Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
TCPWatch is a utility written in Python that lets you monitor forwarded TCP connections or HTTP proxy connections. It displays the sessions in a window with a history of past connections. It is useful for developing and debugging protocol implementations and web services.
Version 1.3 is compatible with Tkinter installations that use threads. See the change log for a list of other changes.
TCPWatch is licensed under ZPL 2.0 and requires Python 2.1 or later.
Version 1.3.1
Convert to use setuptools and console scripts for installation
Release to PyPI.
Version 1.3
Made compatible with versions of tcl that have threads enabled.
Log file numbers are now sequential.
"user@host" is now accepted as a destination hostname (the user name is ignored).
Version 1.2.1
Version 1.2
Added the ability to record TCP sessions to a directory. Use -r . Implemented by Tres Seaver.
Replaced the launch script with a distutils setup.py, thanks again to Tres Seaver.
Version 1.1
Almost completely rewritten. The code is now more reusable and reliable, but the user interface has not changed much.
8-bit clean. (You can now use TCPWatch to verify that SSH really does encrypt data. ;-) )
It can now run as a simple HTTP proxy server using the "-p" option. There are a lot of interesting ways to use this.
It's now easier to watch persistent HTTP connections. The "-h" option shows each transaction in a separate entry.
You can turn off the Tkinter GUI using the -s option, which outputs to stdout.
Colorized Tkinter output.
Version 1.0
Never released to the public.
FAQs
TCP monitoring and logging tool with support for HTTP 1.1
We found that tcpwatch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.