# sensepost/reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Repository: https://github.com/sensepost/reGeorg
Canonical: https://ross.abutalabs.com/products/regeorg
Language: Python
License: NOASSERTION
License Family: other
Last push: 2025-03-06T09:56:16+00:00

## Health v2 (maintenance only)
Score: 37/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 10, release rhythm 35, longevity 100
- inputs: {"age_days": 4409, "days_push": 545, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3183, forks 823 (observed 2026-08-28T04:07:47.981176+00:00)

## What it is
reGeorg is a Python tool that creates a SOCKS proxy through a compromised bastion webserver by tunneling traffic over HTTP(S) via uploaded tunnel scripts (aspx, jsp, php, ashx). It is the successor to reDuh and is used for network pivoting during penetration tests.

## Use cases
- pivot into an internal network through a compromised DMZ webserver
- create a socks proxy over http tunnel
- tunnel nmap scans through a bastion host
- bypass network segmentation during a pentest
- route tools through proxychains via a webshell
- establish foothold in internal network from dmz

## When to choose
- you have file upload on a webserver in a DMZ and need SOCKS access to the internal network
- you need to pivot through HTTP(S) only egress
- you want a lightweight Python tunneling tool for red team engagements

## When to avoid
- you need a full VPN or encrypted C2 channel
- the target environment blocks your tunnel scripts or inspects HTTP payloads
- you need modern Python 3 support without modification

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: proxy, networking, security
- domain: penetration-testing, security, networking
- platform: python, cli, windows
- tags: socks-proxy, network-pivot, dmz-tunneling, webshell, red-team, penetration-testing, linux, macos

## Member repositories
- sensepost/reGeorg (main) score 37

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:47.981176+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:25:02.731694+00:00, confidence not recorded.
  - readme: https://github.com/sensepost/reGeorg (fetched 2026-08-28T04:07:47.981176+00:00, sha 07b691444579)
- Data as of 2026-08-30T08:39:29.467469+00:00.