Verder naar navigatie Doorgaan naar hoofdinhoud Ga naar de voettekst

Tool Release: tcpprox

21 februari 2013

door Aaron Haymore

This research was originally performed by researchers from iSec Partners (now NCC Group), and has been migrated to research.nccgroup.com for posterity.

Tool Release: tcpprox

21 Feb 2013 – Tim Newsham

Tcpprox is a simple command line tcp proxy written in Python. It is designed to have very minimal requirements – it runs directly from Python (tested in Python 2.7) from a single source file (unless the auto-certificate option is used).

When running, the proxy accepts incoming TCP connections and copies data to a TCP connection to another machine. Options allow for SSL and IPv6 connections and for the logging of all data. Data is logged in a format that preserves connection, timing and direction information and a small utility is provided to dump out the information in various formats. A small utility is also provided for generating CA and SSL certificates. This utility is the only component that relies on an external python library, but it can be run on a different machine if necessary.

In comparison with other TCP proxy tools, tcpprox is:

  • simpler.
  • built to support both IPv6 and IPv4.
  • able to auto-generate SSL certificates.
  • capable of extensive logging in different formats.

Project Page

Check it out on tcpprox’s Github page.