Stowaway

Stowaway is a Multi-hop proxy tool for security researchers and pentesters

Users can easily proxy their network traffic to intranet nodes (multi-layer)

PS: The files under the demo folder are Stowaway’s beta version, it’s still functional, you can check the detail by README.md file under the demo folder

This tool is limited to security research and teaching, and the user bears all legal and related responsibilities caused by the use of this tool! The author does not assume any legal and related responsibilities!

Features

• Obvious node topology
• Clear information display of nodes and keep them permanently
• Active/passive connect mode between nodes
• The reverse connection between nodes through socks5 proxy
• Ssh tunnel mode
• Can be used on multiple platforms
• Multi-hop socks5 traffic proxy(Support UDP/TCP, IPV4/IPV6)
• Multi-hop ssh traffic proxy
• Remote interactive shell
• Upload/download functions
• Port Mapping(local to remote/remote to local)
• Port Reuse
• Open or Close all the services arbitrarily
• Authenticate each other between nodes
• Network traffic encryption with AES-256(CBC mode

Changelog v2.1

BE AWARE

• If you are trying to use admin on windows, plz make sure you have installed ansicon
• And if you have any problems when using the command shell, plz check the shell.go and read the annotation first!!! Maybe it can solve our problems.

Update

• 2021.10.1
  • Switch AES-CBC to AES-GCM.Thanks to @SignorMercurio
  • Fix bugs. Thanks to @SignorMercurio
• 2022.1.23
  • Fix shell&topo bugs. Thanks to @lz520520
• 2022.4.8
  • Fix data loss bug when closing a short connection. Thanks to @lz520520
  • Add gzip function. Thanks to @lz520520
  • Optimize the key code
  • Fix some bugs

Download

Usage

Stowaway can be executed as two kinds of mode: admin && agent

If you don’t want to compile the project by yourself, you can check the release folder to get ONE!

Simple example：

  Admin mode：./stowaway admin -l 9999 -s 123

  

  Meaning：

  

  admin  It means Stowaway is started as admin mode

  

  -l     It means Stowaway is listening on port 9999 and waiting for incoming connection



  -s     It means Stowaway has used 123 as the encrypt key during the communication

  

  Be aware! -s option's value must be as same as the agents' 



  For now, there are only three options above are supported!

agent mode： ./stowaway agent -m 127.0.0.1:9999 -l 10000 --startnode -s 123

  

  Meaning：

  

  agent It means Stowaway is started as agent mode 

  

  -m    It means Stowaway's monitor node's address (In this case,it's the node we started above)

  

  -l    It means Stowaway is listening on port 10000 and waiting for incoming connection 



  -s    It means Stowaway has used 123 as the encrypt key during the communication 



  --startnode  It means Stowaway is started as FIRST agent node(if the node is the first one , you MUST add this option!!! And there are two submode of agent mode,if you want to start the second, third one....., just remove this option)



  Be aware! -s option's value must be as same as the agents' 



 For now, there are only four options above are supported!

  

Now you can use the admin’s port 7777 as the socks5 proxy service

And it can proxy your traffic to the second simple node and the second simple node will do its work as socks server（ When you want to shut down this socks5 service, just type in “stopsocks” under this mode to turn off it)

Open ssh：

And it can proxy your ssh traffic to the second simple node and the second simple node will do its work as an ssh client.

Copyright (c) 2019 ph4ntom

Source: https://github.com/ph4ntonn/