Useful Commands/Security

情境	指令
Indirect outgoing for PostgreSQL	# [Private] # localhost -> localhost:15432 # -> server:22 # -> somewhere.com:5432 ssh -NCfL 15432:somewhere.com:5432 server # [Shared] # any -> *:15432 # -> server:22 # -> somewhere.com:5432 ssh -NCfL *:15432:somewhere.com:5432 server
Indirect outgoing for Web	# [Private] # localhost -> localhost:3128 # -> server:22 # -> *:* ssh -NCfD localhost:3128 server # [Shared] # any -> *:3128 # -> server:22 # -> *:* ssh -NCfD *:3128 server
Share MariaDB in LAN	# Step 1: Listen (Run at LAN) # Listen server:13306 -> server:22 # -> localhost:3306 ssh -NCfR 13306:localhost:3306 server # Step 2: Share (Run at Home/WAN) # any -> server:3306 # -> server:13306 # -> server:22 # -> localhost:3306 ssh -NCfL *:3306:localhost:13306 localhost
List tunnels	# List full commands. ps ax | awk '/ssh \-NCf/ { print $0 }' # List settings. ps ax | awk '/ssh \-NCf/ { print $7 }' # List pids. ps ax | awk '/ssh \-NCf/ { print $1 }' # Kill all tunnels. kill $(ps ax | awk '/ssh \-NCf/ { print $1 }')
Generate key pair	# Save as default name id_rsa, id_rsa.pub ssh-keygen # Save as thefuck, thefuck.pub without password ssh-keygen -f abc -N '' # Save as thefuck, thefuck.pub with password ssh-keygen -f abc -N '12345'
Generate public key from private key	# Dump ssh-keygen -yf thefuck.pem # Save as file ssh-keygen -yf thefuck.pem > thefuck.pub # Save as authorized_keys (while ~/.ssh/authorized_keys didn't exist) ssh-keygen -yf thefuck.pem > authorized_keys # Append into authorized_keys ssh-keygen -yf thefuck.pem >> authorized_keys

Share DNS and SOCKS Proxy

Share SOCKS Proxy

# Step 1:
ssh -NCfD 3128 localhost

# Step 2:
ssh -NCfR 13128:localhost:3128 server

# Step 3:
ssh -NCfL *:3128:localhost:13128 localhost

Share DNS

See: Performing UDP tunneling through an SSH connection

mkfifo /tmp/dns-tcp2udp
nc -l -p 10053 < /tmp/dns-tcp2udp | nc -u 192.168.1.1 53 > /tmp/dns-tcp2udp