Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/sri-csl/jumpbox
JumpBox – A Seamless Browser Proxy for Tor Pluggable Transports
https://github.com/sri-csl/jumpbox
Last synced: about 2 months ago
JSON representation
JumpBox – A Seamless Browser Proxy for Tor Pluggable Transports
- Host: GitHub
- URL: https://github.com/sri-csl/jumpbox
- Owner: SRI-CSL
- License: other
- Created: 2014-09-08T15:52:28.000Z (over 10 years ago)
- Default Branch: master
- Last Pushed: 2015-01-12T17:59:54.000Z (almost 10 years ago)
- Last Synced: 2023-12-18T03:36:20.473Z (about 1 year ago)
- Language: C
- Homepage:
- Size: 13.1 MB
- Stars: 14
- Watchers: 10
- Forks: 6
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
JumpBox
=======
Welcome to JumpBox
For details about this project, please see the [doc](doc/) directory which contains
the original [Design specification](doc/DESIGN.txt) and also the SECURECOMM 2014
[paper](doc/doc/SECURECOMM2014-JumpBox.pdf) and the related presentation in
[PDF](doc/SECURECOMM2014-JumpBox-pres.pdf) and [PowerPoint](doc/SECURECOMM2014-JumpBox-pres.pptx) formats.
Installation Notes
------------------
### libfutil / rendezvous
This code requires [libfutil](https://github.com/SRI-CSL/libfutil/) and optionally (default off) also SRI's rendezvous library.
These code libraries have to be placed in `../libfutil` and `../rendezvous` respectively.
### Debian
A Debian makefile is included which depends on all the proper dependencies.
Creating the package thus automatically fetches these.
### Mac OSX
For Rendezvous one needs the "pbc" library from
[Stanford's Crypto department](http://crypto.stanford.edu/pbc/)
and also the [libjansson](www.digip.org/jansson/) library.
Fortunately, these are available in [Homebrew](http://brew.sh):
```
brew install pbc
brew install jansson
```
Use the following command, which should have been also performed by homebrew installation
```
xcode-select --install
```
to ensure the Apple XCode Command Line Tools (CLT) are installed.
Environment Variables
---------------------
The following `DJB_FORCED_*` environment variables override either the preferences
as they are configured or the result retrieved from ACS and thus allows easier
testing by bypassing various components.
* `DJB_FORCED_HOSTNAME`
defines the hostname that we force connections to (DJB-URI)
* `DJB_FORCED_JUMPBOXADDRESS`
defines the 'JumpBox Address' to be used for StegoTorus
this can be used to bypass the DJB Proxy while being able to start from DJB.
* `DJB_FORCED_STEGMETHOD`
defines the Steg Method (json|http) to be used for StegoTorus
* `DJB_FORCED_SHAREDSECRET`
defines the Shared Secret to be used for StegoTorus
Generic (libfutil):
* `SAFDEF_LOG_LEVEL`
defines the logging level (debug is very verbose).
Running with StegoTorus
-----------------------
Testing JumpBox with StegoTorus can be achieved by the following steps.
In Chrome/Chromium open the extensions page:
`chrome://extensions`
Then select 'unpack and load' and select the JumpBox plugin directory (plugin/chrome/)
or if already correctly installed, hit "Reload" to update to the current version.
Start DJB:
```
export DJB_FORCED_HOSTNAME=127.0.0.1:8080
export SAFDEF_LOG_LEVEL=debug
server/djb run
```
In Chrome/Chromium configure the Plugin by clicking on the JumpBox button and selecting
"Preferences", fill in the rendezvous server and select the amount of circuits.
Then start a Stegotorus client in persist JSON mode (can also be performed from the Plugin).
```
./stegotorus --log-min-severity=warn chop socks --trace-packets --persist-mode 127.0.0.1:1080 127.0.0.1:6543 json
```
That lets StegoTorus be a SOCKS server on 127.0.0.1:1080 while connecting to JumpBox at 6543.
Then start the Stegotorus server in non-persist mode (this typically runs behind DGW):
```
./stegotorus --log-min-severity=warn chop server --trace-packets 192.0.2.1:443 127.0.0.1:8080 json
```
That lets ST accept HTP at 127.0.0.1:8080 (matching `DJB_FORCED_HOSTNAME` above) and makes
it use 192.0.2.1:443 as a Tor Bridge
Configure the Tor client with:
```
SocksPort 9060 # local client applications (SOCKS port for WebBrowsers etc)
SocksListenAddress 127.0.0.1 # accept connections only from localhost
SafeLogging 0
Log info file ./info.log
Log debug file ./debug.log
# Where the SOCKS proxy is (StegoTorus client)
Socks4Proxy 127.0.0.1:1080
# A fake Bridge line, gets overruled by StegoTorus)
Bridge 127.0.0.1:9060
UseBridges 1
```
and start a Tor client:
```
bin/tor -f etc/tor/torrc
```
That should make things move.
Running with StegoTorus (debug)
-------------------------------
Connections will get lost and lldb does not like those SIGPIPEs, to make it continue use:
```
process handle SIGUSR2 -n true -p true -s false
```