Free https proxy server software for linux

Wsh, "Web Shell" is a remote UNIX/WIN shell, that works via HTTP/HTTPS. The package contains two perl scripts for server and client hosts, one C source code and one Java servlet code for the server host : the client script is for console usage and the server scripts run as CGI/Servlet scripts on the target host.
The client part provides shell-like prompt, encapsulating user commands into HTTP POST requests and sending them to the server part script on the target web server directly or via HTTP proxy server.
The server part extracts and executes commands from HTTP post requests and returns STDOUT and STDERR output as HTTP response messages. By default both scripts encode HTTP data with Xor.
Main features:
- SSL support
- Command line history support
- File upload/download
- Protect server part script usage with secret key inside HTTP message
- Data flow Xor encoding
- Can work trough HTTP proxy server.
Enhancements:
- WSH server Java servlet version was added.
- Disabled "why is it enabled ?" auth in wsh-c.conf.
- Corrected header fields mistakes in wsh-c-* (X-* => HTTP_X*)
Instalation
1. Check path to perl in the "config.pl" file;
2. Run "config.pl" : `./config.pl`
OPTIONAL ----------------------------------------------------
Modify the file "wsh-c.conf", if you want to use HTTP proxy;
use_proxy 1
proxy_ip
port
Check other client configuration options also..
-------------------------------------------------------------
3. For the wsh-s.c and WshServlet.java, check the Shell (*Nix or Win32) location;
4a. Perl server version :
+ Check path to perl and permissions of the newly created "wsh-c.pl";
+ Upload wsh-s.pl under the target cgi-bin directory and check path to perl;
4b. C server version :
+ Upload wsh-s.c under the target cgi-bin directory and compile it (remove the source code after) :
- Under *Nix : gcc -g2 -Wall -o wsh-s wsh-s.c
- Under Win32 (Visual C++) : cl /W3 wsh-s.c ws2_32.lib
- Under Win32 Cygwin : Set the WIN32_RUN variable in the source code and build it as for the *Nix version.
4c. Java servlet version :
+ Upload the java built version under a servlet executable location.
About SSL :
a. If you use a SSL wsh-c.pl client, you can configure the client to check the server certificate CN (but this check can be circumvented !):
my $ssl_set_check=1;
# (0 || 1) dont or check the webserver
# ssl certificate with internal
# ssl_crt_subject.
my $ssl_crt_subject="/C=Fr/ST=Paris/L=Paris/O=XXX/OU=XXX/CN=XXX";
=> You only have to execute the wsh-c.pl client one time and grab the CN displayed by the error message.
b. We didnt check the wsh-c-SSL.pl client on a Win32 platform. If you manage to install the Net::SSLeay on Win32 and check wsh-c-SSL.pl, send us a mail.

SSL Proxy server listens on a TCP port, accepts SSL connections, and forwards them to another local or remote TCP port.
For example, it is possible to create an HTTPS server if you have an HTTP server and you run an SSL Proxy server on port 443 which forwards the connections to port 80.
SSL Proxys design makes it as secure as possible and still perform well.
Enhancements:
- Improved certificate handling (chained certificates are now supported), more error information on SSL protocol errors during SSL_accept(), -U and -D options (buffer size), and a "powered by" logo.

divine is a utility for laptop users or people who use their machines in different networks all the time. It is meant to be run from the PCMCIA network initialization scripts.
DO NOT make divine setuid root. Divine contains tons of security holes like using system, it is meant as quick hack that will not hurt so much if it is run at boot time.
The idea is this:
- you describe the possible networks in /etc/divine.conf, including one or more machines that are probably up (routers and NIS servers come to mind).
- at boot time, you run divine.
- divine starts a thread that injects fake arp requests into the network. The thread will try again up to three times, pausing 1 second between retries.
If the last try times out again, the thread will print an error message, leave the interface in the original state and exit cleanly.
- the main thread just looks for arp replies and exits if one is found.
- You have one resolv.conf per network, for example /etc/resolv.conf.default and /etc/resolv.conf.work, and divine will symlink one of them to /etc/resolv.conf for you.
- You can specify a proxy server plus port and divine will write the proxy server to /etc/proxy. This can be evaluated inside your shell startup script, like this (zsh):
export http_proxy="http://`< /etc/proxy`/"
The included perl script edit-netscape-proxy.pl will edit the proxy settings in your Netscape 4 preferences file.
- You can even specify an additional script to be run for each selection. You can use this to edit /etc/printcap or /etc/issue or do something else I forgot.

