A TCP connection hijacking tool written in Rust, enabling packet injection into established connections.
rshijack is a network security tool written in Rust that hijacks TCP connections by injecting packets into established sessions. It solves the problem of manipulating live TCP connections for security testing, penetration testing, and CTF challenges where direct access to a service is restricted.
Security researchers, penetration testers, and CTF participants who need to intercept and manipulate TCP traffic in controlled testing environments.
Developers choose rshijack because it's a modern, efficient Rust rewrite of the classic 2001 shijack tool, offering reliable TCP connection manipulation with raw sockets and sequence number analysis without unnecessary complexity.
TCP connection hijacker, Rust rewrite of shijack
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Rewritten in Rust for improved performance and safety, as demonstrated by its successful use in CTF challenges like TAMUctf 2018.
Available as a 10.2MB Docker image, enabling easy deployment in containerized security testing environments.
Supports using '0' for unknown ports, allowing hijacking even with partial connection details, as shown in the example command.
Effectively bypassed 2FA on a telnet server in a real CTF, showcasing its reliability for penetration testing scenarios.
Must be run with sudo or equivalent privileges for raw socket operations, limiting use in restricted or production environments.
Only handles TCP connections; lacks support for other transport protocols like UDP, reducing versatility in broader network testing.
Cannot decrypt or manipulate encrypted sessions such as HTTPS or SSH, requiring additional tools for such scenarios.
README is concise with few examples, lacking comprehensive guides or troubleshooting help for complex use cases.