Rosemary v1.0.0
Rosemary v1.0.0 - First Release
Cross-platform transparent tunneling platform. No TUN. No proxychains.
Core Features
- Transparent TCP/UDP/ICMP/DNS - Kernel-level interception, zero app config
- Auto DNS Resolution - Internal domains just work, no /etc/hosts editing
- Egress Mode - Route isolated server's internet through any agent
- Multi-hop Pivoting - Visual graph, auto route propagation
- Built-in SOCKS5 - Per-agent proxy with optional auth
- Port Forwarding - TCP/UDP, local and reverse
- Web Dashboard - Real-time agent graph, routing table, CLI panel
- REST API - Full control with token auth (read/write/admin)
- Chrome Extension - Per-tab browser routing
- Agent Discovery - Ping sweep, port scan via agent
Supported Platforms
| OS | Architectures |
|---|---|
| Linux | amd64, arm64, arm, 386 |
| Windows | amd64, arm64, 386 |
| macOS | amd64, arm64 |
| FreeBSD | amd64, arm64, arm, 386 |
| OpenBSD | amd64, arm64, arm, 386 |
Quick Start
# Server (your machine, requires root/admin)
sudo ./server-linux-amd64
# Agent (target machine, no root needed)
./agent-linux-amd64 -s server-ip:1024 -k YOUR_KEY
# Done. Internal network accessible.
curl http://internal.corp.local
ssh user@10.0.0.50
Agent Modes
- Standard - Agent connects outbound to server
- Bind - Agent listens, server connects (NAT traversal)
- Background - Detach from terminal
Key Commands
agents List connected agents
routes Show routing table
egress <agent-id> Route all internet through agent
socks <agent-id> <port> Start SOCKS5 proxy
forward add <port> <agent> <host> <target-port>
discover <agent-id> <subnet>
portscan <agent-id> tcp <target>
Security
- AES-256-GCM encryption for all agent-server traffic
- Challenge-response authentication
- API tokens with granular permissions
- Agents require no root privileges
Installation
Download the appropriate binary for your platform from the releases page.
Documentation
Full documentation available in the GitHub Wiki.
License
GNU General Public License v3.0
Built by blue0x1