RtspProxy is a proxy server for multimedia streaming services based on the RTSP protocol.
The current version is a complete rewrite from scratch in Java of previous versions based on C++. The goal is to build a robust and scalable system usable in production environment.
The proxy is based on an asynchronous network framework, Apache MINA , which is built on Java NIO. This framework does permit to RtspProxy to handle high loads and concurrent users.
RTSP Caching Proxy is a proxy server that works with the RTSP protocol in multimedia streaming reproduction. RTSP (Real Time Streaming Protocol) is an emerging protocol for "session initiation" scopes, its purpose is to establish the conditions of an audio-video streaming session. The streaming data is then sent over other channels using other protocol such as RTP (Real Time Protocol).
Using a RTSP proxy does permits to access multimedia content without the need of being directly connected to the internet, for example being behind a corporate firewall.
Enhancements:
- A preliminary implementation of the IP address and host name filter was added.
- The Windows startup script was fixed.
- Session data is properly cleared when a session is closed.
- Only a UDP port pair is used for all RTP/RTCP packet handling and sending for all the connected clients.

The Zaval Proxy Suite is an easy-to-use solution that allows monitoring TCP-based protocols, such as HTTP, NNTP and others. It is extremely useful in software development and can be used as a debug tool. Another area of appliance is multiple connections logging with proxy facilities. As soon as its a pure java solution it can be used almost everywhere.

The Zaval Proxy functions as a proxy and transfers data between the server and the client writing incoming and outgoing traffic into log files. So you can see these raw data as is.

On start the Zaval Proxy Suite goes through configuration file and creates the specified number of proxy servers and the shutdown server.

"Proxy server" is a server socket listening on the specified port. When the client is connected proxy connects to the target server and transfers data between them logging entire traffic. On each connection 2 files are created - xxx-input (request data from the client) and xxx-output (response data from the server). The "xxx" means here the sequential number of the connection for the proxy server. The traffic is logged into the separate directory for each proxy.

Shutdown server is needed to close all open connections correctly and close the program.

So, in the particular case you should specify address of proxy server in client application (web browser, for example) and address of the target server in the proxy configuration file. You can create any number of proxy servers that run at the same time, however, they should use different port numbers.

Spike Proxy is an open source HTTP proxy for finding security flaws in web sites.

SPIKE Proxy is part of the Spike Application Testing Suite and supports automated SQL injection detection, web site crawling, login form brute forcing, overflow detection, and directory traversal detection.

To Use:

python spkproxy.py [ optional port argument, 8080 is default ]
Then set up your browser to use that port for both HTTP and
HTTPS proxies.

Then watch the traffic go!

Calamaris parses logfiles from Squid, NetCache, Inktomi Traffic Server, Oops! proxy server, Novell Internet Caching System, Compaq Tasksmart or iplanet/Netscape Web Proxy Server and generates a report. Written in perl5.
Main features:
Reports:
- Summary
- Peak-usage report
- Request-Method-report (ICP_QUERY, GET, HEAD, ...)
- Status-report of incoming UDP-Requests
- Status-report of incoming TCP-Requests
- Status-report of outgoing Requests
- Status-report of Neighbor-Caches
- report about requested second- or third-level-domains
- report about requested Top-Level-Domains
- Protocol-report (http, gopher, ftp, ...)
- report about requested Content-Types
- report about requested file-extensionen
- report of incoming UDP-requests per Host
- report of incoming TCP-requests per Host
- report of size-based Distribution of Objects
- report about performance in defined timeranges.
- report about the distribution of transaction-times (only V3-beta version)
- report about the distribution of http-errorcodes (only V3-beta version)
- extended report about file-extensions (only V3-beta version)
- more information in the other reports (only V3-beta version)
Other features:
- caching of the parsed data
- HTML-Output
- graphics (only V3-beta version)
- command-line-options
- configuration-file (only V3-beta version)
- GNU Public License
Enhancements:
- HTML-Frame-Report, extended output options, and HTML now supports CSS.

P3Scan is a full transparent proxy server for email clients. It runs on a Linux box with iptables (for port redirection).

P3Scan can be used to provide email scanning from the Internet to any internal network, and is ideal for helping to protect your "Other OS" LAN from harm, especially when used in conjunction with a firewall and other Internet proxy servers.

It is designed to enable scanning of incoming email messages for viruses, worms, trojans, spam, and harmful attachments. Because viewing HTML email can enable a spammer to validate an email address (via Web bugs), it can also provide HTML stripping.

You have to set up a port redirection with iptables so that all connections from e.g. inside your office to any POP3/POP3S/SMTP server outside in the world will not leave your router, but come to a local port, on which P3Scan listens.

P3Scan receives from the Linux kernel the original destination (the email server outside in the world) and will connect to them.

All data we receive from the client will be sent to the server, and vice versa. With a little enhancement: we parse the necessary parts of the protocol and when an email is sent from the server, we store it into a file, invoke our scanning, and send it along if it is good, or in the event of POP3/POP3S we replace it with a virus notification and optionally delete the infected message. For infected SMTP messages, we reject the message.

It should be possible to use all scanners using the scannertype=basic.

Also, P3Scan provides scannertype=avpd for high-speed scanning using Kaspersky Anti-Virus for Linux, every C programmer can easily adept other scan-daemons (trophie, sophie, antivir, ...).

Neither the client nor the server has to be configured, none of them will take notice that theres a mail scanner (except the client when he gets a virus notification or if he looks into the header, and the server gets our ip as source).