Useful Commands/Security - Revision history

Tacoball: /* Frequently Used Commands */

2026-10-01T01:35:18Z

Frequently Used Commands

← Older revision		Revision as of 01:35, 1 October 2026
Line 70:		Line 70:
	\| Generate key pair \|\|		\| Generate key pair \|\|
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	~~# Generate Post-Quantum key~~
	~~ssh-keygen -t mlkem768x25519-sha256 -f sucks.pem~~
	~~ssh-keygen -t mlkem768x25519-sha256 -f sucks.pem -C nobody@sucks.com~~

	# Generate ed25519 key		# Generate ed25519 key
	ssh-keygen -t ed25519 -f sucks.pem		ssh-keygen -t ed25519 -f sucks.pem

Tacoball: /* Frequently Used Commands */

2026-10-01T01:30:29Z

Frequently Used Commands

← Older revision		Revision as of 01:30, 1 October 2026
Line 70:		Line 70:
	\| Generate key pair \|\|		\| Generate key pair \|\|
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	# ~~Save as default name id_rsa, id_rsa~~.~~pub~~		# Generate Post-Quantum key
	ssh-keygen		ssh-keygen -t mlkem768x25519-sha256 -f sucks.pem
			ssh-keygen -t mlkem768x25519-sha256 -f sucks.pem -C nobody@sucks.com

			# Generate ed25519 key
			ssh-keygen -t ed25519 -f sucks.pem
			ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com

	# Save as thefuck, thefuck.pub without password		# Save as thefuck, thefuck.pub without password
	ssh-keygen -f abc -N ''		ssh-keygen -f abc -N ''

	# Save as thefuck, thefuck.pub with password		# Save as thefuck, thefuck.pub with password
	ssh-keygen -f abc -N '12345'		ssh-keygen -f abc -N '12345'
	# ~~Generate ed25519~~ key
	~~ssh-keygen -t ed25519 -f sucks.pem~~		# OpenSSH key to Putty key
	~~ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com~~
	puttygen raymond -o raymond.ppk -O private		puttygen raymond -o raymond.ppk -O private

			# Save as default name id_rsa, id_rsa.pub
			ssh-keygen
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Frequently Used Commands */

2026-09-17T01:55:09Z

Frequently Used Commands

← Older revision		Revision as of 01:55, 17 September 2026
Line 1:		Line 1:
	= Frequently Used Commands =		= Frequently Used Commands =
	{\| class="wikitable"		{\| class="wikitable"
	! ~~TODO~~ \|\| Command		! 🎯 Purpose \|\| ⌨️ Command
	\|-		\|-
	\| Automatically accept fingerprint. \|\|		\| Automatically accept fingerprint. \|\|

Tacoball: /* Frequently Used Commands */

2026-08-07T06:06:37Z

Frequently Used Commands

← Older revision		Revision as of 06:06, 7 August 2026
Line 79:		Line 79:
	ssh-keygen -t ed25519 -f sucks.pem		ssh-keygen -t ed25519 -f sucks.pem
	ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com		ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com
			puttygen raymond -o raymond.ppk -O private
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Frequently Used Commands */

2026-07-16T01:43:31Z

Frequently Used Commands

← Older revision		Revision as of 01:43, 16 July 2026
Line 93:		Line 93:
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-
	\| Get the algorithm of a private key. \|\|		\| Get the algorithm info of a private key. \|\|
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	ssh-keygen -l -f thefuck.pem		ssh-keygen -l -f thefuck.pem

Tacoball: /* Frequently Used Commands */

2026-07-16T01:43:14Z

Frequently Used Commands

← Older revision		Revision as of 01:43, 16 July 2026
Line 91:		Line 91:
	# Append into authorized_keys		# Append into authorized_keys
	ssh-keygen -yf thefuck.pem >> authorized_keys		ssh-keygen -yf thefuck.pem >> authorized_keys
			</syntaxhighlight>
			\|-
			\| Get the algorithm of a private key. \|\|
			<syntaxhighlight lang="bash">
			ssh-keygen -l -f thefuck.pem
	</syntaxhighlight>		</syntaxhighlight>
	\|}		\|}

Tacoball: /* Frequently Used Commands */

2025-11-12T08:05:09Z

Frequently Used Commands

← Older revision		Revision as of 08:05, 12 November 2025
Line 78:		Line 78:
	# Generate ed25519 key		# Generate ed25519 key
	ssh-keygen -t ed25519 -f sucks.pem		ssh-keygen -t ed25519 -f sucks.pem
			ssh-keygen -t ed25519 -f sucks.pem -C nobody@sucks.com
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Frequently Used Commands */

