⚡️Overseas IDC server provider, providing global cloud servers and physical servers, cluster servers, and high-defense servers😭🤓🤓🤓
🌎Main business: Hong Kong, the United States, Japan, South Korea, Singapore, Taiwan, Vietnam, Thailand, Cambodia, the Philippines, Malaysia, and other regions server rental, 7*24 hours after-sales processing, stable line, welcome to consult🪐

Hong Kong, and other overseas server rental, physical server/cluster/high-defense/graphics card/hen
7*24*365 manual after-sales! Beautiful price!

The above IAM role is mainly for operating VMs and does not involve the use of IAP TCP-Forwarding. Next, we will set up IAP-related service activation. First, we go to Security > Identity-Aware Proxy and switch to SSH AND TCP RESOURCES. Here we can observe that all VM resources are listed below. We can control the IAP activation of individual VMs separately, or directly control all resources in the Subnet or even the Project.

We are about to officially enable the IAP TCP-Forwarding service for the project. First, since IAP TCP-Forwarding forwards TCP traffic through IAP, we need to set up a firewall for the traffic from IAP to VM. Here we set the source IP range to "35.235.240.0/20"

Since IAP TCP-Forwarding is connected to IAP by the local machine through a specified port, users can decide the TCP port used for the connection by themselves, and are not limited to Port 22 or Port 3389. In addition, Cloud IAP uses IAM as a gateway to check permissions, and we can set the user's login permissions and content awareness by ourselves. For example, if we want to restrict login to users outside Taiwan, we can set the filtering conditions through IAP permission settings. In this way, when we use IAP, we can minimize the scope of external login permissions and greatly increase the security of the cloud environment.

To connect to the company server here, I need to use a jump server/bastion server. I can't use datagrip to connect directly to hive. Is there any way to use datagrip?

Honeypot system, database explosion machine, cloud server configuration host port, brute force, traffic honeypot, kali system application for bastion server permissions

In fact, SecureCRT versions above 8.0 have a "firewall" function, which can be used to directly connect to the Linux server in the intranet by skipping the jump server with one click.

1. Create a new session to directly connect to the intranet Linux server

The honeypot jump machine dimension continues to the next step, and the final configuration is as above

Honeypot system, explosive machine, cloud server configuration host port, brute force, traffic honeypot Kali system application for bastion machine permissions

The key point is that the IP address marked in the red box needs to be written as the address of the intranet jump server, and the port should be written as port 8444. In this way, when the Mazi generated by this listener bounces, it will connect to port 8444 of the jump server.

Command: trap

Expanded knowledge: process and signal

trap syntax, function, use

[jeson@mage-jump-01 ~/]$ trap -l
1) SIGHUP 2) SIGINT 3) SIGQUIT 4) SIGILL 5) SIGTRAP
6) SIGABRT 7) SIGBUS 8) SIGFPE 9) SIGKILL 10) SIGUSR1

zv key distribution exept script to achieve non-interactive mode: cat /server/scripts/fenfa_sshkey.exp

Honeypot system, explosive machine, cloud server configuration host port, brute force, traffic honeypot kali system application for bastion host permissions