Post Exploitation
ProxyChains forces TCP connections made by arbitrary applications to follow user-configured proxy networks (such as TOR or SOCKS4/5 configurations), useful for obfuscation and internal pivoting.
sudo apt install proxychains4
proxychains4 [program] [arguments]
ProxyChains is a UNIX tool that forces network connections initiated by any TCP application to follow through user-defined proxy chains. It is essential for pivoting through networks and anonymizing penetration testing tools.
By intercepting the connect(), sendto(), and resolver functions via LD_PRELOAD, ProxyChains transparently routes traffic through proxy chains without requiring application modifications.
proxychains firefoxLaunch a program with its TCP connections forced through the proxy chainproxychains4 nmap -sT -Pn 10.10.10.10Run a TCP connect scan tunneled through the proxy chainproxychains -q curl http://example.comRun curl through the chain in quiet mode (suppress proxychains output)proxychains -f /path/to/proxychains.conf nmap 10.10.10.10Use a specific configuration file instead of the defaultproxychains ssh <USER>@10.10.10.10Tunnel an outbound SSH session through the proxy chainproxychains nc 10.10.10.10 4444Route a raw TCP netcat connection through the chainproxychains wget http://example.com/fileDownload a file over the proxy chainproxychains sqlmap -u http://10.10.10.10/page?id=1Proxy a sqlmap request through the chain for anonymity/pivotproxychains4 -q -f /etc/proxychains4.conf smbclient -L 10.10.10.10Enumerate SMB shares over the proxy chain quietlycat /etc/proxychains4.confView the active proxychains-ng configurationsudo nano /etc/proxychains4.confEdit the proxychains configuration (chain mode, DNS, ProxyList)socks5 127.0.0.1 1080ProxyList entry: route through a local SOCKS5 proxy (e.g. an SSH -D tunnel)socks4 127.0.0.1 9050ProxyList entry: route through a SOCKS4 proxy (e.g. Tor default port)http 127.0.0.1 8080ProxyList entry: route through an HTTP CONNECT proxy (e.g. Burp)socks5 127.0.0.1 1080 <USER> <PASS>ProxyList entry with SOCKS5 username/password authenticationRoute nmap through Tor or SOCKS proxies.
Chain through multiple compromised hosts.
Hide source IP through proxy chains.
Reach internal networks via intermediate hosts.
The console displays the routing path for each connection attempt, prefixed with [proxychains], confirming whether the network request succeeded or failed.
This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.