proxytunnel VS chisel

Using Proxytunnel [1] to do specifically this, in an environment where a packet inspecting proxy prevents SSH traffic.

It supports connecting over HTTPs, so the traffic doesn't look fishy with the setup of: SSH Client -> HTTPs Encryption -> Corporate Packet Sniffing Proxy -> Your Server -> HTTPs Decryption -> SSHD Server

Looking forward to explore chisel as well.

[1] https://github.com/proxytunnel/proxytunnel

It seems safe to post this too now that it's closing.

It was also possible to SSH from the Kindle, over its 3G connection.

So the SIM card could be kept in the Kindle, to be used as originally intended. But also (in an emergency) to use a few KB of data anywhere in the world for SSH.

I was very careful to use <1 MB of data - as this use case isn't quite what the Kindle was designed for, probably. :-)

From memory, broad steps were:

- Root (jailbreak) the Kindle, and sideload "USB Networking" (to allow tethering - i.e., connect the Kindle to a computer via USB, and the computer would share the Kindle's Internet connection)

- Read the magic key (which the HTTP proxy required) - it was sitting in a plaintext file within /var/local/ so could be easily read after rooting the Kindle

- Run an SSH server on the HTTPS port (TCP/443), then use proxytunnel to connect via the HTTP proxy server - https://github.com/proxytunnel/proxytunnel (proxytunnel has an option to pass an arbitrary HTTP header containing the magic key)

chisel - SSH under the hood, but still uses a custom client binary. Supports auto certs from LetsEncrypt. Written in Go.

Looking at the perf https://github.com/jpillora/chisel/blob/master/test/bench/pe... it looks not too bad!

I have a few TCP based utilities. I was thinking I need to make websocket equivalents for it to work on the web, but happy to see this project, I will be evaluating this soon, it should save me some time.

Thanks for sharing!

Personally I use https://github.com/jpillora/chisel as a reverse Proxy through nginx, then connect through it using OpenVPN to bypass a similarly restrictive firewall. But this discussion is filled with other, similar hacks, I may have to try some of them.

To keep everything secure, each chisel client has a separate TLS private key. That lets my reverse proxy authenticate the client before allowing a connection to the Chisel backend service. And on the Chisel backend service side, the --auth= part allows that particular client to bind to the specific XXX port within that Docker container. https://github.com/jpillora/chisel/blob/master/example/users.json

I love it in the context of hacking actually. When working on HackTheBox machines or other CTFs you sometimes need to deploy tools onto the machine like these:

* https://github.com/jpillora/chisel

rclone and chisel. rclone is a high quality swiss-army knife for selfhosting. It does a lot of things and it does all of those things surprisingly well. chisel provides an TCP/UDP tunnel over websockets. When heroku used to be free, I had a couple of chisel instances running on Heroku, which I would use, occasionally, to quickly access any of my locally hosted apps or servers.

GitHub - jpillora/chisel: A fast TCP/UDP tunnel over HTTP

You should try Chisel https://github.com/jpillora/chisel