Live data from Hacker News

Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

news.ycombinator.com

11–20 of 52 posts

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#11
Really nice to see the 'plumbing' mindset catching on. When the parallels to real-world utility work were first pointed out a lot of people were resistant to it because they felt insulted to have their high technology work compared to dirty low technology.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#14

I am somewhat in tears now seeing this. I spent weeks at work trying to backwards analyze GCP IAP, which apparently uses this in the background (invoked via the gcloud CLI). Almost like a lost art, it was impossible to find serious tutorials other than Michael W. Lucas’s book of a couple of years ago or the O’Reilly book from 2006. Very much appreciated. Thank you for documentation on these very important systems tha…

Never thought it'd stir those emotions! Hope it helps even more throughout your IT journey.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#15
post #9

Hi! Sounds great! However i get he message that the discount code is not valid anymore and it is $19.99 again. Am i doing something wrong?

Just tried this link and it still looks like it's discounted: https://gumroad.com/l/the_cyber_plumbers_handbook/hackernews...

Let me know if it's still not working.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#16
post #3

This is great, thank you. I'm a big fan of socat for plumbing in pentesting environments, it's an amazing tool. Never had much luck with meterpreter's port forwarding as it seems to always eventually bug out.

Yeah, there was a major bug with portfwd last Fall. Last time I checked a few months ago, it was working in Metasploit 5.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#17
post #10

Thanks for sharing and the effort put in so far. After a quick glance over I think you should consider giving at least a glancing mention in your intro section to the importance of hardening SSH itself vs the typical default install. It doesn't need to be much since it's somewhat out of scope of your specific focus here, but it'd be worth a few sentences mentioning the value of keys over passwords (and disabling pass…

Thanks for the detailed feedback. That is a good idea I'll incorporate in the next version. Even some of the basic SSH server hardening goes a long way. I'd love to offer an actual lab for folks so they don't need to spin up their own, but just haven't had the demand (and time) to set that up.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#18

Really nice to see the 'plumbing' mindset catching on. When the parallels to real-world utility work were first pointed out a lot of people were resistant to it because they felt insulted to have their high technology work compared to dirty low technology.

That's a shame. Plumbing is an essential and frankly civilization-changing technology
Post reply on HN