Wirefox is a dead simple headless proxy device for SecOps and Pentesters.
View the Project on GitHub jleuth/wirefox
Install Wirefox Services
curl -sSl https://install.wirefox.org | bashOpen proxy
ssh -D (ANY PORT) -N -C username@WF_IPMake the Gist: Visit https://gists.github.com and create a new gist. The file MUST be named “wirefox_ips.txt*. For your security, make sure the gist is a Secret Gist and don’t share the link with ANYONE.
Make your PAT:
Go to https://github.com/settings/tokens?type=beta, make sure you’re creating a Fine-Grained token. Click Generate New Token, and input your MFA code if needed.
Don’t grant access to repositories. We need to grant access to an account setting, so scroll down to Account Permissions, find Gists and change the access setting to Read and Write
Copy your token, and paste it in a safe place. You can only view it once, and we will need it in a minute.
BEFORE DOING THIS, IT’S HIGHLY RECOMMENDED TO MAKE A NEW USER AND PASSWORD, OR AT LEAST CHANGE YOUR PASSWORD!
This is quick and easy, just run:
sudo useradd -m NEWUSER
sudo passwd NEWUSER
usermod -aG sudo NEWUSER
curl -sSl http://install.wirefox.org | bash
/etc/wirefox.conf and update it with your Gist ID, GitHub token, and other settings:
{
"freq": 60,
"gist_id": "YOUR_GIST_ID",
"token": "YOUR_PAT",
"interface": "eth0"
}
systemctl status wirefox
To connect to Wirefox, run this command on your client. Make sure you have OpenSSH installed on the client.
The Wirefox tool reads from /etc/wirefox.conf.
gist_id: The ID of the GitHub Gist where IP addresses will be uploaded.token: A personal access token with permissions to write to the Gist.freq: Frequency (in seconds) for IP checks and uploads. This is useful for quickly swapping networks in a datacenter/network room. Default is 60.interface: The network interface to monitor (e.g., eth0, wlan0).To test the Wirefox Python tool:
wirefox
If running as a service, check logs to diagnose issues:
journalctl -u wirefox.service