Skip to main content

Multi-Protocol Proxy Over TCP & UDP

Many years ago I programed a console based multi protocol proxy (the sha0proxy) lately I created in dotnet a graphical verison of the tool, but due to the form referesh speed finally I implemented it in C++ with Qt.

This tool useful for reversing, exploiting & pentesting was finally called rproxy, and its a multi-protocol proxy over TCP or UDP.





Being in the middle of the communication you can view and modify the bytes before being sent to the client or server.

In the tools tab right now its possible to open the blob on radare2 for further reversing of the data structures or code.


A basic mutation based fuzzer is implemented for bug-hunting, just set the % ratio of mutation and the bytes will be modified during specific communications phase.

One of the powerful things of this tool is the scripting, it is possible to automate a modification in specific moment of the traffic flow.



For example a script with a single line: "IN 3 20 3F" will write a 0x3f on the offset 20 only on the third packet received from the server. I have used this feature for triggering vulnerabilities.

Regarding the saving and loading data from disk, it's possible to save and load data in raw and hex formats. Also can be configured for save all the communications or only specific emission.


Find the source code and binaries at github: https://github.com/sha0coder/reproxy



Related links


Comments

Popular posts from this blog

鄭子璉 | 個人隨寫

https://tlcheng.wordpress.com/%e9%97%9c%e6%96%bc/ https://tlcheng.wordpress.com/%e8%87%aa%e7%94%b1%e7%95%99%e8%a8%80/ https://tlcheng.wordpress.com/ https://tlcheng.wordpress.com/page/2/ https://tlcheng.wordpress.com/2019/08/21/sql-server-%e8%b3%87%e6%96%99%e5%ba%ab%e6%90%8d%e6%af%80%e8%88%87%e4%bf%ae%e5%be%a9/ https://tlcheng.wordpress.com/author/tlcheng/ https://tlcheng.files.wordpress.com/2019/08/19133007_info_dbcc_825_01.png https://tlcheng.files.wordpress.com/2019/08/19134221_fail_dbcc_8646.png https://tlcheng.files.wordpress.com/2019/08/19140935_fail_dbcc_824.png https://tlcheng.files.wordpress.com/2019/08/19153642_info_dbcc_8957_01.png https://tlcheng.files.wordpress.com/2019/08/19160231_fail_lock_1204.png https://tlcheng.files.wordpress.com/2019/08/19160326_info_dbcc_825_02.png https://tlcheng.files.wordpress.com/2019/08/20232545_info_dbcc_8957_02.png https://tlcheng.files.wordpress.com/2019/08/20234545_info_dbcc_8957_03.png https://tlcheng.files.wordpress.com/2019/08/20235716_...

ත්රස්තවාදීන්ගේ අවසානය-දිවයින- 2008/10/03

kQlQ@n`c|cQy ngryt a`sn~n vW sQtQn yRq hmRq` @s~n`Ak It q#v#n~w pYh`r el~l krmQn~ ngry a`kYmNy kQrWmt sRq`nmQn~ sQtQwQ. kQlQ@n`c|cQy ngryt k`lwOvk~kO pYh`r el~l kQrWm a`rm|x krn qQny a$wk @n`vn bv yRq hmRq`pwQ lEwQnn~ @jnr`l~ srw~ @f`n~@s~k` psRgQyq` pYk`X k@L~y. e~ anRv kQlQ@n`c|cQy ngry aw~pw~kr g#nW@m| wWrN`w~mk avsn~ stn kQnm| @m`@h`wk @h`~ a#r@BnR a#w. yRq hmRq` @s~n`Ak @g`dbQmQn~ pYh`r el~l krmQn~ kQlQ@n`c|cQy @k`tQ bl@k`tRv a`kYmNy kQrWmt @n`nvwQn q#v#n~w @g`dbQm| pYh`r m`l`v a`rm|x kQrWmt sRq`nmQn~ sQtQyqW kQlQ@n`c|cQy pY@q~X@y~ @k`tQ k[vRr# @vw gOvn~ pYh`r @v|gvw~ kQrWmt gOvn~ hmRq`v pQyvr @gn a#w. psRgQy qQn kWpy wQs~@s~ gOvn~ hmRq` pYh`rk @jtQy`n` sh em|. ayQ. 24 pYh`rk @hlQ@k`p~tr\ y`n` mgQn~ gOvn~ pYh`r rFsk~ el~l krn lqW. pYx`krn...

5504 Interesting News

Imran Khan is convicted. Pakistan's generals are content Economic data, commodities and markets Xi Jinping is obsessed with political loyalty in the PLA Momentum against Joe Biden is mounting again Even China's own state media sometimes resent state control Southern Italy needs private enterprise and infrastructure Oil bosses have big hopes for the AI boom Nvidia Probed in China Over Possible Antimonopoly Violations A trove of photographs casts light on Bangladesh's liberation war Business Some Australians are increasingly sceptical of AUKUS KAL's cartoon Business Andrés Manuel López Obrador puts his stamp on Mexico's schools Beyond France, the European elections will deliver more of the same Why New York scrapped congestion charging What Israel's killing of aid workers means for Gaza How to pay for the poor world to go green China will become less populous, more productive—and more pricey Economic data, commodities and markets Japan lands on the Moon England...