https://cybertoolchain.io/tools/chisel New releases and features in chisel, tracked by The Cyber Toolchain. en Sat, 29 Aug 2026 13:30:36 GMT https://github.com/jpillora/chisel/releases/tag/v1.12.0 https://github.com/jpillora/chisel/releases/tag/v1.12.0 Sat, 29 Aug 2026 13:30:36 GMT Chisel 1.12 adds configurable retry intervals, socks5:// proxy URLs, SOCKS5 ACL enforcement, graceful SIGTERM shutdown, and stricter auth hardening. • Adds `--min-retry-interval` and `--max-retry-interval` flags to tune client exponential-backoff retry timing. • Adds `socks5://` scheme support for client proxy URLs, enabling chisel clients to egress through a SOCKS5 proxy. • Enforces SOCKS5 access in `--authfile`: users who should retain SOCKS5 access must now have an authfile entry matching `socks`; the wildcard `""` continues to match everything including `socks`. • Requires `--auth` values to use `<user>:<pass>` format with a colon; values without a colon now fail at startup instead of silently disabling authentication. • Requires `--fingerprint` to supply the full SHA256 fingerprint or the full 16-octet MD5 colon form; truncated MD5 prefixes are rejected. • Adds graceful SIGTERM shutdown with in-flight HTTP request draining so active tunnels complete cleanly before the process exits. • Authfile reloads now work reliably across editor rename-on-save and Kubernetes ConfigMap swaps; ACL changes apply to new tunnels without interrupting established ones. • A client that exhausts `--max-retry-count` now exits with a non-zero status code, making retry exhaustion detectable in scripts and CI. • Caps pre-authentication WebSocket messages while preserving every valid SSH packet, hardening the unauthenticated attack surface. • Reports accurate version strings for `go install` builds and adds info-level logs for session establishment, authentication events, and ACL denials. • Migrates CLI parsing and help output to `opts` with terminal-aware formatting and reliable wrapping at narrow widths. • Ships ko-built, scratch-based images with CA roots for six architectures, published to Docker Hub (`jpillora/chisel`) and GHCR (`ghcr.io/jpillora/chisel`). • Release CI now integrity-tests every `.gz` and `.zip` archive before any asset or image is published. Breaking changes: • With `--socks5` and `--authfile`, users who need SOCKS5 access must have an authfile entry matching `socks`; SOCKS5 previously bypassed the ACL list entirely. • `--fingerprint` now rejects truncated MD5 prefixes; only the full SHA256 fingerprint or the full deprecated 16-octet MD5 colon form is accepted. • `--auth` values without a colon now cause startup failure instead of silently disabling authentication. • A client that exhausts `--max-retry-count` exits non-zero; previously the exit code did not reliably signal retry exhaustion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/chisel https://github.com/jpillora/chisel/releases/tag/v1.9.0 https://github.com/jpillora/chisel/releases/tag/v1.9.0 Sat, 19 Aug 2023 01:15:07 GMT Adds --keygen and --keyfile for ECDSA key management with deprecation of --key • Adds `--keygen` and `--keyfile` to create and use ECDSA P256 keys Full history on Cyber Toolchain: https://cybertoolchain.io/tools/chisel https://github.com/jpillora/chisel/releases/tag/v1.8.1 https://github.com/jpillora/chisel/releases/tag/v1.8.1 Sat, 28 Jan 2023 00:11:20 GMT Adds `CHISEL_UDP_MAX_SIZE` env var to override UDP buffer size and client logger level control • `CHISEL_UDP_MAX_SIZE` environment variable allows overriding the default UDP buffer size for chisel connections. • Chisel client now supports setting the log level (e.g., debug, info, warn, error) to control verbosity of client-side output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/chisel