diff --git a/misc/ssh.md b/misc/ssh.md
index 6c1d860..f065ca7 100644
--- a/misc/ssh.md
+++ b/misc/ssh.md
@@ -15,7 +15,7 @@ plink -l root -pw <mypassword> <attacking.machine.ip.address> -R 3390:127.0.0.1:
 * Forward/Tunnel and redirect our traffic to the victim's machine.
 
 ```bash
-ssh -D 8181 root@victim.example.com
+ssh -D 9050 root@victim.example.com
 ```
 
 * proxychains
@@ -29,7 +29,7 @@ nano /etc/proxychains.conf
 ```bash
 [ProxyList]
 #...
-socks4 127.0.0.1 8181
+socks4 127.0.0.1 9050
 ```
 
 * Run e.g. nmap