.. /NPS
Star

Access

NPS is a Chinese-developed intranet-penetration proxy server with a web management console. A server component (nps) is installed on an operator-controlled host, and a client component (npc) run on the target network registers with the server and exposes configured TCP/UDP/HTTP(S)/SOCKS5 tunnels, all managed through the web UI rather than command-line flags.

Paths:

Resources:

Detections:

Access

  1. Installs and starts the NPS server as a system service on the operator's host, exposing the web management console (default port 8080) and the client bridge port (default 8024).

    ./nps install && nps start
    Use case
    Operator side of the proxy.
    Privileges required
    Administrator/root
    Operating systems
    Windows, Linux, MacOS
  2. Connects a client on the target network to the NPS server using a key generated in the web console, after which tunnels configured in the console become active.

    ./npc -server=<SERVER_IP>:8024 -vkey=<CLIENT_KEY>
    Use case
    Exposing internal services, or pivoting into the internal network, through the operator's NPS server.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS