KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #codex #claude-code #mcp #rust #deepseek-harness #typescript #ai-agent #cli

airgapt

★ 102 Open GitHub ↗

Automate "airgapped" server proxy with ssh socks proxy

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Airgapt - "airgapped" apt *

Script for setup of package management Proxy for situations where you can ssh, but target doesn't have an outgoing network connection to public web.

Uses local socks5 proxy & ssh remote proxy.

After running the script you can also query arbitrary URLs via `curl -L --socks5 localhost:6666 google.com`

<img src="https://user-images.githubusercontent.com/26136082/144587454-c442d3b1-525a-49c9-88cb-07b7742b84d5.png" alt="drawing" width="450"/>
*NB! If you can proxy connections like this, then your system isn't actually airgapped :)

## Usage
Choose **one** of these:

--) Docker usage via `runDocker.sh`

--) Bash usage via `airgapt.sh`

### Docker usage

Make sure you have docker installed

0) `wget https://raw.githubusercontent.com/AkselAllas/airgapt/master/runDocker.sh`

1) Edit `runDocker.sh` input variables
```
LOCAL_SOCKS_PORT=44444
LOCAL_USER="kali" #This user must match your LOCAL_SSH_KEY's owner
LOCAL_USER_ID=1000
TARGET="example.domain"
TARGET_USER="ubuntu"
TARGET_FORWARDED_PORT="6666"
LOCAL_SSH_KEY_PATH="/home/${LOCAL_USER}/.ssh/id_rsa"
REMOTE_SSH_KEY_PATH="/home/${LOCAL_USER}/.ssh/custom_key"
```
2) Run `./runDocker.sh`

### Bash script usage

0) `wget https://raw.githubusercontent.com/AkselAllas/airgapt/master/airgapt.sh`

1) Edit `airgapt.sh` input variables
```
LOCAL_SOCKS_PORT=44444
LOCAL_USER="kali"
TARGET="example.domain"
TARGET_USER="ubuntu"
TARGET_FORWARDED_PORT="6666"
LOCAL_SSH_KEY_PATH="/home/${LOCAL_USER}/.ssh/id_rsa"
REMOTE_SSH_KEY_PATH="/home/${LOCAL_USER}/.ssh/custom_key"
```
2) Run `.airgapt.sh`

## Custom proxy queries
In your target machine you can use proxy to request arbitrary URLs. For that run
```
curl -L --socks5 localhost:6666 google.com
```
You can also optionally install [proxychains](http://proxychains.sourceforge.net/) on the target server to enable any software to use the forwarded SOCKS proxy 
It uses a LD_PRELOAD trick to redirect TCP and DNS requests from arbitrary commands into a proxy and is really handy.

Setup `/etc/proxychains.conf` to use the forwarded socks proxy:
```
[ProxyList]
# SSH reverse proxy
socks5  127.0.0.1 6666
```
e.g. `proxychains yum update`

### Future plans
[ ] add yum, pac, pkg detection & proxy setup to `ensure_remote_server_has_proxy_config()` function

airgapt

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README