL.md. - [PERSISTENCE_MECHANISMS]: The skill details steps to maintain permanent access to a compromised system.
- Evidence: Instructions for appending an SSH public key to the
~/.ssh/authorized_keysfile to establish a backdoor in SKILL.md.
Audit Metadata