Useful Commands/Security

情境	指令
Indirect Outgoing	# [Private] # localhost -> localhost:8888 # -> server:22 # -> somewhere.com:80 ssh -NCfL 127.0.0.1:8888:somewhere.com:80 server # [Shared] # any -> *:8888 # -> server:22 # -> somewhere.com:80 ssh -NCfL *:8888:somewhere.com:80 server
Indirect outgoing for Web	# [Private] # localhost -> localhost:3128 # -> server:22 # -> *:* ssh -NCfD localhost:3128 server # [Shared] # any -> *:3128 # -> server:22 # -> *:* ssh -NCfD *:3128 server
Share MariaDB in LAN	# Step 1: Listen (Run at LAN) # Listen server:13306 -> server:22 # -> localhost:3306 ssh -NCfR 13306:localhost:3306 server # Step 2: Share (Run at Home/WAN) # any -> server:3306 # -> server:13306 # -> server:22 # -> localhost:3306 ssh -NCfL *:3306:localhost:13306 localhost
List tunnels	# List full commands. ps ax | awk '/ssh \-NCf/ { print $0 }' # List settings. ps ax | awk '/ssh \-NCf/ { print $7 }' # List pids. ps ax | awk '/ssh \-NCf/ { print $1 }' # Kill all tunnels. kill $(ps ax | awk '/ssh \-NCf/ { print $1 }')
Generate key pair	# Save as default name id_rsa, id_rsa.pub ssh-keygen # Save as thefuck, thefuck.pub without password ssh-keygen -f abc -N '' # Save as thefuck, thefuck.pub with password ssh-keygen -f abc -N '12345'
Generate public key from private key	# Dump ssh-keygen -yf thefuck.pem # Save as file ssh-keygen -yf thefuck.pem > thefuck.pub # Save as authorized_keys (while ~/.ssh/authorized_keys didn't exist) ssh-keygen -yf thefuck.pem > authorized_keys # Append into authorized_keys ssh-keygen -yf thefuck.pem >> authorized_keys