Monday, 25 June 2018
3 comments

XFLTReaT- A Python Based Tunneling Framework

XFLTReaT- A Python Based Tunneling Framework


XFLTReaT A Python Based Tunneling Framework


This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunneling tools for each protocols, this must be your tool framework.

Introduction

This project is an open-source Python based tunneling framework that helps you to create a tunnel between two (or more) computers on different channels/protocols. Although the name of the project correlates with the word "ex-filtrate", the framework is more about tunneling than ex-filtration. The main use-case for it is to create a full Internet Protocol v4 (IPv4) based tunnel between the end points, that can be used as a communication channel to send IP packets back and forth.

The tool is built on the client-server architecture, so at least two computers are needed to set up the environment. The server side can offer different protocols that can be used for tunneling. The client chooses a protocol that is offered by the server and available on the client network (for example: allowed on the firewall or not restricted by an active network device), and attempts to create a communication channel or tunnel with the server. If the process succeeds, the specified protocol will be used to tunnel data over the network.

Available modules

  • TCP
  • UDP
  • ICMP
  • SOCKS v4, 4a, 5
  • HTTP CONNECT
  • SCTP (by Darren Martyn @info_dox)
  • WebSocket
  • DNS (A/CNAME, PRIVATE, NULL) - Proof of Concept
  • RDP (Windows only)
  • TL;DR

If you want to:

  • get unrestricted Internet access from restricted networks
  • exfiltrate data over a noisy side channel
  • use a custom protocol to tunnel data
  • etc.

Then this could be your ultimate tool.

A few things to note
  • Python 2.7
  • root/Administrator privileges are required



Framework

By aiming to change this, XFLTReaT works as a framework. It supports multiple protocols (not just only one) and unifies the interface for all tunneling modules. It is possible to create new tunnel modules for protocols with ease.

Also the framework makes tunneling easier for everybody, because:

  • It is easy to install and configure (still a basic understanding is needed)
  • The dependencies are kept low
  • Unified tunneling interface is developed for creating modules
  • Uses only one interface for all traffic
  • Handles multiple clients
  • Modular authentication support
  • Modular encryption support
  • Python based and OOP

Installation

to get the master branch

# git clone https://github.com/earthquake/XFLTReaT

# pip install -r misc/requirements_linux.txt

to get the next-version branch

# git clone https://github.com/earthquake/XFLTReaT
# git checkout next-version

3 comments:

  1. nice post.thanks for sharing the more valuable information.
    Indian Cyber Army credibility in Ethical hacking training & Cybercrime investigation training is acknowledged across nation as we offer hands on practical knowledge and full assistance with basic as well as advanced level ethical hacking & cybercrime investigation courses. The training is conducted by subject specialist corporate professionals with wide experience in managing real-time ethical hacking/ cyber security projects. Indian Cyber Army implements a blend of academic learning and practical sessions to give the candidate optimum exposure.Ethical hacking training ,
    Ethical hacking course

    ReplyDelete
  2. It was interesting for me that here I found quite useful info about writing resume job description. I used it in order to know more about future career.

    ReplyDelete


  3. i was lost with no hope for my wife was cheating and had always got away with it because i did not know how or always too scared to pin anything on her. with the help a friend who recommended me to oneofonehack AT g mail dot com who help hack her phone, email, chat, sms and expose her for a cheater she is. I just want to say a big thank you to oneofonehack At G mail dot com. am sure someone out there is looking for how to solve his relationship problems, you can also contact him for all sorts of hacking job..he is fast and reliable. CONTACT via text +1 518 628 4630 or text on whats app through this number + 1 518 504 9376

    ReplyDelete

 
Toggle Footer
Top