HotSpot Tethering on TCP blocking Carriers (i.e. Straight Talk Wireless)

# Hotspot Tethering on TCP blocking Carriers (i.e. Straight Talk Wireless)

This hack sets up an ssh socks5h proxy to a remote shell, and serves the auto-configuration pac via apache.

Carrier allows DNS lookups, but no TCP on tethered hotspot, so we socks-ify it.

Works with iOS iPhone -> Android and from laptops etc via browser plugins, proxychains4, or redsocks, which is beyond the scope of this document, BTSOTD.

e.g. auto-config url http://192.168.43.169:8080/proxy.pac

## The Proxy

ssh -v -D 0.0.0.0:8888 user@remoteshell.tld

# ok so shells that allow tunneling cost money, but they're great for staging files. Here: UpCloud Hosting

## The Webserver (in TermUX)

pkg install apache2

#

ln -s /data/data/com.termux/files/home/etc ~/etc

# /data/data/files/usr/share/apache2/default-site/htdocs/proxy.pac

# proxy.pac (put on your phone/apache2)

function FindProxyForURL(url, host)         {                                               url  = url.toLowerCase();                   host = host.toLowerCase();                                                              if (isInNet(host, "10.0.0.0", "255.0.0.0") ||                                               isInNet(host, "172.16.0.0",  "255.240.0.0") ||                                          isInNet(host, "192.168.0.0", "255.255.0.0") ||                                          isInNet(host, "127.0.0.0", "255.255.255.0"))                                                                                        return "SOCKS DIRECT";     return "SOCKS 192.168.43.169:8888";                                                 }

# 
#  debugging

termux allows multiple sessions by swiping from the left

# tail apache web log

$ pwd

/data/data/com.termux/files/usr/var/log/apache2

$ tail -f access_log

# see proxy traffic

netstat -an | grep 8888

# arp

ip neighbor

--

aquaqlabs