search

8chanAnon / Kraker-Local-Proxy-Server

A local proxy server based on Node.js for use with desktop web browsers. Primarily intended for website hacking. Includes HTTP, HTTPS and Socks5 ports with integrated DNS and DNS-over-HTTPS.
https://8chananon.github.io
2 stars 1 forks source link

General discussion #1

Open 8chanAnon opened 2 years ago

8chanAnon commented 2 years ago

Welcome to my project.

You can help by posting here about any issues you may have with installing or running the Kraker Local Proxy Server. A kind note doesn't hurt either.

Thank you for your assistance.

muniv11111 commented 11 months ago

Great job! It helped me solve all CORS problems so far, I just replaced localhost and proxy_addr in the kraker-4e.js file with the IP address of my VPS...

And I even managed to get this kind of encrypted stream running from my site -

EXTM3U #EXT-X-VERSION:4 #EXT-X-START:TIME-OFFSET=9 #EXT-X-TARGETDURATION:4 #EXT-X-MEDIA-SEQUENCE:2220 #EXT-X-KEY:METHOD=AES -128,URI= ..... V=0x....... ,KEYFORMAT="identity",KEYFORMATVERSIONS="1"

8chanAnon commented 11 months ago

@muniv11111 Thank you for your post. You win the prize for being my very first contributor. The check is in the mail. :)

I just replaced localhost and proxy_addr in the kraker-4e.js file with the IP address of my VPS

Sounds interesting but I'm not grasping how that would work.

And I even managed to get this kind of encrypted stream running from my site

What? How?

muniv11111 commented 6 months ago

Unfortunately, my site was canceled by the provider, and I don't have a backup anywhere, I'll have to get into it again. Just a question. Would it be possible, by modifying the proxy server, both http and socks5, to turn on on demand logging of all requests - as entire urls, possibly even the required headers, as we see it network activity tab in chrome dev tools? Log to console or to some file?

8chanAnon commented 6 months ago

@muniv11111 It would help if you provide me with an idea of your intent. Calls through HTTP or HTTPS are shown on the console by default unless you specify otherwise. There is an option to display the domain name of any socket connection made through the socks5 port but that's not what you want. It is not feasible to show the URLs or headers because they are encrypted within the SSL stream. The socks5 port is just a tunnel and has no ability to sniff the content. However, you can set up a shadow port to route specific domains through the HTTP or HTTPS port.

I haven't updated the Kraker code for a long while because I decided to go full throttle on the project to add every feature that I can think of before releasing again. What you're asking for is available. I built interfaces and tools for the purpose of trapping requests to view the headers and save the content to disk (exactly what you're asking for). I've been needing these tools to hack websites since the browser developer tools are woefully inadequate (and mostly broken). In any case, some websites deliberately break devtools so this is the only proper solution. I've tried HTTP Toolkit but it's slow and inefficient and doesn't really do what I need.

The software is currently stable (has been for a while but I keep adding stuff). If you can tell me what your purpose is then I'd be glad to pass you copies of the new tools. Unfortunately, documentation is lacking but I can walk you through it.

muniv11111 commented 6 months ago

Hello,

I'm not a skilled hacker at all, and I don't have any criminal plans, I'm just interested in these things. And the Kraker proxy server I used often helped me get links and bypass obstacles. So I would like to try your other tools if possible. I'm just learning and very often I end up with certificates and SSL, when for example a combination of KODI and fiddler or mitm proxy I am not able to set up a trusted proxy through which KODI would communicate. Whether I try it on a local PC or on a VPS. So things are going slow for me, not much time for this hobby.

Thanks for your interest...

On Mon, 15 Jan 2024, 03:18 8chanAnon, @.***> wrote:

@muniv11111 https://github.com/muniv11111 It would help if you provide me with an idea of your intent. Calls through HTTP or HTTPS are shown on the console by default unless you specify otherwise. There is an option to display the domain name of any socket connection made through the socks5 port but that's not what you want. It is not feasible to show the URLs or headers because they are encrypted within the SSL stream. The socks5 port is just a tunnel and has no ability to sniff the content. However, you can set up a shadow port to route specific domains through the HTTP or HTTPS port.

I haven't updated the Kraker code for a long while because I decided to go full throttle on the project to add every feature that I can think of before releasing again. What you're asking for is available. I built interfaces and tools for the purpose of trapping requests to view the headers and save the content to disk (exactly what you're asking for). I've been needing these tools to hack websites since the browser developer tools are woefully inadequate (and mostly broken). In any case, some websites deliberately break devtools so this is the only proper solution. I've tried HTTP Toolkit but it's slow and inefficient and doesn't really do what I need.

The software is currently stable (has been for a while but I keep adding stuff). If you can tell me what your purpose is then I'd be glad to pass you copies of the new tools. Unfortunately, documentation is lacking but I can walk you through it.

— Reply to this email directly, view it on GitHub https://github.com/8chanAnon/Kraker-Local-Proxy-Server/issues/1#issuecomment-1891200163, or unsubscribe https://github.com/notifications/unsubscribe-auth/AGDVJC2PIEL7ILIFHJENCXLYOSGWXAVCNFSM5V6JX5J2U5DIOJSWCZC7NNSXTN2JONZXKZKDN5WW2ZLOOQ5TCOBZGEZDAMBRGYZQ . You are receiving this because you were mentioned.Message ID: @.***>

8chanAnon commented 6 months ago

@muniv11111

I am not able to set up a trusted proxy through which KODI would communicate

Explain what you want to do. Why do you need a proxy for Kodi? Does Kodi support proxies or are you needing to hack this? Say, for example, that you need to read a file from some video site. Can you not send the link through localhost:8080 (because you need to massage some header or something)?

I use SMPlayer (similar to VLC) to watch movies and TV shows. Some videos simply won't work (usually because a certain header must be present). This is a problem with pirate video sites because they use all sorts of tricks to prevent links from being usable without their own malware-infested video player. All I have to do is send the video link through localhost:8080 with the appropriate command string for whatever needs fixing.

Please provide more information about what you would like to do. There is probably an easy solution and I can help you find it.

Thanks for your interest...

No problem. I'm always pleased when somebody wants to talk to me about this stuff (since nobody else is talking to me). The world is currently oblivious to what I've been doing here. Hopefully, that won't be the situation for much longer since my newest version of Kraker is a killer app (no exaggeration). Just waiting for the right time to put it out there.

8chanAnon commented 6 months ago

@muniv11111 I installed Kodi a long time ago and ended up deleting it. It doesn't allow anything at all to be done easily. I really don't know what it's good for. If all you want is to play videos from a playlist then what does Kodi have to offer? Just write up an m3u in Notepad and play it in VLC or SMPlayer.

Whatever you are doing with Kodi, I could probably write a browser app to do it. The proxy server can serve video files (in case you didn't realize that). Just make an alias to your video directory. You could play videos from an HTML page too.