Port Knocking Sequence Generator
Generate a random TCP/UDP port sequence for port knocking — a client-side utility to configure knockd or similar.
—
Generating a port knocking sequence
Port knocking keeps a port closed until an agreed sequence of connection attempts arrives on closed ports. The server watches those attempts, recognises the sequence and opens the real port briefly for that address. Anyone running a scan sees everything closed — there is no service listening to answer.
Choose how many ports and which protocol, and the page draws the sequence. Two implementation decisions matter: the ports come from the high range, above the registered ones, so they do not collide with a real service; and the draw uses the browser's cryptographic generator, including for the choice between protocols when mixing is selected — the sequence is the secret, and a secret drawn with a weak generator is a predictable secret.
On what this protects: it is obscurity, not authentication. Anyone watching network traffic sees the sequence and can repeat it. The real value is removing the service from the view of automated scanning, which cuts brute-force noise to nearly zero, and serving as an extra layer over genuine authentication — never in place of it.
Frequently asked questions
Does port knocking replace authentication?
How many ports should I use?
Is there a better alternative?
Related Tools
SSH auth.log Analyzer
Analyzes SSH auth.log files: failures per IP, targeted users, accepted logins, attack peaks and ready-to-copy block lists.
Summarize CIDR Blocks to Supernet
Aggregate multiple IPv4 CIDR blocks into the smallest supernet that contains them all — free online tool for network admins.
Frequency Analysis to Break Ciphers
Count letter, bigram and trigram frequencies in ciphertext and compare with Portuguese/English references.
TOTP otpauth URI Builder
Builds an otpauth://totp/ URI with issuer, account, base32 secret, digits and period for QR code apps.
CORS Config Validator
Validate a CORS configuration (allowed origins or *), checking the format and duplicates. Useful for safely configuring APIs and web servers.
HIBP K-Anonymity Format
Explains the Have I Been Pwned k-anonymity flow: SHA-1 password, first 5 chars on GET, suffix returned.