GithubHelp home page GithubHelp logo

snail007 / shadowtunnel Goto Github PK

View Code? Open in Web Editor NEW
166.0 9.0 42.0 66 KB

secure tunnel which help you protecting your tcp traffic between your machine and your service on remote.

License: GNU Lesser General Public License v3.0

Go 100.00%
tunnel-server tunnel-client shadowsocks shadowsocksr-libev http-proxy https-proxy tcp-proxy socks5-proxy ssr gfw

shadowtunnel's People

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

shadowtunnel's Issues

WARNING: this tool is not safe to use

There probably aren't many people using to encrypt their traffic any more, but in case anyone was thinking about it, please don't.

Breaking the encryption of this tool was a challenge for Real World CTF 2020.

By defaul the tunnel uses AES-CFB with a static Initialisation Vector, so multiple connections are encrypted using the same keystream. Furthermore, the streams are malleable, so an adversary can capture your traffic and decrypt it by replaying it through your own proxy server.

Here is a full writeup

建议增加访问认证设置

非常好,已经用起来了,配置也比SSR简单很多

为了方便家里和手机端使用,我把客户端配置到了一台国内的vps上,switchyOmega只要配置这个地址就能使用。

这样就有一个问题,如果别人知道了我的服务器地址或者客户端地址,就能随意的使用,这一点是非常不安全的,希望增加用户认证的功能。

server crash

Hello ,I had a server side shadowtunnel crash, client and server version is v1.1
server cmd:

setsid ./shadowtunnel -u -e -f 127.0.0.1:38080 -l :50000 -p 123456 >shadow.log 2>&1 &

client cmd:

./shadowtunnel -E -U -f x.x.x.x:50000 -l :50000 -p 123456

following is key log from server:

runtime/debug.Stack(0xc42004acc8, 0x6c6dc0, 0x8cd2a0)
/usr/local/go/src/runtime/debug/stack.go:24 +0xa7
github.com/snail007/goproxy/core/dst.NewMux.func2.1()
/home/pengmeng/go/src/github.com/snail007/goproxy/core/dst/mux.go:85 +0x48
panic(0x6c6dc0, 0x8cd2a0)
/usr/local/go/src/runtime/panic.go:502 +0x229
encoding/binary.binary.bigEndian.Uint32(...)
/usr/local/go/src/encoding/binary/binary.go:111
github.com/snail007/goproxy/core/dst.unmarshalHeader(0xc420136000, 0x4, 0x1f4, 0x0, 0x0)
/home/pengmeng/go/src/github.com/snail007/goproxy/core/dst/packets.go:86 +0xcd
github.com/snail007/goproxy/core/dst.(*Mux).readerLoop(0xc420054360)
/home/pengmeng/go/src/github.com/snail007/goproxy/core/dst/mux.go:269 +0x101
github.com/snail007/goproxy/core/dst.NewMux.func2(0xc420054360)
/home/pengmeng/go/src/github.com/snail007/goproxy/core/dst/mux.go:88 +0x47
created by github.com/snail007/goproxy/core/dst.NewMux
/home/pengmeng/go/src/github.com/snail007/goproxy/core/dst/mux.go:82 +0x28f
2018/09/07 02:50:36 14.30.175.184:40483 <--> 127.0.0.1:38080 released

cannot find package "github.com/snail007/proxy/core/dst"

Hi,
I downloaded this project and I run it but I got this error in building:
cannot find package "github.com/snail007/proxy/core/dst"
Is exist this repository (github.com/snail007/proxy)? I cannot find this repo anywhere. Any help, please.

建议增加多后端负载均衡功能

我现在有2个vps,都安装了goproxy 和shadowtunnel,我想要在本地局域网服务器上监听一个端口,然后能够通过隧道将流量转发到2台vps上。
我使用这个命令可以正常监听,但是日志显示只与其中一台建立了连接:

shadowtunnel -E -f 1.1.1.1:5000 -f 1.1.1.2:5000 -l :5000

当停掉建立连接的服务器上的服务时,流量并没有切换到另一台上。

-c 参数怎么用呢

发现新版增加了 -c 参数,试着两边都加了 -c 参数用了一下,但是发现无法建立连接。

请问 -c 参数怎么用呢? 是不需要解压缩的参数吗?

server and client crash v1.6

Hello,snail!
I was runing shadowtunnel in debug mode.when I want to quit it, it occurs.
Both Server and Client have this problem,here is the output log:

2019/03/25 22:03:51.853881 st.go:705: clean handler crashed, err :
goroutine 8 [running]:
runtime/debug.Stack(0xc0420b7df0, 0x7d9860, 0xa81570)
/usr/local/go/src/runtime/debug/stack.go:24 +0xae
github.com/snail007/shadowtunnel/core.cleanup.func1.1()
/home/pengmeng/go/src/github.com/snail007/shadowtunnel/core/st.go:434 +0x4f
panic(0x7d9860, 0xa81570)
/usr/local/go/src/runtime/panic.go:502 +0x237
time.(*Ticker).Stop(0x0)
/usr/local/go/src/time/tick.go:46 +0x29
github.com/snail007/shadowtunnel/core.Stop()
/home/pengmeng/go/src/github.com/snail007/shadowtunnel/core/st.go:447 +0x6c
github.com/snail007/shadowtunnel/core.cleanup.func1(0xc04204c300, 0xc042055800)
/home/pengmeng/go/src/github.com/snail007/shadowtunnel/core/st.go:438 +0x5b
created by github.com/snail007/shadowtunnel/core.cleanup
/home/pengmeng/go/src/github.com/snail007/shadowtunnel/core/st.go:431 +0x154

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.