Useful Commands/Security - Revision history

Tacoball: /* Frequently Used Commands */

2025-11-12T08:05:09Z

Frequently Used Commands

← Older revision		Revision as of 08:05, 12 November 2025
Line 78:		Line 78:
	# Generate ed25519 key		# Generate ed25519 key
	ssh-keygen -t ed25519 -f sucks.pem		ssh-keygen -t ed25519 -f sucks.pem
			ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Frequently Used Commands */

2025-11-12T08:00:43Z

Frequently Used Commands

← Older revision		Revision as of 08:00, 12 November 2025
Line 76:		Line 76:
	# Save as thefuck, thefuck.pub with password		# Save as thefuck, thefuck.pub with password
	ssh-keygen -f abc -N '12345'		ssh-keygen -f abc -N '12345'
			# Generate ed25519 key
			ssh-keygen -t ed25519 -f sucks.pem
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Access resources without VPN */

2025-04-03T20:27:14Z

Access resources without VPN

← Older revision		Revision as of 20:27, 3 April 2025
Line 97:		Line 97:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d \		sudo socat -d -d \
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	udp4-sendto:8.8.8.8:53		udp4-sendto:8.8.8.8:53
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS1" theme="warm">		<quickgv name="LS1" theme="warm">
Line 126:		Line 126:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d \		sudo socat -d -d \
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
Line 134:		Line 134:
	tcp4-listen:1053,bind=127.0.0.1,fork \		tcp4-listen:1053,bind=127.0.0.1,fork \
	udp4-sendto:8.8.8.8:53		udp4-sendto:8.8.8.8:53
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS2" theme="warm">		<quickgv name="LS2" theme="warm">
Line 161:		Line 161:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1. SSH -> TCP -> UDP (Run at Office)		# Step 1. SSH -> TCP -> UDP (Run at Office)
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
Line 173:		Line 173:
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS3" theme="warm">		<quickgv name="LS3" theme="warm">
Line 203:		Line 203:

	== Lesson 4: Forward HTTP ==		== Lesson 4: Forward HTTP ==
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1. SSH -> TCP -> UDP (Run at Office)		# Step 1. SSH -> TCP -> UDP (Run at Office)
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
Line 219:		Line 219:
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &
	</~~source~~>		</syntaxhighlight>

	<quickgv name="LS4" theme="warm">		<quickgv name="LS4" theme="warm">
Line 272:		Line 272:
	Create SOCKS and TCP DNS services.		Create SOCKS and TCP DNS services.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
	tcp4-listen:1053,bind=127.0.0.1,fork \		tcp4-listen:1053,bind=127.0.0.1,fork \
Line 278:		Line 278:

	ssh -NCf -D 127.0.0.1:3128 localhost		ssh -NCf -D 127.0.0.1:3128 localhost
	</~~source~~>		</syntaxhighlight>

	=== ~/bin/mktun.sh ===		=== ~/bin/mktun.sh ===
	Make tunnels.		Make tunnels.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	ssh -NCf \		ssh -NCf \
	-MS revtun.ctrl \		-MS revtun.ctrl \
Line 289:		Line 289:
	-R 13128:127.0.0.1:3128 \		-R 13128:127.0.0.1:3128 \
	home		home
	</~~source~~>		</syntaxhighlight>

	=== ~/bin/rmtun.sh ===		=== ~/bin/rmtun.sh ===
	Remove tunnels.		Remove tunnels.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	if [ -e /tmp/revtun.ctrl ]; then		if [ -e /tmp/revtun.ctrl ]; then
	ssh -S /tmp/revtun.ctrl -O exit home		ssh -S /tmp/revtun.ctrl -O exit home
	fi		fi
	</~~source~~>		</syntaxhighlight>

	=== ~/.ssh/config ===		=== ~/.ssh/config ===
	Make the ssh connection more reliable.		Make the ssh connection more reliable.

