Ming

KQZZHPHR

[Ming @CryptoMonkeycho]

@alexchen0855 這波真的痛 已哭

[alvin617.eth 🦇🔊 @Alvin0617]

Clawdbot 健康檢查 - 指令全指南 ⚠️！

這是我花了兩個小時親自看完且做出的
頭都暈了 😂 但是認識這些絕對有用 !

只需耗時幾分鐘，建立安全的技術框架比什麼都重要

有必要讓更多人知道如何設下 Clawdbot 的安全網
這些指令其實很多也都適用於其他專案的檢查 👇

人體需要健康檢查, 程式碼也需要 🤖 🧠
千萬不要因為方便而拋棄掉安全跟隱私性了

畢竟非技術出身, 如果有誤請不吝留言, 我會繼續更新資訊

🔴 極高危險（5 項）- 必須立即檢查

1️⃣ Port 18789 暴露檢查 -檢查是不是所有人都有你的 clawdbot 使用權限

指令： netstat -tlnp | grep 18789
安全 ✅： 127.0.0.1:18789（門鎖著）
危險 🔴： 0.0.0.0:18789（門大開）
💀 後果： 全世界都能連接並控制

2️⃣ Shodan 掃描檢查

指令： curl https://t.co/wjosODnph3 + 訪問 Shodan 網站
安全 ✅： 沒有 18789 端口
危險 🔴： 有 18789 端口
💀 後果： 被公開收錄，攻擊者可搜尋到

3️⃣ 防火牆規則

指令： sudo ufw status | grep 18789
安全 ✅： 看到 DENY
危險 🔴： 看到 ALLOW 或 inactive
💀 後果： 沒有防護層

4️⃣ Gateway 配置 - 檢查 clawdbot.json 中的 host 設定

指令： cat ~/.clawdbot/clawdbot.json | jq '.gateway.host'
安全 ✅： "127.0.0.1"
危險 🔴： "0.0.0.0"
💀 後果： 配置錯誤導致暴露

5️⃣ Cloudflare Tunnel - cloudflared tunnel list

指令： cloudflared tunnel list
安全 ✅： 有 Tunnel 列表
危險 🔴： command not found 或無 Tunnel
⚠️ 影響： 依賴單點防護，真實 IP 可能暴露

✨Cloudflare Tunnel 可以協助你隱藏 IP，加上防火牆、 Gatewat 等於有三層的安全鎖

🟠 高危險（5 項）- 強烈建議檢查

1️⃣ DM Pairing - 檢查是否有用戶白名單限制

指令： clawdbot pairing list
安全 ✅： Paired Users: telegram:123...
危險 🔴： No paired users
💀 後果： 任何人都能控制你的系統

2️⃣ 工具權限 - 檢查 Clawdbot 能用哪些工具

指令： cat ~/.clawdbot/clawdbot.json | jq '.tools'
安全 ✅： {"allow": [...], "deny": [...]}
危險 🔴： null 或無限制
💀 後果： 可執行 rm -rf /（刪除整個系統）

3️⃣ 沙盒模式 - 檢查 bot 的運作範圍

指令：cat ~/.clawdbot/clawdbot.json | jq '.agents.defaults.sandbox'

安全：✅ "mode": "all" 代表 Clawdbot 被關在沙盒裡，無法隨意存取整個系統

危險 🔴： null 或 "none"，沙盒未啟用

💀 Clawdbot 可以存取整個系統，包括你的 SSH 私鑰、個人文件等

4️⃣ 敏感資料存取 ，檢測是否有不該出現的檔案

指令： find ~/.clawdbot -name "id_rsa" -o -name "*.pem" -o -name ".env"

安全： ✅ [無輸出]

危險 🔴： 找到 id_rsa 或 .pem
💀 後果： SSH 私鑰可能被竊取

5️⃣ 審計日誌 - 檢查是否有運作紀錄日後方便保存

指令：cat ~/.clawdbot/clawdbot.json | jq '.logging.auditCommands'

安全： ✅ [無輸出]，有記錄 Clawdbot 執行的所有命令，出問題可以復盤查看

危險 🔴：false 或 null

💀 後果： 無法追查 Clawdbot 做了什麼

🟡 中危險（5 項）- 建議定期檢查

1️⃣ 運行用戶權限檢查

指令：ps aux | grep clawdbot
安全 ✅：clawdbot 12345...（專用用戶）
危險 🔴：root 12345...（最高權限）

2️⃣ 環境變數安全 - 檢查是否明文密碼

指令：cat ~/.clawdbot/clawdbot.json | grep -E "api_key|password"

