
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
github.com/jpillora/go-tcp-proxy
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
A small TCP proxy written in Go
This project was intended for debugging text-based protocols. The next version will address binary protocols.
Binaries
Download the latest release, or
Install latest release now with curl https://i.jpillora.com/go-tcp-proxy! | bash
Source
$ go get -v github.com/jpillora/go-tcp-proxy/cmd/tcp-proxy
$ tcp-proxy --help
Usage of tcp-proxy:
-c: output ansi colors
-h: output hex
-l="localhost:9999": local address
-n: disable nagles algorithm
-r="localhost:80": remote address
-match="": match regex (in the form 'regex')
-replace="": replace regex (in the form 'regex~replacer')
-v: display server actions
-vv: display server actions and all tcp data
Note: Regex match and replace only works on text strings and does NOT work across packet boundaries
Since HTTP runs over TCP, we can also use tcp-proxy
as a primitive HTTP proxy:
$ tcp-proxy -r echo.jpillora.com:80
Proxying from localhost:9999 to echo.jpillora.com:80
Then test with curl
:
$ curl -H 'Host: echo.jpillora.com' localhost:9999/foo
{
"method": "GET",
"url": "/foo"
...
}
$ tcp-proxy -r echo.jpillora.com:80 -match 'Host: (.+)'
Proxying from localhost:9999 to echo.jpillora.com:80
Matching Host: (.+)
#run curl again...
Connection #001 Match #1: Host: echo.jpillora.com
$ tcp-proxy -r echo.jpillora.com:80 -replace '"ip": "([^"]+)"~"ip": "REDACTED"'
Proxying from localhost:9999 to echo.jpillora.com:80
Replacing "ip": "([^"]+)" with "ip": "REDACTED"
#run curl again...
{
"ip": "REDACTED",
...
Note: The -replace
option is in the form regex~replacer
. Where replacer
may contain $N
to substitute in group N
.
tcpproxy.Conn
which provides accounting and hooks into the underlying net.Conn
encoding.BinaryUnmarshaler
to a tcpproxy.Conn
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.