sclient

README

sclient.go

Secure Client for exposing TLS (aka SSL) secured services as plain-text connections locally.

Also ideal for multiplexing a single port with multiple protocols using SNI.

Unwrap a TLS connection:

$ sclient whatever.com:443 localhost:3000
> [listening] whatever.com:443 <= localhost:3000

Connect via Telnet

$ telnet localhost 3000

Connect via netcat (nc)

$ nc localhost 3000

cURL

$ curl http://localhost:3000 -H 'Host: whatever.com'

A poor man's (or Windows user's) makeshift replacement for openssl s_client, stunnel, or socat.

Install

Downloads

• Windows 10
• Mac OS X
• Linux (x64)
• Raspberry Pi (armv7)
• more downloads https://telebit.cloud/sclient/

Build from source

For the moment you'll have to install go and compile sclient yourself:

• https://golang.org/doc/install#install

git clone https://git.coolaj86.com/coolaj86/sclient.go.git
pushd sclient.go
go build -o dist/sclient cmd/sclient/main.go
rsync -av dist/sclient /usr/local/bin/sclient

go run cmd/sclient/main.go example.com:443 localhost:3000

Usage

sclient [flags] <remote> <local>

• flags
  • -k, --insecure ignore invalid TLS (SSL/HTTPS) certificates
  • --servername spoof SNI (to disable use IP as <remote> and do not use this option)
• remote
  • must have servername (i.e. example.com)
  • port is optional (default is 443)
• local
  • address is optional (default is localhost)
  • must have port (i.e. 3000)

Examples

Bridge between telebit.cloud and local port 3000.

sclient telebit.cloud 3000

Same as above, but more explicit

sclient telebit.cloud:443 localhost:3000

Ignore a bad TLS/SSL/HTTPS certificate and connect anyway.

sclient -k badtls.telebit.cloud:443 localhost:3000

Reading from stdin

sclient telebit.cloud:443 -

sclient telebit.cloud:443 - </path/to/file

Piping

printf "GET / HTTP/1.1\r\nHost: telebit.cloud\r\n\r\n" | sclient telebit.cloud:443

Testing for security vulnerabilities on the remote:

sclient -servername "Robert'); DROP TABLE Students;" example.com localhost:3000

sclient -servername "../../../.hidden/private.txt" example.com localhost:3000

Documentation

Index

• type PipeOpts
• type Rwc
• type Tun
  • func (*Tun) DialAndListen(opts *PipeOpts) error

Types

type PipeOpts

type PipeOpts struct {
	RemoteAddress      string
	RemotePort         int
	LocalAddress       string
	LocalPort          int
	InsecureSkipVerify bool
	ServerName         string
}

type Rwc

type Rwc interface {
	io.ReadWriteCloser
	RemoteAddr() net.Addr
}

not all of net.Conn, just RWC and RemoteAddr()

type Tun

type Tun struct{}

func (*Tun) DialAndListen

func (*Tun) DialAndListen(opts *PipeOpts) error