Debian 13 安裝 shc (Shell script compiler)

apt install -y gcc automake make git 
git clone https://github.com/neurobin/shc
cd shc
./configure && ./autogen.sh && make
cp src/shc /usr/local/bin

XRDP 登入異常

錯誤訊息
Error connecting to sesman on 127.0.0.1:3350

確認  xrdp-sesman.service 是否異常中止
systemctl start xrdp-sesman.service

連線管理程式
xrdp-sesadmin
loginctl list-sessions

相關日誌
/var/log/xrdp.log
/var/log/xrdp-sesman.log

避免 ssh 斷線

SSH Client設定方式
1.編輯 ~/.ssh/config 加入
Host *
ServerAliveInterval 100

2.編輯 /etc/ssh/ssh_config 加入
ServerAliveInterval 100

SSH Client設定方式
編輯 /etc/ssh/sshd_config 加入
ClientAliveInterval 60
ClientAliveCountMax 3

SSH 反向連結

ssh -R 12345:localhost:22 user@remotehost  (目標主機)
ssh localhost -p 12345    (攻擊者主機))

-N ：只連線遠端主機，不開啟遠端 shell
-f ：連線成功後，背景執行
-R ：接受三個值，「遠端主機A埠號:想連上主機B:想連上主機B埠號」（12345:localhost:22）

設定 xfce 桌面 desktop文件 設定 trusted

eval "export $(cat ~/.config/user-dirs.dirs |grep XDG_DESKTOP_DIR)"

for i in ${XDG_DESKTOP_DIR}/*.desktop;do
gio set "$i" metadata::trusted true;
gio set -t string "$i" metadata::xfce-exe-checksum "$(sha256sum "$i"|awk '{print $1}')";
done

dnsmasq ipxe 設定筆記

dhcp-option=vendor:PXEClient,6,2b
#dhcp-option=vendor:HTTPClient,Arch,00016

dhcp-no-override
dhcp-match=set:ipxe-http,175,19
dhcp-match=set:ipxe-https,175,20
dhcp-match=set:ipxe-menu,175,39
dhcp-match=set:ipxe-pxe,175,33
dhcp-match=set:ipxe-bzimage,175,24
dhcp-match=set:ipxe-iscsi,175,17
dhcp-match=set:ipxe-efi,175,36

#pxe-service=0, "PXELINUX (0000-BIOS)", "bios/lpxelinux.0"
#pxe-service=1, "PXELINUX (0001-EFI)", "efi64/syslinux.efi"
#pxe-service=2, "PXELINUX (0002-EFI)", "efi64/syslinux.efi"
#pxe-service=3, "PXELINUX (0003-EFI)", "efi64/syslinux.efi"
#pxe-service=4, "PXELINUX (0004-EFI)", "efi64/syslinux.efi"
#pxe-service=5, "PXELINUX (0005-EFI)", "efi64/syslinux.efi"
#pxe-service=6, "PXELINUX (0006-EFI)", "efi64/syslinux.efi"
#pxe-service=7, "PXELINUX (0007-EFI)", ipxe.efi,192.168.9.240
#pxe-service=7, "PXELINUX (0007-EFI)", "autoexec.ipxe",,
#pxe-service=7, "PXELINUX (0007-EFI)", "ipxe.efi",,
#pxe-service=7, "PXELINUX (0007-EFI)", "grubx64.efi",,
#pxe-service=8, "PXELINUX (0008-EFI)", "efi64/syslinux.efi"
#pxe-service=9, "PXELINUX (0009-EFI)", "efi64/syslinux.efi"

tag-if=set:ipxe-ok,tag:ipxe-http,tag:ipxe-menu,tag:ipxe-iscsi,tag:ipxe-pxe,tag:ipxe-bzimage
tag-if=set:ipxe-ok,tag:ipxe-http,tag:ipxe-menu,tag:ipxe-iscsi,tag:ipxe-efi

pxe-service=tag:!ipxe-ok,X86PC,BIOS,undionly.kpxe,,
pxe-service=tag:!ipxe-ok,IA32_EFI,IA32_EFI,snponlyx32.efi,,
pxe-service=tag:!ipxe-ok,BC_EFI,BC_EFI,ipxe.efi,,
pxe-service=tag:!ipxe-ok,X86-64_EFI,EFI,ipxe.efi,,
pxe-service=tag:!ipxe-ok,X86-64_EFI,EFI0,ipxe.efi,,
pxe-prompt=EFI,0

#pxe-service=tag:!ipxe-ok,X86PC,BIOS,ipxe/undionly.kpxe,192.168.9.200
#pxe-service=tag:!ipxe-ok,IA32_EFI,IA32_EFI,ipxe/snponlyx32.efi,192.168.9.200
#pxe-service=tag:!ipxe-ok,BC_EFI,BC_EFI,ipxe/ipxe.efi,192.168.9.200
#pxe-service=tag:!ipxe-ok,X86-64_EFI,EFI,ipxe/ipxe.efi,192.168.9.200
#pxe-service=tag:!ipxe-ok,X86-64_EFI,EFI0,ipxe/ipxe.efi,192.168.9.200
#pxe-prompt=EFI,0
#pxe-service=0, "PXELINUX (0000-BIOS)", "bios/lpxelinux.0"
#pxe-service=1, "PXELINUX (0001-EFI)", "efi64/syslinux.efi"
#pxe-service=2, "PXELINUX (0002-EFI)", "efi64/syslinux.efi"
#pxe-service=3, "PXELINUX (0003-EFI)", "efi64/syslinux.efi"
#pxe-service=4, "PXELINUX (0004-EFI)", "efi64/syslinux.efi"
#pxe-service=5, "PXELINUX (0005-EFI)", "efi64/syslinux.efi"
#pxe-service=6, "PXELINUX (0006-EFI)", "efi64/syslinux.efi"
#pxe-service=7, "PXELINUX (0007-EFI)", ipxe/ipxe.efi,192.168.9.200
#pxe-service=8, "PXELINUX (0008-EFI)", "efi64/syslinux.efi"
#pxe-service=9, "PXELINUX (0009-EFI)", "efi64/syslinux.efi"

#dhcp-boot=tag:ipxe-ok,ipxe/i.ipxe,pxeserver,192.168.9.200
#dhcp-boot=tag:ipxe-ok,http://192.168.9.200/tftp/ipxe/i.ipxe,,
#dhcp-boot=tag:ipxe-ok,ipxe/aaaautoexec.ipxe,pxeserver,192.168.9.200
dhcp-boot=tag:ipxe-ok,autoexec.ipxe