mirror of
https://github.com/wweir/sower.git
synced 2026-10-20 00:15:34 +00:00
wweir
3ea411e5fd
- The sower frame checksum now covers the command and port in addition to the target, using HMAC-SHA256 (length-extension resistant) so a man-in-the-middle on a plaintext link cannot retarget a captured frame to an arbitrary port. - Unwrap rejects empty or control-character target hosts. - The SOCKS5 server writes the RFC 1928 METHOD=0xFF failure response instead of leaving the peer hanging on an unusable negotiation. - DHCP discovery validates the reply (matching xid, BOOTREPLY, message type OFFER) and skips unrelated packets instead of trusting the first datagram, closing a LAN-side DNS-hijack vector; the socket also sets SO_BROADCAST explicitly (Go 1.26 removed UDPConn.SetBroadcast). - The uTLS handshake gets a bounded default deadline when the dialer has no timeout, so it cannot hang open forever. - The suffix tree trims every trailing dot so dirty rule files cannot build unreachable empty-label subtrees.
56 lines
2.1 KiB
AMPL
56 lines
2.1 KiB
AMPL
module github.com/sower-proxy/sower
|
|
|
|
go 1.26.1
|
|
|
|
require (
|
|
github.com/cristalhq/aconfig v0.19.0
|
|
github.com/cristalhq/aconfig/aconfigtoml v0.17.1
|
|
github.com/krolaw/dhcp4 v0.0.0-20190909130307-a50d88189771
|
|
github.com/libp2p/go-reuseport v0.4.0
|
|
github.com/lmittmann/tint v1.2.0
|
|
github.com/maypok86/otter/v2 v2.3.0
|
|
github.com/miekg/dns v1.1.72
|
|
github.com/oschwald/geoip2-golang v1.13.0
|
|
github.com/prometheus/client_golang v1.24.1
|
|
github.com/refraction-networking/utls v1.8.2
|
|
github.com/sower-proxy/conns v0.1.1
|
|
github.com/sower-proxy/deferlog/v2 v2.1.5
|
|
go.opentelemetry.io/otel v1.45.0
|
|
go.opentelemetry.io/otel/exporters/prometheus v0.67.0
|
|
go.opentelemetry.io/otel/metric v1.45.0
|
|
go.opentelemetry.io/otel/sdk/metric v1.45.0
|
|
golang.org/x/crypto v0.54.0
|
|
golang.org/x/sys v0.47.0
|
|
)
|
|
|
|
require (
|
|
github.com/BurntSushi/toml v1.6.0 // indirect
|
|
github.com/andybalholm/brotli v1.2.2 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/go-logr/logr v1.4.4 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/klauspost/compress v1.19.2 // indirect
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/oschwald/maxminddb-golang v1.13.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.6.2 // indirect
|
|
github.com/prometheus/common v0.70.1 // indirect
|
|
github.com/prometheus/otlptranslator v1.0.0 // indirect
|
|
github.com/prometheus/procfs v0.21.1 // indirect
|
|
github.com/stretchr/testify v1.11.1 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.45.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.45.0 // indirect
|
|
golang.org/x/mod v0.38.0 // indirect
|
|
golang.org/x/net v0.57.0 // indirect
|
|
golang.org/x/sync v0.22.0 // indirect
|
|
golang.org/x/text v0.40.0 // indirect
|
|
golang.org/x/tools v0.48.0 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|