daemonchild/docker-squid-proxy repository overview

⁠docker-squid-proxy

⁠Web Proxy for PenTesting

This is a lightweight Squid based proxy for bouncing traffic, ideal for use during a pentest. It is based on Ubuntu 16:04, and is a 200Mb image.

You may wish to edit squid.conf to restrict to specific source and destination networks. The default configuration denies connections to RFC1918 addresses as shown here:

# Deny Some Bad Things
http_access deny !Safe_ports
http_access deny RFC1918               # comment out for internal deployments
http_access deny CONNECT !SSL_ports

Note that authentication is not provided with the default configuration. Do not put this live on the Internet!

You can pass parameters to Squid if required.

⁠Prebuilt Image

I have uploaded a probuilt image to the Docker Hub using the configuration as provided. YOu can use it as follows:

docker pull daemonchild/docker-squid-proxy:latest

⁠To Run

docker run -d --name docker-squid-proxy -p 3128:3128/tcp daemonchild/docker-squid-proxy

⁠To Build Yourself

From the container directory:

docker build -t daemonchild/docker-squid-proxy .

Source: https://github.com/daemonchild/docker-squid-proxy⁠