the_cyber_plumbers_handbook

I never pass up an opportunity to recommend the Cyber Plumber's Handbook: https://github.com/opsdisk/the_cyber_plumbers_handbook Goes over similar content as TFA, in perhaps a little more depth. Indispensable sysadmin knowledge.

From the very first paragraph of the README: > This repo contains the PDF book The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss. The book was first published in October 2018 for purchase, but now I'm providing it for FREE to anyone interested in learning more about the magic of SSH tunnels and port redirection. The license is a CC license. https://github.com/opsdisk/the_cyber_plumbers_handbook/blob/...

Where does it pretend anything? The license in use can be found here: https://github.com/opsdisk/the_cyber_plumbers_handbook/blob/...

This is the biggest infosec-focused collection I've seen https://github.com/0x90n/InfoSec-Black-Friday. My shameful promotion to level up your SSH tunneling and port redirection game: * $10 for the interactive lab - The Cyber Plumber's Lab Guide and Access https://opsdisk.gumroad.com/l/cphlab/blackfriday2021 * The accompanying book is free: https://github.com/opsdisk/the_cyber_plumbers_handbook

If you're looking at going even deeper into SSH tunneling and port redirection, I recently made The Cyber Plumber's Handbook free: https://github.com/opsdisk/the_cyber_plumbers_handbook I made it free to the HN community a few years back [1]. There is a paid interactive lab portion (details in the repo) if you are looking for hands-on experience. Book Overview This book is packed with practical and real world examples of SSH tunneling and port redirection in multiple realistic scenarios. It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers. Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploi