Skip to main content

Multi-Protocol Proxy Over TCP & UDP

By admin

Many years ago I programed a console based multi protocol proxy (the sha0proxy) lately I created in dotnet a graphical verison of the tool, but due to the form referesh speed finally I implemented it in C++ with Qt.

This tool useful for reversing, exploiting & pentesting was finally called rproxy, and its a multi-protocol proxy over TCP or UDP.





Being in the middle of the communication you can view and modify the bytes before being sent to the client or server.

In the tools tab right now its possible to open the blob on radare2 for further reversing of the data structures or code.


A basic mutation based fuzzer is implemented for bug-hunting, just set the % ratio of mutation and the bytes will be modified during specific communications phase.

One of the powerful things of this tool is the scripting, it is possible to automate a modification in specific moment of the traffic flow.



For example a script with a single line: "IN 3 20 3F" will write a 0x3f on the offset 20 only on the third packet received from the server. I have used this feature for triggering vulnerabilities.

Regarding the saving and loading data from disk, it's possible to save and load data in raw and hex formats. Also can be configured for save all the communications or only specific emission.


Find the source code and binaries at github: https://github.com/sha0coder/reproxy



Related links


Comments

Post a Comment

Popular posts from this blog

鄭子璉 | 個人隨寫

By admin
https://tlcheng.wordpress.com/%e9%97%9c%e6%96%bc/ https://tlcheng.wordpress.com/%e8%87%aa%e7%94%b1%e7%95%99%e8%a8%80/ https://tlcheng.wordpress.com/ https://tlcheng.wordpress.com/page/2/ https://tlcheng.wordpress.com/2019/08/21/sql-server-%e8%b3%87%e6%96%99%e5%ba%ab%e6%90%8d%e6%af%80%e8%88%87%e4%bf%ae%e5%be%a9/ https://tlcheng.wordpress.com/author/tlcheng/ https://tlcheng.files.wordpress.com/2019/08/19133007_info_dbcc_825_01.png https://tlcheng.files.wordpress.com/2019/08/19134221_fail_dbcc_8646.png https://tlcheng.files.wordpress.com/2019/08/19140935_fail_dbcc_824.png https://tlcheng.files.wordpress.com/2019/08/19153642_info_dbcc_8957_01.png https://tlcheng.files.wordpress.com/2019/08/19160231_fail_lock_1204.png https://tlcheng.files.wordpress.com/2019/08/19160326_info_dbcc_825_02.png https://tlcheng.files.wordpress.com/2019/08/20232545_info_dbcc_8957_02.png https://tlcheng.files.wordpress.com/2019/08/20234545_info_dbcc_8957_03.png https://tlcheng.files.wordpress.com/2019/08/20235716_...
Post a Comment
Read more

5525 Interesting News

By admin
TikTok Restoring Service for U.S. Users, After Trump Signals He Will Save It The pandemic has changed the shape of global happiness The "Scream" franchise adds another self-referential sequel Millions of Chinese people play guandan. Is that good or bad? A theatre in Jenin offers a different kind of Palestinian resistance Economic data, commodities and markets Covid-19 has shone a light on racial disparities in health Is Syria's drug-dealing dictator coming in from the cold? Female soldiers are changing how armed forces work This Tool Probes Frontier AI Models for Lapses in Intelligence How much cash should be removed from the financial system? Can the voluntary carbon market save the Amazon? File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add This week's cover War in space is no longer science fiction The best Apple deals you can get right now: Save on Apple TV+, AirPods, iPads and more Trump's Agg...
Post a Comment
Read more

5504 Interesting News

By admin
Imran Khan is convicted. Pakistan's generals are content Economic data, commodities and markets Xi Jinping is obsessed with political loyalty in the PLA Momentum against Joe Biden is mounting again Even China's own state media sometimes resent state control Southern Italy needs private enterprise and infrastructure Oil bosses have big hopes for the AI boom Nvidia Probed in China Over Possible Antimonopoly Violations A trove of photographs casts light on Bangladesh's liberation war Business Some Australians are increasingly sceptical of AUKUS KAL's cartoon Business Andrés Manuel López Obrador puts his stamp on Mexico's schools Beyond France, the European elections will deliver more of the same Why New York scrapped congestion charging What Israel's killing of aid workers means for Gaza How to pay for the poor world to go green China will become less populous, more productive—and more pricey Economic data, commodities and markets Japan lands on the Moon England...
Post a Comment
Read more