安全 ✅：[無輸出]（密碼在環境變數）
危險 🔴：看到明文密碼在配置文件

3️⃣ 記憶檔案 - 檢查是否被污染

指令：find ~/.clawdbot/memory -name "*.md"
安全 ✅：無可疑內容
危險 🔴：找到 ignore previous

4️⃣ 連接服務 - 確認使用專用帳號

指令：cat ~/.clawdbot/clawdbot.json | jq '.services'
安全 ✅：專用帳號 + app 密碼
危險 🔴：個人主帳號 + 明文密碼

5️⃣ 資源監控 - top -bn1 | grep clawdbot

指令：ps aux | grep clawdbot | awk '{print "CPU: "$3"% MEM: "$4"%"}'

安全 ✅：CPU: 3.5% MEM: 2.1%
危險 🔴：CPU: 95.2% MEM: 78.3%

數字小代表 ：健康，正常待機或輕度工作

🟢 建議檢查（5 項）- 定期維護

1️⃣ 版本更新

指令：clawdbot --version
健康 ✅：1.5.0 (latest)
需更新 ⚠️：1.2.0（舊版本）

2️⃣ 系統更新

指令：sudo apt list --upgradable
健康 ✅：[無輸出]（系統最新）
需更新 ⚠️：有安全更新可用

3️⃣ NPM 套件 - 檢查安全漏洞

指令：npm audit
健康 ✅：found 0 vulnerabilities
危險 🔴：found 5 vulnerabilities

4️⃣ 定時任務 - 檢查有沒有定時炸彈

指令：crontab -l
安全 ✅：只有已知的合法任務
危險 🔴：出現不認識的 curl ... | bash

5️⃣ 健康檢查

指令：clawdbot doctor
健康 ✅：所有項目 ✓ 通過
需修復 ⚠️：有 ✗ 錯誤或 ⚠ 警告

祝各位繼續開心 vibe coding ！

[Brevis @brevis_zk]

The Brevis Proving Grounds are now live!
https://t.co/Xa9WZRrnnc

We've built an arena showcasing every protocol and application that Brevis ZK technology has enhanced. Step inside and experience what intelligent smart contracts actually feel like.

Your mission: explore the ecosystem, become part of the ZK community, and stack as many Brevis Sparks points as possible.

Start proving yourself today. 🧵

[Brevis @brevis_zk]

The Brevis Yapper Leaderboard is LIVE on @KaitoAI!

This isn't your typical "post about us, get tokens" setup. You get that too, but it's more!

Let's take a look at how Brevis just innovated the world of InfoFi.

[Bitget中文 @Bitget_zh]

从 1 - 30 中选一个数字，

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

在评论区留下你的选择，我们将选取一个幸运数字送出 Bitget 精美周边！

[Ming @CryptoMonkeycho]

@Bitget_zh 29

[Sahara AI 🔆 @SaharaAI]

Sahara is collaborating with @MMTFinance, to give away 200 Momentum Deed NFTs!

Details on how to win below 🧵

👉 Get started: https://t.co/6nycMy79dD

[Ming @CryptoMonkeycho]

# https://t.co/YfwInrPtKa

[Sahara AI 🔆 @SaharaAI]

Sahara is collaborating with @MMTFinance, to give away 200 Momentum Deed NFTs!

Details on how to win below 🧵

👉 Get started: https://t.co/6nycMy79dD

[Reveel @r3vl_xyz]

Milestone unlocked: 500,000 registered Stablecoin IDs 🟩

Half a million people now moving money with universal identity

This is just the beginning.

[StandX @StandX_Official]

StandX Alpha is officially LIVE!

The world’s first Perps DEX that pays you to trade is now open to the early Standers.

Here is the Alpha 👇🏻

[StandX @StandX_Official]

If 150,000 people were to stand on top of each other, we would be almost 30 times taller than Mount Everest.

Now that is a pretty tall and proud Stand!

[StandX @StandX_Official]

Check your access Standers!

StandX Alpha access just opened to waitlist users registered before 31st August.

