I had to check how a particular email server would behave when receiving email via a Tor exit node, but the packet capture software wouldn't run on my client. Instead of doing the logical thing, and figuring out what the problem was with the packet capture software, I searched for another solution. I looked for software that I could put between the email client and the Tor client, and monitor all traffic. Like this: It isn't easy to distinguish incoming and outgoing traffic, hence I made a small change to the hexdump module: With the following result: Unfortunately, tcpproxy is for Python 2 only. Although I was able to modify it to run on Python 3 too. Further experimenting will tell me if I'll continue to use it. The reason why I like this program so far: it's a script, it's configurable through command-line options and extensible via modules, and it depends on standard Python modules only. Which makes it usable on many machines I have to work on. If you have a TCP proxy script you like, please let me know with a comment. Thanks.
Didier Stevens |
DidierStevens 533 Posts ISC Handler Jul 27th 2019 |
Thread locked Subscribe |
Jul 27th 2019 1 year ago |
bash < /dev/tcp/127.0.0.1/8080 | tee copy.bin >/dev/tcp/proxyhost/8080
But this python plugin looks lovely! Thx! |
Anonymous |
Quote |
Jul 29th 2019 1 year ago |
Sign Up for Free or Log In to start participating in the conversation!