.. /Rathole
Star

Access

Rathole is a reverse proxy for NAT traversal, written in Rust, functionally similar to frp. A server on a public operator-controlled host and a client on the target network are each configured with a TOML file describing the services to expose; the client dials out to the server, so no inbound access to the target network is required. It supports TLS and Noise transports.

Paths:

Resources:

Detections:

Access

  1. Runs on the operator's public host and waits for client connections, exposing the services configured in server.toml.

    rathole --server server.toml
    Use case
    Operator side of a reverse proxy tunnel.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS

  2. Runs on the compromised host. The configuration maps a local service (for example 127.0.0.1:22 or 127.0.0.1:3389) to a service name defined on the server.

    rathole --client client.toml
    Use case
    Exposing an internal service such as SSH or RDP to the operator through the server.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS