Have you ever wanted to run FFUF or some other tool over proxychains and found that it just did not work?
Try setting up a proxy in a proxy as follows:
# Setup Dynamic Port Forwarding
sudo ssh -p 22 -N -D 127.0.0.1:9052 user@target -o "UserKnownHostsFile=/dev/null"
# ensure Proxychains points to our Port
# (verify Proxy DNS requirements and adjust on/off)
# socks5 127.0.0.1 9052
sudo vi /etc/proxychains4.conf
# Install Proxy.py https://pypi.org/project/proxy.py/
pip install proxy.py
# Run proxy.py over proxychains
$ proxychains proxy
[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.16
2023-02-04 16:39:14,593 - pid:199836 [I] plugins.load:85 - Loaded plugin proxy.http.proxy.HttpProxyPlugin
2023-02-04 16:39:14,594 - pid:199836 [I] tcp.listen:80 - Listening on 127.0.0.1:8899
2023-02-04 16:39:14,604 - pid:199836 [I] pool.setup:105 - Started 2 acceptors in threadless (local) mode
# Use FFUF over proxy.py over proxychains
$ ffuf -x http://127.0.0.1:8899 -w /usr/share/wordlists/rockyou.txt -u http://localhost/login.php -X POST -H "Cookie: test_cookie=Cookie+check" -H "Content-Type: application/x-www-form-urlencoded" -d "log=admin&pwd=FUZZ"
Today I learned you can add proxychains connections to foxyproxy (firefox browser extension for managing proxies). This gives me a tremendous amount of satisfaction. #infosec #oscp #foxyproxy #proxychains #pentesting
#infosec #oscp #foxyproxy #proxychains #pentesting
I've just released Proxcon: a new tool that changes your #proxychains configuration directly from the command line.
If you like it, please consider giving it a star on Github
For those interested in learning "what a proxy is?" + answers to "how do I use proxies in #proxychains?", see this #blog post for howto/#tutorial + full list of working socks proxies + Tor Hidden Service front ends here. Adding new ones now.
https://www.buymeacoffee.com/politictech/lists-proxy-hidden-service-frontends-supporter-early-access
Howto: Anonymous On Tor With Proxychains
#Tutorial #OSINT #Proxychains #Privacy #HumanRights #Socks5 #Anonymous #Tips #Howto #Infosec #Tor #CybersecurityAwarenessMonth
#tutorial #osint #proxychains #privacy #humanrights #socks5 #anonymous #tips #howto #infosec #tor #cybersecurityawarenessmonth