hanselime/paqet

Health v2 · maintenance only

Adoption not part of the score

1183 stars · 182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pcap for capture. It layers KCP and smux on top to provide fast, reliable, encrypted, multiplexed transport that can evade firewalls relying on connection tracking.

Use cases

• tunnel traffic through firewalls that do connection tracking
• research how stateless raw TCP packet tunnels behave on the wire
• build an encrypted transport that bypasses the kernel TCP stack
• proxy traffic between two machines using KCP over raw packets
• study firewall handshake-based filtering with crafted packets

When to choose

• you need a security research tool that crafts raw TCP packets and bypasses stateful firewalls
• you want KCP-based encrypted multiplexed transport without the kernel TCP stack in the path
• you need fine-grained control over packet crafting and capture on Linux, macOS, or Windows

When to avoid

• you want a simple, production-ready VPN with easy configuration
• you need stable APIs - the project warns interfaces may change without notice
• you cannot install libpcap/Npcap or lack raw packet capture privileges

Facets

cli-tool · maturity experimental

proxy networking cryptography security networking privacy security censorship-circumvention windows cli kcp raw-packets pcap tunneling gopacket firewall-bypass smux linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hanselime/paqet")