acebond/reversesocks5Single executable reverse SOCKS5 proxy written in Golang.
Reverse SOCKS5 proxy in Golang.
Usage of ReverseSocks5.exe:
-cert string
Certificate file if using TLS on the server
-connect string
Connect address for socks agent address:port
-k
Skip TLS certificate verification when using -tls (insecure)
-key string
Private key file if using TLS on the server
-listen string
Listen address for socks agents address:port (default ":10443")
-password string
Password used for SOCKS5 authentication. No authentication required if not configured.
-psk string
Pre-shared key for encryption and authentication between the agent and server (default "password")
-socks string
Listen address for socks server address:port (default "127.0.0.1:1080")
-tls
Connect with TLS instead of TCP, the server must be using certificates
-username string
Username used for SOCKS5 authentication
This will open the SOCKS5 port on 127.0.0.1:1080 and listen for an agent on :10443. Note the SOCKS5 port will only be accessible once an agent connects.
This will connect to the server and be the egress point for the SOCKS5 traffic, effectively exposing the internal network of the agent to anyone who can access the SOCKS5 port on the server.
To connect with TLS while skipping certificate verification, use:
ReverseSocks5.exe -connect server:10443 -tls -k
Certificate verification is enabled by default. The -k flag only affects TLS agent connections.
Note that Firefox is running on the same machine as the SOCKS5 server. This will cause Firefox (using the Proxy SwitchyOmega extension) to make all connections using the SOCKS5 server. On Linux, a common tool to access the SOCKS5 proxy is proxychains4.