3 homepage: https://github.com/therootcompany/sclient
5 sclient: a cross-platform tool to unwrap TLS as plain text.
8 To update or switch versions, run `webi sclient@stable`.
12 > sclient unwraps encrypted connections (HTTPS/TLS/SSL) so that you can work
13 > with them as as plain text (or binary). Great for debugging web services, and
16 > Think of it like netcat (or socat) + openssl s_client.
18 You can _literally_ use this on example.com:
21 sclient example.com:443 localhost:3000
24 To use it with an http client, just set the Host header to the original domain:
27 curl -H "Host: example.com" http://localhost:3000
34 <h1>Example Domain</h1>
35 This domain is for use in illustrative examples in documents. You may use
36 this domain in literature without prior coordination or asking for
38 <a href="https://www.iana.org/domains/example">More information...</a>
43 ### How to Proxy SSH over SSL
45 SSH can be tunneled within HTTPS, TLS, SSL, WebSockets, etc.
48 ssh -o ProxyCommand="sclient %h" jon.telebit.io
51 This is useful to be able to connect to SSH even from behind a corporate
52 packet-inspection firewall. It can also be used to multiplex and relay multiple
53 ssh connections through a single host.
55 ### How to unwrap TLS for Telnet (HTTP/HTTPS)
58 sclient example.com:443 localhost:3000
65 ### How to unwrap TLS for SMTP/SMTPS/STARTTLS
68 sclient smtp.gmail.com:465 localhost:2525
75 Connected to localhost.
76 Escape character is '^]'.
77 220 smtp.gmail.com ESMTP c79-v6sm37968282pfb.147 - gsmtp
80 ### How to use with stdin / stdout
83 sclient whatever.com -
86 Use just like netcat or telnet. A manual HTTP request, for example:
95 ### How to pipe connections
98 printf "GET / HTTP/1.1\r\nHost: telebit.cloud\r\n\r\n" | sclient telebit.cloud
103 Sometimes you want to check to see if your site is vulnerable to SNI-spoofing
104 attacks, such as Domain Fronting.
106 The literal domains `example.net` and `example.com` are _actually_ vulnerable to
110 sclient --servername example.net example.com:443 localhost:3000
111 curl -H "example.com" http://localhost:3000
114 Most domains, however, are not:
117 sclient --servername google.net google.com:443 localhost:3000
118 curl -H "google.com" http://localhost:3000