{"id":23107369,"url":"https://github.com/elmodo7/ssh_tunnel_manager","last_synced_at":"2025-07-06T05:32:36.949Z","repository":{"id":217723786,"uuid":"744224538","full_name":"elModo7/SSH_Tunnel_Manager","owner":"elModo7","description":"GUI tool for proxying, pivoting, firewall bypassing and securing connections over SSH. A wrapper for plink with some QoL improvements like profiling, notifications, auto reconnect and more.","archived":false,"fork":false,"pushed_at":"2025-06-19T15:09:40.000Z","size":1162,"stargazers_count":26,"open_issues_count":0,"forks_count":4,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-19T16:26:02.246Z","etag":null,"topics":["ahk","autohotkey","desktop-app","gui","network","networking","pivoting","proxy","ssh","ssh-tunnel","tunnel","tunneling","vpn","windows"],"latest_commit_sha":null,"homepage":"https://elmodo7.github.io/personal_projects/tunnel_manager/","language":"AutoHotkey","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/elModo7.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-01-16T21:32:48.000Z","updated_at":"2025-06-19T15:09:43.000Z","dependencies_parsed_at":"2024-12-17T01:13:36.082Z","dependency_job_id":"839b1fd6-b527-47ba-8167-5347ba7b5ddd","html_url":"https://github.com/elModo7/SSH_Tunnel_Manager","commit_stats":null,"previous_names":["elmodo7/tunnel_manager","elmodo7/ssh_tunnel_manager"],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/elModo7/SSH_Tunnel_Manager","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elModo7%2FSSH_Tunnel_Manager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elModo7%2FSSH_Tunnel_Manager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elModo7%2FSSH_Tunnel_Manager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elModo7%2FSSH_Tunnel_Manager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/elModo7","download_url":"https://codeload.github.com/elModo7/SSH_Tunnel_Manager/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elModo7%2FSSH_Tunnel_Manager/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263853397,"owners_count":23520137,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ahk","autohotkey","desktop-app","gui","network","networking","pivoting","proxy","ssh","ssh-tunnel","tunnel","tunneling","vpn","windows"],"created_at":"2024-12-17T01:13:29.191Z","updated_at":"2025-07-06T05:32:36.943Z","avatar_url":"https://github.com/elModo7.png","language":"AutoHotkey","readme":"\n\n# \u003cimg src=\"https://i.postimg.cc/KY8q3ZPJ/topico-trans.png\" alt=\"topico\" width=\"150\"/\u003e SSH Tunnel Manager \n\nTunnel Manager is a tool for **proxying, pivoting and securing connections over SSH.**\nIt's basically a GUI wrapper for **plink** but adds **profiling, notifications** and is focused on **automation** and **session persistence**.\n\n\u003e **TLDR:** Use your Raspberry Pi or alike as a VPN/Proxy server for either securing connections, bypassing restrictions or even exposing local ports on restrictive networks.\n\n\u003e **Caution:** Tunnel Manager **_compiled versions may be flaged as malware_** due to the nature of the program. You can **run from source directly using *AutoHotkey.exe* interpreter** to mostly avoid this.\n\nIt is written mainly in **[AutoHotkey](https://www.autohotkey.com/)** and the GUI framework that I used is [Neutron.ahk](https://github.com/G33kDude/Neutron.ahk), so it has a little bit of HTML, CSS (Bootstrap 3), JS and JQuery.\n\nI created a thread on the **[AutoHotkey Forums](https://www.autohotkey.com/boards/viewtopic.php?t=125013)** for discussion about Tunnel Manager, but I also read questions and suggestions on the **[AutoHotkey Discord](https://discord.com/invite/Aat7KHmG7v)**.\n\n![Main Window](https://i.postimg.cc/j594P2dL/Tunnel-Manager-45ak-L0gkyg.png)\n\u003e **Pro Tip:** Press **Ctrl** key while Tunnel Manager is active to change **\"copy to clipboard\"** icon into **\"generate QR\"** mode.\n\n## Compiled Version \u0026 Downloads\nGo check **[releases](https://github.com/elModo7/Tunnel_Manager/releases)** for compiled binaries if you don't want to have AutoHotkey installed.