Stowaway is a Go-based tool designed for penetration testers to create multi-hop proxy networks. It enables users to forward outbound traffic through multiple nodes to access internal networks, bypass access limitations, and build layered network structures for testing. The primary objective is to facilitate complex network penetration testing scenarios by providing a flexible and configurable proxy solution. It leverages multi-hop proxying techniques to achieve this. It allows the creation of more comprehensive networks.
Stowaway distinguishes itself with its flexible node management, allowing for easy creation of node trees and clear visualization of network connections. It offers powerful features like TCP/HTTP/WS protocol support, TLS encryption, and precise control over proxy settings, including the ability to use custom rehost and report modes for more complex configurations. The protocol conversion and user-friendly configuration tools contribute to its versatility and usability.
- Multi-hop Proxying: Facilitates complex network testing scenarios by creating layered proxy networks.
- Protocol Flexibility: Supports TCP, HTTP, WS, and TLS for versatile traffic forwarding.
- TLS Encryption: Secures traffic between nodes with TLS/AES-256-GCM encryption.
- User-Friendly Configuration: Provides command-line arguments for easy configuration of proxy settings.
- Rehost Capability: Allows for port remapping for flexible network setups.
- Port Reuse: Enables port reuse with both
SO_REUSEPORTand IPTABLES mechanisms for efficient resource utilization. - Integrated Shell: Facilitates remote shell access for enhanced investigation.
Stowaway is an actively developed project with a growing community. Regular updates and bug fixes indicate ongoing maintenance and improvement. The documentation is comprehensive, covering configuration, usage, and advanced features. Recent commits and issue activity demonstrate active development. While still evolving, the tool provides a solid foundation for penetration testing workflows.
Stowaway is valuable for cybersecurity professionals needing to navigate complex network environments and bypass security restrictions. It allows for creating multi-hop proxy chains to reach otherwise inaccessible resources and analyze traffic patterns. Its versatility and comprehensive configuration support make it an essential tool for advanced penetration testing, network analysis, and security research.