rshijack
A TCP connection hijacking tool written in Rust, enabling packet injection into established connections.
What is rshijack?
rshijack is a network security tool written in Rust that hijacks TCP connections by injecting packets into established sessions. It solves the problem of manipulating live TCP connections for security testing, penetration testing, and CTF challenges where direct access to a service is restricted.
Security researchers, penetration testers, and CTF participants who need to intercept and manipulate TCP traffic in controlled testing environments.
Developers choose rshijack because it's a modern, efficient Rust rewrite of the classic 2001 shijack tool, offering reliable TCP connection manipulation with raw sockets and sequence number analysis without unnecessary complexity.
Overview
TCP connection hijacker, Rust rewrite of shijack
Use Cases
Best For
- Penetration testing scenarios requiring injection of commands into established TCP sessions.
- CTF challenges involving bypassing authentication on services like telnet.
- Security research involving TCP connection hijacking and packet injection.
- Network security testing where manipulating live TCP connections is necessary.
- Educational purposes to understand TCP sequence and acknowledgment number analysis.
- Docker-based security testing deployments needing a lightweight TCP hijacking tool.
Not Ideal For
- Environments where network traffic is encrypted (e.g., HTTPS, SSH) without decryption tools
- Teams requiring GUI-based interfaces for interactive network analysis and manipulation
- Projects involving non-TCP protocols like UDP or ICMP
- Scenarios where raw socket access is restricted due to security policies or lack of root privileges
Pros & Cons
Pros
Rewritten in Rust for improved performance and safety, as demonstrated by its successful use in CTF challenges like TAMUctf 2018.
Available as a 10.2MB Docker image, enabling easy deployment in containerized security testing environments.
Supports using '0' for unknown ports, allowing hijacking even with partial connection details, as shown in the example command.
Effectively bypassed 2FA on a telnet server in a real CTF, showcasing its reliability for penetration testing scenarios.
Cons
Must be run with sudo or equivalent privileges for raw socket operations, limiting use in restricted or production environments.
Only handles TCP connections; lacks support for other transport protocols like UDP, reducing versatility in broader network testing.
Cannot decrypt or manipulate encrypted sessions such as HTTPS or SSH, requiring additional tools for such scenarios.
README is concise with few examples, lacking comprehensive guides or troubleshooting help for complex use cases.
Frequently Asked Questions
Related Projects
rustscan🤖 The Modern Port Scanner 🤖
feroxbusterA fast, simple, recursive content discovery tool written in Rust.
rayhunterRust tool to detect cell site simulators on an orbic mobile hotspot
rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.