2025-11-12T08:00:43Z

Frequently Used Commands

← Older revision		Revision as of 08:00, 12 November 2025
Line 76:		Line 76:
	# Save as thefuck, thefuck.pub with password		# Save as thefuck, thefuck.pub with password
	ssh-keygen -f abc -N '12345'		ssh-keygen -f abc -N '12345'
			# Generate ed25519 key
			ssh-keygen -t ed25519 -f sucks.pem
	</syntaxhighlight>		</syntaxhighlight>
	\|-		\|-

Tacoball: /* Access resources without VPN */

2025-04-03T20:27:14Z

Access resources without VPN

← Older revision		Revision as of 20:27, 3 April 2025
Line 97:		Line 97:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d \		sudo socat -d -d \
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	udp4-sendto:8.8.8.8:53		udp4-sendto:8.8.8.8:53
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS1" theme="warm">		<quickgv name="LS1" theme="warm">
Line 126:		Line 126:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d \		sudo socat -d -d \
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
Line 134:		Line 134:
	tcp4-listen:1053,bind=127.0.0.1,fork \		tcp4-listen:1053,bind=127.0.0.1,fork \
	udp4-sendto:8.8.8.8:53		udp4-sendto:8.8.8.8:53
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS2" theme="warm">		<quickgv name="LS2" theme="warm">
Line 161:		Line 161:
	\|-		\|-
	\| valign="top" \|		\| valign="top" \|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1. SSH -> TCP -> UDP (Run at Office)		# Step 1. SSH -> TCP -> UDP (Run at Office)
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
Line 173:		Line 173:
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &
	</~~source~~>		</syntaxhighlight>
	\|		\|
	<quickgv name="LS3" theme="warm">		<quickgv name="LS3" theme="warm">
Line 203:		Line 203:

	== Lesson 4: Forward HTTP ==		== Lesson 4: Forward HTTP ==
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1. SSH -> TCP -> UDP (Run at Office)		# Step 1. SSH -> TCP -> UDP (Run at Office)
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
Line 219:		Line 219:
	udp4-recvfrom:53,bind=127.0.0.1,fork \		udp4-recvfrom:53,bind=127.0.0.1,fork \
	tcp4:127.0.0.1:1053 &		tcp4:127.0.0.1:1053 &
	</~~source~~>		</syntaxhighlight>

	<quickgv name="LS4" theme="warm">		<quickgv name="LS4" theme="warm">
Line 272:		Line 272:
	Create SOCKS and TCP DNS services.		Create SOCKS and TCP DNS services.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	socat -d -d -lf socat.log \		socat -d -d -lf socat.log \
	tcp4-listen:1053,bind=127.0.0.1,fork \		tcp4-listen:1053,bind=127.0.0.1,fork \
Line 278:		Line 278:

	ssh -NCf -D 127.0.0.1:3128 localhost		ssh -NCf -D 127.0.0.1:3128 localhost
	</~~source~~>		</syntaxhighlight>

	=== ~/bin/mktun.sh ===		=== ~/bin/mktun.sh ===
	Make tunnels.		Make tunnels.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	ssh -NCf \		ssh -NCf \
	-MS revtun.ctrl \		-MS revtun.ctrl \
Line 289:		Line 289:
	-R 13128:127.0.0.1:3128 \		-R 13128:127.0.0.1:3128 \
	home		home
	</~~source~~>		</syntaxhighlight>

	=== ~/bin/rmtun.sh ===		=== ~/bin/rmtun.sh ===
	Remove tunnels.		Remove tunnels.

	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	if [ -e /tmp/revtun.ctrl ]; then		if [ -e /tmp/revtun.ctrl ]; then
	ssh -S /tmp/revtun.ctrl -O exit home		ssh -S /tmp/revtun.ctrl -O exit home
	fi		fi
	</~~source~~>		</syntaxhighlight>

	=== ~/.ssh/config ===		=== ~/.ssh/config ===
	Make the ssh connection more reliable.		Make the ssh connection more reliable.

