sshprank
sshprank copied to clipboard
[Feature Request] Proxy/Tor Support
Hi again! Let me just say up front that you've done great work with this so far, and I look forward to seeing where this goes.
I'm wondering how feasible it would be to add a flag to route SSH requests through a socks5 (Tor) or other proxy. This would be greatly beneficial when trying to stay anonymous while pentesting.
It's worth noting that ProxyChains seems to work with this. So if it isn't something that you want to add then you could just point users to that.
@BroHowAreYou thank you. i will consider to implement this.
I recommend running multitor with privoxy as broker and haproxy as frontend:
multitor --init 10 -u debian-tor --socks-port 9000 --control-port 9900 --proxy privoxy --haproxy
Then just install proxychains-ng: apt install proxychains4
, open /etc/proxychains4.conf
, delete the line which is pointing to the local single tor instance (socks4 127.0.0.1 9050
) and add http 127.0.0.1 16739
to let your HAproxy handle and load balance all requests running over proxychains4.
Then run proxychains4 python3 sshprank.py ...
.
Works like a charm!
I think knowing about this or being willing to look this up should be an obstacle, which one may demand from a potential user. Once sshprank is is finished completely, it will be extremely powerful.