If you're not in, better luck next wave.

Stand.

[StandX @StandX_Official]

BECOME A STANDX OG!

Claim your exclusive OG Role “Flower” in Discord -> https://t.co/2TibdxU4cg

Every Member starts as “Stander” and has the opportunity to climb up and become a “Flower”

How?

Show up on X, attend events, create content, and back other Standers.

Fortune favors those who Stand.

Limited-time only.

Go!

[pieverse @pieverse_io]

🚀 Phase 3 of the Pieverse x @BinanceWallet Booster Campaign is officially LIVE!

We’re excited to unveil the next step in our mission to bring trusted, timestamped value to Web3.

🎁 30,000,000 $PIEVERSE (3% of the total initial supply) will be distributed across 4 phases of this campaign. The reward pool for Phase 3 is 7,500,000 $PIEVERSE.

🗓️ Phase 3 begins today, October 13 at 12PM UTC.

💰 7.5M $PIEVERSE prize pool for Phase 3.
✅ Complete all tasks in each phase to qualify for the reward pool.
🔑 All users with a keyless wallet and sufficient Alpha Points are eligible.
🤖 No bots, no cheating. Only verified human actions count.

🔹 How to participate: https://t.co/18bbvxg78m
🔹 For full details: https://t.co/dg306e4f7J

Phase 3 begins now. See you on Pieverse. ⏰😺

[Codatta @codatta_io]

🚀 Codatta Booster Campaign Season 3 Week 4 is LIVE!

The grand finale is here — dive into hands-on challenges across AI, robotics, food and crypto 🌐

👥 Join the Telegram Community

📩 Link Email to Codatta

🧠 Find the AI’s Factual Mistake

🍲 Upload & Annotate Food Images

🤖 Annotate Robotics Data

🏦 Contribute CEX Deposit Records

📤 Contribute CEX Withdrawal Records

✅ Submit and get verified to secure your rewards!

🕖 Starting time: 2025-09- 26 7:00 AM UTC

💰 Reward Pool: 50,000,000 $XNY (Tokens earned from this Booster Campaign are subject to a lock-up period.)

📲 Join now: Access via Binance Wallet → Booster tab or Homepage Banner (Alpha Points ≥ 61)

📘 Full guide for Season 3 Week 4: https://t.co/ruNJimtbid

Beyond an airdrop — help build the decentralized AI knowledge layer.

⚡️ Join the mission & earn on Codatta now: https://t.co/Nz77oQzpJl

#Codatta #BoosterCampaign #Web3 #AI #Airdrop $XNY

[Ming @CryptoMonkeycho]

Hey @REVApay_ai, send 6 USDC on BNB Chain to 0xe2a4Ba08D2ee9458830c50D1e417194488B19CF6

[Reveel @r3vl_xyz]

🟩 Phase 4 $REVA Quests are live

More tasks, more rewards, more ways to stack $REVA

Here’s your mission log for this week 👇

[Astra Nova @Astra__Nova]

Entertainment is being rebuilt.
By players, creators, and AI.

Welcome to Astra Nova
The world's first AI Entertainment Ecosystem ✨

🔸 Built on intelligence
🔸 Powered by live products
🔸 Fueled by $RVV

💠 Explore Our Ecosystem:

🕹️ https://t.co/iFUwtcMMGb – Launch viral, monetizable Web3 games in minutes. No code. All AI.
🧬 ARPG – UE5 + AI NPCs in a playable sci-fi epic
📖 NovaToon – Interactive comics that evolve
🎯 BlackPass – SocialFi quests + loyalty rewards
⚔️ Deviants Fight Club – Telegram PvP casual game.

The era of passive entertainment is over.

Play. Build. Own the future.

🌐 Step Inside → https://t.co/4ZaVPINm4f

[TokenPlay.ai @TokenplayAI]

Build. Launch. Monetize. 🕹️

Turn your community into an arcade — in seconds. ⚡

No code. AI-powered.
Welcome to https://t.co/LZsqRU1Uo3

🚨 250K+ have already joined the waitlist — don’t miss your chance!

Loading
■■■■▢▢▢▢▢▢

[Turtle @turtledotxyz]

We’re proud to introduce $TURTLE - the foundational token for onchain liquidity.

Built to align LPs, partners, and protocols under one standard.