sandialabs/wiretap

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1107 stars · 46 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges on the server side. It lets a client reach remote networks as if local, with support for chaining servers and port forwarding.

Use cases

• tunnel traffic through a remote network without root on the server
• pivot into an internal network during a penetration test
• create a VPN-like connection using only a userspace binary
• chain multiple servers to reach nested networks
• share network access with teammates via WireGuard configs
• port forward services from a remote network to local machine

When to choose

• you need VPN-style network access but lack admin/root privileges on the target machine
• you want transparent routing of a subnet through a remote host
• you need to chain pivots across multiple networks
• you prefer WireGuard-based tunneling with minimal setup

When to avoid

• you need a full-featured production VPN for an organization
• you cannot install WireGuard on the client machine
• you only need simple SOCKS/HTTP proxying without network-level routing
• your environment blocks bidirectional UDP traffic

Facets

cli-tool · maturity active

proxy vpn networking security cli networking security developer-tools windows cross-platform go wireguard tunneling transparent-proxy privilege-escalation infosec red-team pivot command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sandialabs/wiretap")