v1.0.0
phantom-proxy v1.0.0 - Initial Release
phantom-proxy is a bidirectional packet-level proxy using KCP and raw socket transport with encryption. It bypasses the OS TCP/IP stack by operating at the packet level using pcap and custom packet crafting.
π Features
Core Functionality
- KCP-based Transport: Encrypted, reliable transport optimized for high-loss networks
- Raw Packet Operations: Complete bypass of OS TCP/IP stack using pcap
- SOCKS5 Proxy: Full SOCKS5 server implementation for dynamic forwarding
- Port Forwarding: Static TCP/UDP port forwarding support
- Multi-platform: Linux, macOS, and Windows support
Installation & Configuration
- Automated Installation: One-line installation scripts for all platforms
- Interactive Configuration: Auto-detecting network setup scripts
- Example Configurations: Ready-to-use client and server config templates
Security
- AES Encryption: Built-in AES encryption via KCP
- Secret Key Authentication: Shared secret key for client-server authentication
- Connection Multiplexing: smux-based stream multiplexing over single connection
π¦ Installation
Quick Install (Recommended)
Linux/macOS:
curl -fsSL https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/install.sh | sudo bashWindows (PowerShell as Administrator):
iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/install.ps1'))Interactive Configuration
Client:
# Linux/macOS
curl -fsSL https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/configure-client.sh | sudo bash
# Windows
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/configure-client.ps1" | iexServer:
# Linux/macOS
curl -fsSL https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/configure-server.sh | sudo bash
# Windows
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/roozbeh-gholami/phantom-proxy/master/configure-server.ps1" | iexπ Quick Start
- Install phantom-proxy (see above)
- Configure using interactive scripts
- Run on server:
sudo phantom-proxy run -c config.yaml - Run on client:
sudo phantom-proxy run -c config.yaml - Test:
curl https://httpbin.org/ip --proxy socks5h://127.0.0.1:1080
π Requirements
- Linux/macOS: libpcap development libraries
- Windows: Npcap
- All: Root/Administrator privileges for raw socket access
βοΈ Available Binaries
This release includes pre-built binaries for:
- Linux (amd64, arm64)
- macOS (amd64, arm64)
- Windows (amd64)
π Documentation
- README.md - Complete documentation
- RELEASE.md - Release creation guide
- Example Configs - Configuration examples
β οΈ Important Notes
- This tool requires root/administrator privileges
- Server requires iptables configuration (Linux) or firewall rules (Windows)
- Uses raw sockets and bypasses standard OS firewalls by design
- Intended for network research, testing, and specialized use cases
π Security Warning
This project operates at a low level and carries security responsibilities. Always:
- Use strong secret keys (generate with
phantom-proxy secret) - Keep the same secret key on client and server
- Understand the implications of bypassing OS-level firewalls
π License
MIT License - See LICENSE file for details
Full Changelog: https://github.com/roozbeh-gholami/phantom-proxy/commits/v1.0.0