secure-socket-funneling

No entries match these filters. Clear filters

1. 1.0.0 Feb 20, 2018 · release notes

   secure-socket-funneling v1.0.0 introduces new forwarding modes and protocol support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.0 https://github.com/securesocketfunneling/ssf.git
   # already have the repo? check out this version:
   $ git checkout 1.0.0

   • Adds -L and -R flags for local and remote TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port forwarding
   • Adds -U and -V flags for local and remote UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. port forwarding
   • Adds -D and -F flags for local and remote SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. server support
   • Adds -b flag to enable the native relay protocol

   4 details in Everything

2. 1.1.0 Feb 20, 2018 · release notes

   Adds ssfcp for file copying between client and server in v1.1.0

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.1.0 https://github.com/securesocketfunneling/ssf.git
   # already have the repo? check out this version:
   $ git checkout 1.1.0

   └──▷ USE IT
   Transfer a file from the client to the server via the secure tunnel.
   shell copy

   ssfcp -s ssfs:port /local/path remote:/remote/path

   └──▷ BREAKING ON UPGRADE

   • !The SSF_Client executable is now named ssfc.
   • !The SSF_Server executable is now named ssfs.
3. 3.0.0 Nov 17, 2017 · release notes

   secure-socket-funneling 3.0 adds ssf, ssfd, SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxy, client reconnection flags, and new config keys

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0.0 https://github.com/securesocketfunneling/ssf.git
   # already have the repo? check out this version:
   $ git checkout 3.0.0

   └──▷ TRY IT
   Configure automatic reconnection with limits and delay
   copy

   $ ./ssf --max-connect-attemps 5 --reconnect-delay 10

   Resume a broken file transfer with integrity checking
   copy

   $ ./ssfcp --resume -r --check-integrity source/ dest/

   • Adds --max-connect-attemps, --reconnect-delay, and --no-reconnect for automatic client reconnection logic
   • Adds http_proxy.user_agent, tls.ca_cert_buffer, tls.cert_buffer, tls.key_buffer, tls.dh_buffer, circuit, and arguments configuration keys
   • Introduces --resume, -r, --max-transfers, and --check-integrity options to the refactored ssfcp file transfer commands

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The executable is renamed from ssfc to ssf
   • !The server executable is renamed from ssfs to ssfd
   • !The -b client command line option is removed; use the circuit configuration file key instead
4. 2.2.0 Sep 16, 2016 · release notes

   secure-socket-funneling 2.2.0 adds microservices architecture, -g gateway ports, and -R relay server mode

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.2.0 https://github.com/securesocketfunneling/ssf.git
   # already have the repo? check out this version:
   $ git checkout 2.2.0

   └──▷ USE IT
   Listen on a specific interface for client tunnels
   shell copy

   ssf -c <server> -g 0.0.0.0:1080

   Run the server strictly as a relay without acting as a full gateway
   shell copy

   ssf -s -R

   • Adds gateway_ports configuration option to control network listening interface for client features
   • Adds -g CLI flag to specify gateway ports directly on the command line
   • Adds -R command line option to run the server as a relay only
   • Enables microservices base components for client features

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !http_proxy.credentials.reuse_ntlm and http_proxy.credentials.reuse_kerb values change from string to boolean in the configuration file
5. 2.1.0 Aug 25, 2016 · release notes

   Adds TLS over circuit layer, HTTP proxy (CONNECT/Basic/Digest/NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent./Negotiate) support, and -X/-Y shell options in v2.1.0

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.1.0 https://github.com/securesocketfunneling/ssf.git
   # already have the repo? check out this version:
   $ git checkout 2.1.0

   • Adds TLS layer over the existing circuit layer for encrypted transport
   • Adds HTTP proxy support via the CONNECT method for tunneling through proxies
   • Adds HTTP proxy authentication support for Basic, Digest, NTLM (Windows only), and Negotiate schemes
   • Adds -X and -Y options to provide a basic shell through the socket connection
   • Adds server network interface option to bind the listening socket to a specific interface

   5 details in Everything