	<~~source~~ lang="text" highlight="5-7">		<syntaxhighlight lang="text" highlight="5-7">
	Host home		Host home
	Hostname x.x.x.x		Hostname x.x.x.x
Line 311:		Line 311:
	ServerAliveInterval 60		ServerAliveInterval 60
	ServerAliveCountMax 3		ServerAliveCountMax 3
	</~~source~~>		</syntaxhighlight>

	=== crontab -e ===		=== crontab -e ===
	Create tunnels during 7:30~09:30, 21:00~22:00 only.		Create tunnels during 7:30~09:30, 21:00~22:00 only.
	<~~source~~ lang="text">		<syntaxhighlight lang="text">
	# 07:30 ~ 09:30		# 07:30 ~ 09:30
	30 07 * * * ~/bin/mktun.sh		30 07 * * * ~/bin/mktun.sh
Line 322:		Line 322:
	00 21 * * * ~/bin/mktun.sh		00 21 * * * ~/bin/mktun.sh
	00 22 * * * ~/bin/rmtun.sh		00 22 * * * ~/bin/rmtun.sh
	</~~source~~>		</syntaxhighlight>

	=== Homework ===		=== Homework ===
	Do it at home. NAS is a good choice.		Do it at home. NAS is a good choice.
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	sudo socat -d -d -lf socat-dns.log \		sudo socat -d -d -lf socat-dns.log \
	udp4-recvfrom:53,bind=*,fork \		udp4-recvfrom:53,bind=*,fork \
Line 334:		Line 334:
	tcp4-listen:3128,bind=*,fork \		tcp4-listen:3128,bind=*,fork \
	tcp4:127.0.0.1:13128		tcp4:127.0.0.1:13128
	</~~source~~>		</syntaxhighlight>

Tacoball: /* Frequently Used Commands */

2025-04-03T20:25:12Z

Frequently Used Commands

← Older revision		Revision as of 20:25, 3 April 2025
Line 4:		Line 4:
	\|-		\|-
	\| Automatically accept fingerprint. \|\|		\| Automatically accept fingerprint. \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	ssh -o "StrictHostKeyChecking no" ...		ssh -o "StrictHostKeyChecking no" ...
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Indirect outgoing for PostgreSQL \|\|		\| Indirect outgoing for PostgreSQL \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# [Private]		# [Private]
	# localhost -> localhost:15432		# localhost -> localhost:15432
Line 21:		Line 21:
	# -> somewhere.com:5432		# -> somewhere.com:5432
	ssh -NCfL *:15432:somewhere.com:5432 server		ssh -NCfL *:15432:somewhere.com:5432 server
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Indirect outgoing for Web \|\|		\| Indirect outgoing for Web \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# [Private]		# [Private]
	# localhost -> localhost:3128		# localhost -> localhost:3128
Line 36:		Line 36:
	# -> :		# -> :
	ssh -NCfD *:3128 server		ssh -NCfD *:3128 server
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Share MariaDB in LAN \|\|		\| Share MariaDB in LAN \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Step 1: Listen (Run at LAN)		# Step 1: Listen (Run at LAN)
	# Listen server:13306 -> server:22		# Listen server:13306 -> server:22
Line 51:		Line 51:
	# -> localhost:3306		# -> localhost:3306
	ssh -NCfL *:3306:localhost:13306 localhost		ssh -NCfL *:3306:localhost:13306 localhost
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| List tunnels \|\|		\| List tunnels \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# List full commands.		# List full commands.
	ps ax \| awk '/ssh \-NCf/ { print $0 }'		ps ax \| awk '/ssh \-NCf/ { print $0 }'
Line 66:		Line 66:
	# Kill all tunnels.		# Kill all tunnels.
	kill $(ps ax \| awk '/ssh \-NCf/ { print $1 }')		kill $(ps ax \| awk '/ssh \-NCf/ { print $1 }')
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Generate key pair \|\|		\| Generate key pair \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Save as default name id_rsa, id_rsa.pub		# Save as default name id_rsa, id_rsa.pub
	ssh-keygen		ssh-keygen
Line 76:		Line 76:
	# Save as thefuck, thefuck.pub with password		# Save as thefuck, thefuck.pub with password
	ssh-keygen -f abc -N '12345'		ssh-keygen -f abc -N '12345'
	</~~source~~>		</syntaxhighlight>
	\|-		\|-
	\| Generate public key from private key \|\|		\| Generate public key from private key \|\|
	<~~source~~ lang="bash">		<syntaxhighlight lang="bash">
	# Dump		# Dump
	ssh-keygen -yf thefuck.pem		ssh-keygen -yf thefuck.pem
Line 88:		Line 88:
	# Append into authorized_keys		# Append into authorized_keys
	ssh-keygen -yf thefuck.pem >> authorized_keys		ssh-keygen -yf thefuck.pem >> authorized_keys
	</~~source~~>		</syntaxhighlight>
	\|}		\|}