HydraSocket — Network Security Toolkit

Capabilities

Everything you need for authorized penetration testing and network analysis — no extra tools required.

🔍

Port & Network Scanner

TCP/UDP scanning with nmap-style flags (-Pn, -O, -A). Random-order, banner grabbing, service detection, OS fingerprinting, MAC/vendor lookup.

🌐

HTTP Workbench

Raw HTTP requests with timing breakdown. Hydra fuzzer, sequencer, comparer, auto-scanner, CORS tester, paraminer. Full project save/load.

🔒

MITM Proxy

Intercepting HTTPS proxy with on-the-fly cert minting via node-forge. Inspect, modify, forward or drop requests in real time.

📡

Recon Suite

Subdomain enumeration (CT logs + DNS brute), security header grading, site spider, multicast discovery (SSDP/mDNS/LLMNR).

🗄

Database Browser

Connect to SQLite, PostgreSQL, MySQL, MSSQL, MongoDB, Redis, and Elasticsearch. Browse tables, preview rows, run queries, export results.

☁

Cloud Storage (S3)

Explore AWS S3 and compatible storage (MinIO, Wasabi, R2). List buckets, browse objects, preview files. Hand-rolled SigV4 signing.

🔐

TLS Inspector

Full certificate chain inspection, protocol/cipher negotiation, TLS version enumeration (1.0–1.3), weak cipher and key detection.

💻

DNS Toolkit

All record types (A/AAAA/MX/TXT/NS/SOA/SRV/CNAME/PTR/CAA/ANY), reverse lookups, custom resolvers, and raw TCP AXFR zone transfers.

🛡

Attack Surface Audit

Listening ports (netstat), filesystem secret scan (AWS keys, JWTs, private keys — redacted output), network interface and ARP table enumeration.

🔗

Pivot & Tunnel

SOCKS5 proxy and static port forwarding for pivoting through compromised hosts. Full ATYP 1/3/4 support, connection logging.

📨

Listener (Netcat)

Bind TCP/UDP listeners, send and receive arbitrary data. Stream connections, view hex/text payloads in real time.

🧪

Service Explorer

Visual service probing with version detection. 63 product signatures + 70 device signatures (cameras, routers, ICS/SCADA). SMB share enumeration.

Architecture

The extension owns no network capability — it is a pure relay. All networking lives in the native host.

Chrome Extension ──── Native Messaging (stdio) ──── HydraSocket.exe
│ UI pages (HTML/CSS/JS)                                        │ Node.js runtime
│ externally_connectable:                                      │ Raw TCP/UDP sockets
│   localhost / 127.0.0.1 only                                 │ TLS / DNS / HTTP
│ No network permissions                                       │ DB drivers (bundled)
│ JSON relay only                                             │ Allow-list gated

Framing: [uint32 LE length][UTF-8 JSON] over stdio
Build:   esbuild bundle → Node SEA → postject inject → standalone EXE
Install: HydraSocket.exe --install → copies to %LOCALAPPDATA%, registers Chrome + Edge

Installation

One EXE, two minutes. Works on Windows with Chrome or Edge.

Download the EXE

Grab HydraSocket.exe from this page. It's a standalone Node.js binary with all dependencies bundled — no npm install needed.

Install the native host

Run HydraSocket.exe --install in a terminal. This copies the binary to %LOCALAPPDATA%\HydraSocket\ and registers native messaging for Chrome and Edge.

Load the extension

Extract the extension ZIP, open chrome://extensions, enable Developer mode, click "Load unpacked", and select the extracted folder.

Test the connection

Click the HydraSocket icon in Chrome's toolbar, then hit "Test". You should see a green checkmark confirming the native host is connected.

For authorized testing only. HydraSocket is designed for security professionals to test systems they own or have explicit authorization to test. Unauthorized access to computer systems is illegal. The developers assume no liability for misuse.