\nYou can also **download from this document.**\n|Version| Download |\n|--|--|\n| `Latest` | [`Download Link`](https://github.com/elModo7/Tunnel_Manager/releases/latest/download/Tunnel.Manager.exe)  |\n| 1.3.3 | [Download Link](https://github.com/elModo7/SSH_Tunnel_Manager/releases/download/1.3.3/Tunnel.Manager.exe)  |\n| 1.3.0 | [Download Link](https://github.com/elModo7/Tunnel_Manager/releases/download/1.3.0/TunnelManager.zip)  |\n| 1.2.29 | [Download Link](https://github.com/elModo7/Tunnel_Manager/releases/download/1.2.29/TunnelManager.zip)  |\n\n## Sample Usage\n### Secure VNC Session\n```mermaid\nsequenceDiagram\nVNC Server -\u003e\u003e SSH Server: Forward port 5900 to 8034 (SSH)\nNote right of SSH Server: Proxying 5900:8034\nClient--x VNC Server: I want to connect securely thorugh VNC 5900\nVNC Server--\u003e\u003e Client: VNC is not encrypted but I can tunnel it through 8034\nClient-\u003e\u003e SSH Server: Connect to VNC:8034\nVNC Server-\u003e\u003e Client: I am sharing a secure VNC Session!\nNote right of Client: The client has\u003cbr/\u003eestablished a secure\u003cbr/\u003econnection with the\u003cbr/\u003eserver by tunneling\u003cbr/\u003ethe VNC session\u003cbr/\u003ethrough SSH.\n\n```\n\n### Firewall Bypass (could be reversed)\n```mermaid\nsequenceDiagram\nWeb Server --x Firewall: I want to expose port 80\nFirewall --\u003e\u003e Web Server: Nope\nWeb Server--\u003e\u003e SSH Proxy: Forward port 80 to port 8080\nSSH Proxy--\u003e\u003eWeb Server: OK\nClient-\u003e\u003e SSH Proxy: https://proxy:8080\nSSH Proxy-\u003e\u003eWeb Server: Client asks for your index.html on port 80\nWeb Server-\u003e\u003e SSH Proxy: Here you have index.html\nSSH Proxy-\u003e\u003e Client: This is index.html\nClient-\u003e\u003e Web Server: Obtained index.html from Web Server proxying through SSH Proxy\nNote right of Client: Client got index.html\u003cbr/\u003efrom the Web Server\u003cbr/\u003ethat was behind a\u003cbr/\u003erestrictive firewall\u003cbr/\u003eby proxying the\u003cbr/\u003erequest through the\u003cbr/\u003eSSH Proxy.\n\n```\n\n### More Use Cases\n- Example of Tunnel Manager Use Cases and Scenarios\nSharing Network Access - If you need to work from home and access your company's internal network, which only allows access from within the network, you can install the Tunnel Manager agent on a computer located within your company's premises. This will enable you to utilize its internet access[^1] without depending on the company's remote access tools.\n\n- Access to Devices Without VPN Support - Suppose you have a device that does not support VPN, such as an IoT sensor, CCTV camera, or smart TV, and you want to access them from your laptop on a different network that cannot directly reach the device. In this case, you can install the Tunnel Manager agent on a device within the same network as these devices. Then, you can connect using your laptop through Tunnel Manager from anywhere.\n\n- Using Native Services like RDP/SSH Across Different Networks - You can use Tunnel Manager to access your computer's native services like RDP (Remote Desktop) or SSH directly, without relying on third-party services. This is especially useful when both machines cannot reach each other directly, and neither has a public IP address. Tunnel Manager allows you to use your SSH or RDP client (e.g., OpenSSH client or Microsoft Remote Desktop) without the need for any modifications or additional software to connect to your computer.\n\n- Publishing a Local Webserver - Suppose you have a webserver running on your local network that you want to make accessible on the internet. If your ISP doesn't provide you with a public IP address or you wish to let others publish their webservers on your public IP address from their local networks, Tunnel Manager can help you publish your webserver to the internet.