	<~~source~~ lang="text" highlight="5-7">		<syntaxhighlight lang="text" highlight="5-7">
	Host home		Host home
	Hostname x.x.x.x		Hostname x.x.x.x
Line 311:		Line 311:
	ServerAliveInterval 60		ServerAliveInterval 60
	ServerAliveCountMax 3		ServerAliveCountMax 3
	</~~source~~>		</syntaxhighlight>

	=== crontab -e ===		=== crontab -e ===
	Create tunnels during 7:30~09:30, 21:00~22:00 only.		Create tunnels during 7:30~09:30, 21:00~22:00 only.
	<~~source~~ lang="text">		<syntaxhighlight lang="text">
	# 07:30 ~ 09:30		# 07:30 ~ 09:30
	30 07 * * * ~/bin/mktun.sh		30 07 * * * ~/bin/mktun.sh
Line 322:		Line 322:
	00 21 * * * ~/bin/mktun.sh		00 21 * * * ~/bin/mktun.sh
	00 22 * * * ~/bin/rmtun.sh		00 22 * * * ~/bin/rmtun.sh
	</~~source~~>		</syntaxhighlight>

	=== Homework ===		=== Homework ===
	Do it at home. NAS is a good choice.		Do it at home. NAS is a good choice.
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d -lf socat-dns.log \		sudo socat -d -d -lf socat-dns.log \
	udp4-recvfrom:53,bind=*,fork \		udp4-recvfrom:53,bind=*,fork \
Line 334:		Line 334:
	tcp4-listen:3128,bind=*,fork \		tcp4-listen:3128,bind=*,fork \
	tcp4:127.0.0.1:13128		tcp4:127.0.0.1:13128
	</~~source~~>		</syntaxhighlight>

Tacoball: /* Frequently Used Commands */

2025-04-03T20:25:12Z

Frequently Used Commands

← Older revision		Revision as of 20:25, 3 April 2025
Line 4:		Line 4:
	\|-		\|-
	\| Automatically accept fingerprint. \|\|		\| Automatically accept fingerprint. \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	ssh -o "StrictHostKeyChecking no" ...		ssh -o "StrictHostKeyChecking no" ...
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Indirect outgoing for PostgreSQL \|\|		\| Indirect outgoing for PostgreSQL \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# [Private]		# [Private]
	# localhost -> localhost:15432		# localhost -> localhost:15432
Line 21:		Line 21:
	# -> somewhere.com:5432		# -> somewhere.com:5432
	ssh -NCfL *:15432:somewhere.com:5432 server		ssh -NCfL *:15432:somewhere.com:5432 server
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Indirect outgoing for Web \|\|		\| Indirect outgoing for Web \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# [Private]		# [Private]
	# localhost -> localhost:3128		# localhost -> localhost:3128
Line 36:		Line 36:
	# -> :		# -> :
	ssh -NCfD *:3128 server		ssh -NCfD *:3128 server
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Share MariaDB in LAN \|\|		\| Share MariaDB in LAN \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1: Listen (Run at LAN)		# Step 1: Listen (Run at LAN)
	# Listen server:13306 -> server:22		# Listen server:13306 -> server:22
Line 51:		Line 51:
	# -> localhost:3306		# -> localhost:3306
	ssh -NCfL *:3306:localhost:13306 localhost		ssh -NCfL *:3306:localhost:13306 localhost
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| List tunnels \|\|		\| List tunnels \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# List full commands.		# List full commands.
	ps ax \| awk '/ssh \-NCf/ { print $0 }'		ps ax \| awk '/ssh \-NCf/ { print $0 }'
Line 66:		Line 66:
	# Kill all tunnels.		# Kill all tunnels.
	kill $(ps ax \| awk '/ssh \-NCf/ { print $1 }')		kill $(ps ax \| awk '/ssh \-NCf/ { print $1 }')
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Generate key pair \|\|		\| Generate key pair \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Save as default name id_rsa, id_rsa.pub		# Save as default name id_rsa, id_rsa.pub
	ssh-keygen		ssh-keygen
Line 76:		Line 76:
	# Save as thefuck, thefuck.pub with password		# Save as thefuck, thefuck.pub with password
	ssh-keygen -f abc -N '12345'		ssh-keygen -f abc -N '12345'
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Generate public key from private key \|\|		\| Generate public key from private key \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Dump		# Dump
	ssh-keygen -yf thefuck.pem		ssh-keygen -yf thefuck.pem
Line 88:		Line 88:
	# Append into authorized_keys		# Append into authorized_keys
	ssh-keygen -yf thefuck.pem >> authorized_keys		ssh-keygen -yf thefuck.pem >> authorized_keys
	</~~source~~>		</syntaxhighlight>
	\|}		\|}

