Show HN: Wiretap – Transparent WireGuard proxy server without root

• wiretap

  6 757 4.7 Go

  Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.

  

• wireproxy

  22 3,925 6.6 Go

  Wireguard client that exposes itself as a socks5 proxy

Wireproxy can do similar stuff: https://github.com/octeep/wireproxy

(Disclaimer: I am a contributor to Wireproxy)

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• wireguard-go

  14 2,712 6.3 Go

  Mirror only. Official repository is at https://git.zx2c4.com/wireguard-go

  

Vanilla WireGuard doesn't provide a way to run a peer in userspace that can proxy traffic between another peer and an endpoint such as a web server because you need to be privileged to do thinks like work with raw packets. However, https://github.com/WireGuard/wireguard-go is a userspace implementation of WireGuard and has recently incorporated Google's userspace networking stack. This project uses these two userspace tools to "fake" a privileged WireGuard peer that proxies TCP, UDP, and (a small subset of) ICMP. It was written as a pentesting/red team utility for my team but it can also serve as a general makeshift VPN when you don't have privileges on a box you want to proxy through.

Suggest a related project