Secure SSH

lockdown.sh

# wget -O - https://gist***/lockdown.sh | bash

# Lock down SSH
sshport=$(shuf -i 49152-65000 -n1) &&
sed -i "s/Port 22/Port $sshport/; s/PermitRootLogin yes/PermitRootLogin no/; s/#PasswordAuthentication yes/PasswordAuthentication no/" /etc/ssh/sshd_config &&

# Get wordlist
apt-get update &&
apt-get install -y wamerican &&

username=$(echo $(shuf -n1 /usr/share/dict/words | tr -dc A-Za-z0-9)$(shuf -n1 /usr/share/dict/words | tr -dc A-Za-z0-9) | tr '[:upper:]' '[:lower:]') &&
adduser $username --gecos "" --disabled-password &&
adduser $username sudo &&
echo "$username ALL=(ALL) NOPASSWD:ALL" | (EDITOR="tee -a" visudo) &&
sudo -u $username sh -c "mkdir /home/$username/.ssh/ &&
wget https://raw.githubusercontent.com/Manouchehri/dotfiles/master/.ssh/manouchehri.pub -O - >> /home/$username/.ssh/authorized_keys && echo >> /home/$username/.ssh/authorized_keys &&
chmod 700 /home/$username/.ssh && chmod 600 /home/$username/.ssh/*" &&

printf "To login:\nssh -l $username -p $sshport $(hostname -i)" && 
reboot