Stowaway is a Go-based multi-hop proxy tool created for authorized penetration testing, red-team labs, and security training environments. It uses an admin-and-agent model that allows operators to build a chain of connected nodes across segmented networks. The tool supports active and passive connection modes, making it adaptable to different network layouts. It can route traffic through SOCKS5 and HTTP proxy settings, and it also supports TCP, HTTP-style, and WebSocket-style upstream or downstream transport modes. Stowaway includes encrypted node communication through a shared key, with optional TLS support noted in its runtime parameters. Its feature set makes it useful for studying pivoting, port forwarding, and controlled internal network routing in legitimate test environments.
Features
- Multi-hop proxy architecture for security testing
- Admin and agent node model
- SOCKS5 and HTTP proxy support
- Active and passive connection modes
- TCP, HTTP-style, and WebSocket-style transport options
- Shared-key encryption with optional TLS support