Comments (4)
Yep this is a good suggestion, will update the readme at some point :)
from chisel.
However, if I read this : http://www.thegeekstuff.com/2013/11/reverse-ssh-tunnel/
One should be able to tunnel a shell from a lan behind a firewall to internet over 443 or 80.
First layer would be to use a reverse ssh tunnel to a remote server, that is just sitting there waiting
Using ssh -fN -R 7000:localhost:22 username@yourMachine-ipaddress
as explained in the url above
Second layer would be to tunnel the port 22 traffic over chisel using port 80 or 443
That would result in a host on internet, you can use to get a shell on a desktop/server in a network behind a firewall.
1- server on lan (machine A) connects to internet over ssh, over http, to an internet ssh host (machine B)
2- from your home (machine C) you connect to machine B. There you can connect to machine A.
Voila. But could that work?
from chisel.
If you jpillora can confirm this could work, I can built and document it and write a blog on it.
All you have to do than is make a link.
from chisel.
I tried chisel and (client) installation is really easy. Also, the idea is awesome. However, I would like to use it on my own server. And on my server I already have HTTPS website.
As I understand, for chisel server you have to define host and port. But on my host (let's say myhost.org) at port 443 I already have a webserver running. So as I understand, I cannot run chisel on the same port as my webserver is already running. Is that true?
Anyway, I see that chisel server has an option --proxy.
My next question is then: how I can perform the proxying? Because I have an HTTPS-only website, this means all HTTP requests are redirected to HTTPS automatically.
So one option would be:
- run chisel on port 80 with proxy set to localhost:8080.
- run Nginx on localhost:8080 with auto redirection to 443
- run Nginx also on 443.
In that case:
- if user come to HTTPS with web browser, he will get HTTPS website;
- if user come to HTTP with web browser, he will be redirected to HTTPS website;
- if user come to HTTP with chisel, he will get connection to chisel server.
But could there been another option?
- run Nginx on port 80 with auto redirection to 443
- run Nginx also on localhost:4443.
- run chisel on 443 with proxy set to Nginx on localhost:4443
In that case:
- if user come to HTTP with web browser, he will be redirected to 443 port;
- if user come to 443 port with web browser, he will be proxyed to 4443 port and will get HTTPS website;
- if user come to 443 port with chisel, he will get connection to chisel server.
So, my question is, is that scenario possible?
An my next question is... Nginx can be used as a WebSocket proxy. In that case, Nginx "creates" a tunnel between a client and a backend server. Is it possible that backend server would be chisel? That would mean that client should connect to a specific URL, for instance https://myserver/websocket and from this location there will be tunnel established to let's say localhost:8080, where chisel would be listening.
That is possible?
from chisel.
Related Issues (20)
- multiple sockets bind to the same address
- Intermittent Authentication Failure with Chisel Server After Updating users.json
- there is no stop function?
- --keyfile documentation is incorrect
- Enable key automation HOT 4
- Unable to compile from source
- Any way to display Auth user when connecting?
- Getting error tls: failed to verify certificate on connecting with https HOT 1
- Use My lib for android apps
- Client version (0.0.0-src) differs from server version (v1.9.1) HOT 1
- Snort now blocking chisel HOT 2
- Question?
- Any way to run the websocket for a fixed duration HOT 1
- Question about using a fingerprint and hide credential in base64
- How could configure authfile when using remote socks
- Reverse example
- chisel + docker container cannot get reverse tunnel traffic
- Log all connection attempts when using as reverse proxy
- endpoint to retrieve active connection from chisel server
- The reason for Iran panel not coming up after tunneling HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from chisel.