Skip to content

SOCKS Proxy module

Balazs Bucsay edited this page Jun 3, 2018 · 3 revisions

Base protocol: SOCKS v4, v4a, v5
Type: Stateful
Parent: TCP Generic

Introduction

SOCKS protocol is widely used by proxies and other network services like SSH. If the user needs a full TCP connection between its target and the client computer through a proxy then SOCKS protocol/a SOCKS proxy could be the proper choice. After connecting to the proxy, the target IP and port can be specified and the connection will be made by the proxy. All data sent to the proxy will be forwarded to the host vice versa.

When to use

On networks where the only way to access the internet is a SOCKS proxy or if SSH was used with the -D argument to create a SOCKS proxy, this module could be used. (Do not forget the overrideproxy= configuration attribute when using with SSH on localhost - overrideproxy)

Configuration

[SOCKS]
enabled = yes
version = 5
serverport = 1339
proxyip = 1.1.1.1
proxyport = 1080
userid = onlyv4userid
usernamev5 = onlyv5username
passwordv5 = onlyv5password

enabled

The value of this attribute is either yes or no. If it was set to yes, then the module will be initiated when the framework is started.

version

It should correspond to the SOCKS proxy's version. It can be one of the following:

  • 4
  • 4a
  • 5

serverport

In server mode, this module fully acts like the TCP Generic module. It spins up a TCP Generic server, and the listening port will be the specified one.

proxyip

Proxy server's IP address has to be provided here.

proxyport

Proxy server's port has to be provided here.

userid

version 4a only

COMMENT OUT IF NOT USED. If the proxy server requires an User ID for "authentication" purposes, that should be provided here.

usernamev5

version 5 only

COMMENT OUT IF NOT USED. If the proxy server requires authentication, the username should be provided here.

passwordv5

version 5 only

COMMENT OUT IF NOT USED. If the proxy server requires authentication, the password should be provided here.

Firewall rules on the server

Allow incoming TCP connections to the serverport that was configured the config file.

XFLTReaT wiki pages

Clone this wiki locally