# D00Movenok/BounceBack

↕️🤫 Stealth redirector for your red team operation security

Repository: https://github.com/D00Movenok/BounceBack
Canonical: https://ross.abutalabs.com/products/bounceback
Language: Go
License: MIT
License Family: permissive
Topics: redteam, proxy, redirector, cobalt-strike, infrastructure, pentesting, phishing, c2, pentest, cybersecurity, opsec, security
Last push: 2026-07-20T13:15:32+00:00

## Health v2 (maintenance only)
Score: 73/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 93, release rhythm 40, longevity 86
- inputs: {"age_days": 1206, "days_push": 44, "days_rel": 185, "gap_med": 238, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1103, forks 106 (observed 2026-08-28T04:03:35.702825+00:00)

## What it is
BounceBack is a stealth reverse proxy with WAF-like filtering designed to hide red team C2 and phishing infrastructure from blue teams, sandboxes, and scanners. It applies configurable boolean rule pipelines (IP blacklists, geolocation, reverse lookup, Malleable C2 profile validation, time windows) to real-time traffic to block illegitimate visitors.

## Use cases
- hide c2 server infrastructure from scanners and sandboxes
- filter out security vendor ips from my red team redirector
- validate inbound traffic against a cobalt strike malleable c2 profile
- set up a stealth redirector for phishing infrastructure
- block automated scanners and blue team reconnaissance from reaching my proxy
- restrict proxy access to specific countries or work hours

## When to choose
- you run red team operations and need an opsec-hardened redirector in front of C2 or phishing servers
- you want configurable boolean rule pipelines combining IP, geolocation, reverse DNS, and packet regex filtering
- you use Cobalt Strike and want automatic Malleable C2 profile traffic validation
- you need multiple proxies with different filter pipelines in a single instance

## When to avoid
- you need a general-purpose production reverse proxy or WAF for legitimate web applications
- you want a managed cloud service rather than a self-hosted Go binary
- your use case has no relation to offensive security or infrastructure hiding
- you need a GUI-managed proxy rather than configuration-file-driven setup

## Facets
- artifact type: cli-tool
- maturity: active
- function: proxy, security, http-server, middleware, logging
- domain: security, penetration-testing, networking, backend
- platform: windows, go, cli, self-hosted
- tags: red-team, c2, redirector, reverse-proxy, waf, opsec, cobalt-strike, traffic-filtering, domain-fronting, phishing-infrastructure, linux, macos

## Member repositories
- D00Movenok/BounceBack (main) score 73

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:35.702825+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:45:30.358116+00:00, confidence not recorded.
  - readme: https://github.com/D00Movenok/BounceBack (fetched 2026-08-28T04:03:35.702825+00:00, sha ee33b9c8e747)
- Data as of 2026-08-30T08:39:29.467469+00:00.