h2Polar

lightweight http/s proxy written in C with ssl intercepting 'n traffic features.

overview

h2polar is a http/s server proxy with high performance and low memory and CPU usage, useful for tunneling, bypass, network forensics, application security analysis or penetration testing.

proxy features

• http/s, websocket.
• http/1.0 1.1
• pool thread
• reuse allocated memory
• ip resolve cache
• ssl certificate cache
• easy set up

traffic features

• CAPTURE - capture request
• MODIFY_BODY_REQUEST - modify body request
• MODIFY_BODY_RESPONSE - modify body response
• ADD_HEADER_REQUEST - add headers in request
• ADD_HEADER_RESPONSE - add headers in response
• REMOVE_HEADER_REQUEST - remove headers in request
• REMOVE_HEADER_RESPONSE - remove headers in response
• DOWNLOAD_CONTENT - download content (videos, images, music)
• SCREENSHOT - take a screenshot when you want
• FAKE_TLS_EXT_HOSTNAME - bypass firewalls
• REDIRECT - redirect domains

https

to https traffic h2Polar use "man in the middle" concept, the server certificates presented to the client are a copy dynamically generated/signed by the proxy, you must set TLS_MITM in 1 to enable this feacture otherwise traffic will migth manipulate.

so you need install h2Polar.cer on your client to allow ssl traffic or ignore certificate verification (-k curl).

pac script

h2polar generate pac script according to rules, so you can set your http client with pac script: http://127.0.0.1:51234/h2Polar.pac.

builds

_lite: debug_
gcc h2polar.c -o h2polar.out -pthread -Wall -DDEBUG
_lite: debug, ssl_
gcc h2polar.c -o h2polar.exe -pthread -lssl -lcrypto -Wall -DOPENSSL -DDEBUG
_full: debug, pool, cache_
gcc h2polar.c -o h2polar.out -pthread -lssl -lcrypto -Wall -DDEBUG -DDNS_MEM_CACHE -DCA_MEM_CACHE -DOPENSSL -DTHREAD_POOL

_to windows add:
-lgdi32 -lws2_32 -lGdiplus

credits

• @RedToor Author
• @z3APA3A (3Proxy) by SSL Cloning logic.