Tacoball: /* Frequently Used Commands */

2020-12-29T07:54:01Z

Frequently Used Commands

← Older revision		Revision as of 07:54, 29 December 2020
Line 2:		Line 2:
	{\| class="wikitable"		{\| class="wikitable"
	! TODO \|\| Command		! TODO \|\| Command
			\|-
			\| Automatically accept fingerprint. \|\|
			<source lang="bash">
			ssh -o "StrictHostKeyChecking no" ...
			</source>
	\|-		\|-
	\| Indirect outgoing for PostgreSQL \|\|		\| Indirect outgoing for PostgreSQL \|\|

Tacoball: /* crontab -e */

2019-03-08T03:59:52Z

crontab -e

← Older revision		Revision as of 03:59, 8 March 2019
Line 311:		Line 311:
	Create tunnels during 7:30~09:30, 21:00~22:00 only.		Create tunnels during 7:30~09:30, 21:00~22:00 only.
	<source lang="text">		<source lang="text">
	30 7 * * * ~/bin/mktun.sh		# 07:30 ~ 09:30
	30 9 * * * ~/bin/rmtun.sh		30 07 * * * ~/bin/mktun.sh
	00 21 * * * ~/bin/mktun.sh		30 09 * * * ~/bin/rmtun.sh
	00 22 * * * ~/bin/rmtun.sh		# 21:00 ~ 22:00
			00 21 * * * ~/bin/mktun.sh
			00 22 * * * ~/bin/rmtun.sh
	</source>		</source>

Tacoball: /* DNS */

2019-03-06T04:22:37Z

DNS

← Older revision		Revision as of 04:22, 6 March 2019
Line 317:		Line 317:
	</source>		</source>

	=== ~~DNS~~ ===		=== Homework ===
	Do it at home. ~~Home~~ NAS is a good choice.		Do it at home. NAS is a good choice.
	<source lang="bash">		<source lang="bash">
	sudo socat -d -d -lf socat-dns.log \		sudo socat -d -d -lf socat-dns.log \

Tacoball: /* DNS */

2019-03-06T04:21:32Z

DNS

← Older revision		Revision as of 04:21, 6 March 2019
Line 320:		Line 320:
	Do it at home. Home NAS is a good choice.		Do it at home. Home NAS is a good choice.
	<source lang="bash">		<source lang="bash">
	sudo socat -d -d -lf socat.log \		sudo socat -d -d -lf socat-dns.log \
	udp4-recvfrom:53,bind=*,fork \		udp4-recvfrom:53,bind=*,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &

			sudo socat -d -d -lf socat-socks.log \
			tcp4-listen:3128,bind=*,fork \
			tcp4:127.0.0.1:13128
	</source>		</source>

Tacoball: /* ~/bin/mktun.sh */

2019-03-06T04:19:54Z

~/bin/mktun.sh

← Older revision		Revision as of 04:19, 6 March 2019
Line 282:		Line 282:
	-MS revtun.ctrl \		-MS revtun.ctrl \
	-R 1053:127.0.0.1:1053 \		-R 1053:127.0.0.1:1053 \
	-R ~~3128~~:127.0.0.1:3128 \		-R 13128:127.0.0.1:3128 \
	home		home
	</source>		</source>

Tacoball: /* DNS */

2019-03-06T04:19:13Z

DNS

← Older revision		Revision as of 04:19, 6 March 2019
Line 318:		Line 318:

	=== DNS ===		=== DNS ===
			Do it at home. Home NAS is a good choice.
	<source lang="bash">		<source lang="bash">
	sudo socat -d -d -lf socat.log \		sudo socat -d -d -lf socat.log \
	udp4-recvfrom:53,bind=~~127.0.0.1~~,fork \		udp4-recvfrom:53,bind=*,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &
	</source>		</source>