\n\n## Architecture\n\nTunnel Manager's architecture consists of three main components: the Gateway, Agents, and Clients. The Gateway serves as the central hub, routing packets between agents, clients, and browsers. Agents act as proxies, forwarding packets to or from targeted hosts within the local network. Clients send and receive packets to and from agents, facilitating communication with the Agent component. The Token Generator is responsible for generating tokens used for authentication and configuration within the Tunnel Manager network.\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://i.postimg.cc/HxdC5hyF/Diagram.png\" alt=\"Tunnel Manager Logo\" width=\"80%\"\u003e\u003c/p\u003e\n\n#### Recommended sshd_config match user config:\n    GatewayPorts yes\n    AllowTcpForwarding yes\n    X11Forwarding no\n    AllowAgentForwarding no\n    ForceCommand /bin/false\n\n## Features\n\n- Support Local, Remote and Dynamic SSH Tunneling\n- Server and Tunnel Profiling\n- Neutron Web UI\n- Console Output\n- Auto Accept SSH Key\n- Silent Mode with Profile Select / Silent/NoGUI (1.2.24+)\n- Hide Tray icon option for Shadow Mode (1.2.16+)\n- DRM Copy Protection included via Online Validation of Serial based on Hardware Fingerprint\n- Temporary Tunnels without Saving\n- Relaunch Tunnel on disconnect\n- No need for a full reload on profile select\n- Online version checker based on GitHub repo (1.3.0+)\n- Allow enabling/disabling per proflie+tunnel configuration\n- Keep track of last used profile (path)\n- Config checks on repeated/incorrect tunnel configurations (Improved in 1.2.11+)\n- DRM Two Way Encryption (1.2.10+)\n- Quick Copy Tunnel (1.2.14+)\n- QR Code Generator (1.2.17+) / Press Ctrl while the app is active and click on Copy Link Button\n- Discord WebHook Notify / Telegram API Notify / PushBullet Notify (1.2.18+)\n- Console Output Toggle (1.2.21+)\n- Reload Tunnel While Running (1.2.23+) / Allows restarting the tunnel in case configuration changed and you are working remotely\n- Quick Hide/Show by Double Clicking Tray Icon (1.2.23+)\n- Increased Command Line Tools and Tray Actions (1.2.24+)\n- Parameter info on cmd (chalk) or msgbox (1.2.24+)\n- Added License (1.2.26+)\n- Auto Update PLink Client to the latest version on first run (1.2.28+)\n- Option to download latest PLink or use built in on first run or proxy deletion (1.2.29+)\n- Fully Open Source (1.2.29+)\n- Remove DRM Protection (No Serial Required) (1.2.29+)\n\n#### PARAMS:\n- -nogui (Disables GUI)\n- -silent (Disables Tray Notifications)\n- -notray (Removes Tray Icon)\n- -hidden (Starts Hidden)\n- -autostart (Starts Tunneling on Startup)\n- -profile \u003cprofile_path\u003e\n\n#### TODO:\n- TCP / Websocket Interop (Server)\n\n#### REQUIERES:\n- Windows 7 x64 (Windows 10+ Recommended)\n- AutoHotkey U64 1.1.31+\n\n#### DROPPED / DISCARDED:\n- Keep Serial active for 7 days before asking again (DRM Security Risk)\n- Change order of each individual Tunnel\n- IRC Notify\n- IRC Control Plugin\n- Telegram API Control Plugin\n\n#### BUGFIXES:\n- Too Many Hotkeys Triggered (1.2.22)\n- Profile Param had to be last param or else it wouldn't load (1.2.28)\n\n## Screenshots\n### Server Settings\n![Server Config](https://i.postimg.cc/ZqsN7m17/Tunnel-Manager-zgx-IL9-Seq5.png)\n### Notification Settings\n![Notification Settings](https://i.postimg.cc/pT73rPwB/Tunnel-Manager-yby9s-RCwd3.png)\n\n## References\nTunnel Manager icon by [Hotpot.ai](https://hotpot.ai/)\n\n\"More Use Cases\" section and image diagram obtained from [Narrowlink](https://narrowlink.com/)\n\n[![Star History Chart](https://api.star-history.com/svg?repos=elmodo7/Tunnel_Manager\u0026Date\u0026type=Date)](https://star-history.com/#elmodo7/Tunnel_Manager\u0026Date)\n\n**Víctor Santiago Martínez Picardo (elModo7)** 17/JAN/2024\n\n[^1]: Please ensure you have permission from your company and comply with your company's security policies before sharing internet access using Tunnel Manager. Tunnel Manager is not responsible for any misuse of the software.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felmodo7%2Fssh_tunnel_manager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felmodo7%2Fssh_tunnel_manager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felmodo7%2Fssh_tunnel_manager/lists"}