# مشاهدهٔ interfaceهای شبکه
ip addr show
 
# خروجی:
# 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
#     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
#     inet 127.0.0.1/8 scope host lo
# 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP
#     link/ether 00:11:22:33:44:55 brd ff:ff:ff:ff:ff:ff
#     inet 192.168.1.5/24 brd 192.168.1.255 scope global dynamic noprefixroute eth0
# 3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP
#     link/ether aa:bb:cc:dd:ee:ff brd ff:ff:ff:ff:ff:ff
#     inet 192.168.1.10/24 brd 192.168.1.255 scope global dynamic wlan0
 
# مشاهدهٔ route
ip route
# default via 192.168.1.1 dev eth0 proto dhcp metric 100
# 192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.5
 
# مشاهدهٔ DNS
cat /etc/resolv.conf
# nameserver 192.168.1.1
# nameserver 8.8.8.8

# بررسی وضعیت NetworkManager
sudo systemctl status NetworkManager
 
# مشاهدهٔ اتصالات
nmcli connection show
 
# خروجی:
# NAME                UUID                                  TYPE      DEVICE
# Wired connection 1  12345678-1234-1234-1234-1234567890ab  ethernet  eth0
# HomeWiFi            abcdef12-3456-7890-abcd-ef1234567890  wifi      wlan0

# مشاهدهٔ deviceها
nmcli device status
 
# روشن کردن interface
sudo nmcli device connect eth0
 
# اتصال به Wi-Fi
sudo nmcli device wifi connect "HomeWiFi" password "password123"
 
# مشاهدهٔ شبکه‌های وایرلس موجود
nmcli device wifi list
 
# خروجی:
# IN-USE  BSSID              SSID              MODE   CHAN  RATE      SIGNAL  BARS  SECURITY
# *       AA:BB:CC:DD:EE:01  HomeWiFi          Infra  6     270 Mbit/s  85     ▰▰▰▰▰  WPA2
#         AA:BB:CC:DD:EE:02  Office            Infra  11    130 Mbit/s  67     ▰▰▰▰   WPA2

# تنظیم IP استاتیک با nmcli
sudo nmcli connection modify "Wired connection 1" \
    ipv4.method manual \
    ipv4.addresses 192.168.1.100/24 \
    ipv4.gateway 192.168.1.1 \
    ipv4.dns "8.8.8.8 8.8.4.4"
 
# اعمال تغییرات
sudo nmcli connection up "Wired connection 1"
 
# خروجی:
# Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/3)

# راه‌اندازی ابزار گرافیکی NetworkManager
nm-connection-editor &
 
# یا در XFCE:
# Applications → Settings → Network Connections

# مشاهدهٔ محتوای فعلی
cat /etc/hosts
 
# خروجی:
# 127.0.0.1       localhost
# 127.0.1.1       kali-laptop
# 192.168.1.10    target.local target
# 192.168.1.20    web.local web
 
# افزودن یک host جدید
echo "192.168.1.50    example.local example" | sudo tee -a /etc/hosts
 
# تست
ping -c 2 example.local
# PING example.local (192.168.1.50) 56(84) bytes of data.
# 64 bytes from 192.168.1.50: icmp_seq=1 ttl=64 time=0.342 ms

# مشاهدهٔ DNS فعلی
resolvectl status
 
# تنظیم DNS موقت
sudo resolvectl dns eth0 8.8.8.8 1.1.1.1
 
# تنظیم دائمی DNS
sudo nmcli connection modify "Wired connection 1" ipv4.dns "8.8.8.8 1.1.1.1"
sudo nmcli connection up "Wired connection 1"

# تنظیم پروکسی موقت (در session فعلی)
export http_proxy="http://proxy.example.com:8080"
export https_proxy="http://proxy.example.com:8080"
export ftp_proxy="http://proxy.example.com:8080"
 
# تنظیم دائمی در ~/.bashrc یا ~/.zshrc
echo 'export http_proxy="http://proxy.example.com:8080"' >> ~/.bashrc
echo 'export https_proxy="http://proxy.example.com:8080"' >> ~/.bashrc
 
# تنظیم پروکسی برای APT
sudo tee /etc/apt/apt.conf.d/70proxy <<EOF
Acquire::http::Proxy "http://proxy.example.com:8080";
Acquire::https::Proxy "http://proxy.example.com:8080";
EOF

# نصب UFW
sudo apt install -y ufw
 
# تنظیم پیش‌فرض: deny incoming، allow outgoing
sudo ufw default deny incoming
sudo ufw default allow outgoing
 
# اجازه به SSH (پورت 22)
sudo ufw allow 22/tcp
 
# اجازه به HTTP و HTTPS
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
 
# فعال‌سازی فایروال
sudo ufw enable
 
# مشاهدهٔ وضعیت
sudo ufw status verbose
 
# خروجی:
# Status: active
# Logging: on (low)
# Default: deny (incoming), allow (outgoing), disabled (routed)
# New profiles: skip
# To                         Action      From
# --                         ------      ----
# 22/tcp                     ALLOW IN    Anywhere
# 80/tcp                     ALLOW IN    Anywhere
# 443/tcp                    ALLOW IN    Anywhere

# فعال‌سازی monitor mode (برای aircrack-ng)
sudo airmon-ng start wlan0
 
# خروجی:
# PHY     Interface       Driver          Chipset
# phy0    wlan0           ath9k_htc       Atheros AR9271
#                 (mac80211 monitor mode vif enabled for [phy0]wlan0 on [phy0]wlan0mon)

# مشاهدهٔ MAC فعلی
ip link show wlan0
# link/ether aa:bb:cc:dd:ee:ff
 
# تغییر MAC آدرس
sudo ip link set wlan0 down
sudo ip link set wlan0 address 00:11:22:33:44:55
sudo ip link set wlan0 up
 
# بررسی MAC جدید
ip link show wlan0
# link/ether 00:11:22:33:44:55
 
# یا با macchanger
sudo apt install -y macchanger
sudo macchanger -r wlan0  # MAC تصادفی
sudo macchanger -m 00:11:22:33:44:55 wlan0  # MAC خاص

# تست اتصال به gateway
ping -c 4 192.168.1.1
 
# تست DNS
nslookup example.com
# Server:     192.168.1.1
# Address:    192.168.1.1#53
# Non-authoritative answer:
# Name:   example.com
# Address: 93.184.216.34
 
# تست route
traceroute example.com
 
# تست پورت
nc -zv example.com 443
# Connection to example.com 443 port [tcp/https] succeeded!

# بررسی DNS
cat /etc/resolv.conf
 
# تنظیم DNS موقت
echo "nameserver 8.8.8.8" | sudo tee /etc/resolv.conf
 
# راه‌اندازی مجدد NetworkManager
sudo systemctl restart NetworkManager

# غیرفعال‌سازی power management
sudo iwconfig wlan0 power off
 
# یا در NetworkManager:
sudo nmcli connection modify "HomeWiFi" wifi.powersave 2
# 2 = disable

# درخواست DHCP
sudo dhclient eth0
 
# یا با nmcli
sudo nmcli device reapply eth0

# بررسی فایل Netplan
ls /etc/netplan/
 
# حذف فایل Netplan اگر وجود دارد
sudo rm /etc/netplan/*.yaml
 
# یا ویرایش فایل managed
sudo nano /etc/NetworkManager/NetworkManager.conf
# [ifupdown]
# managed=true
 
# راه‌اندازی مجدد
sudo systemctl restart NetworkManager