wallhack

Layer 3 network pivoting over UDP or TCP, IPv4 or IPv6, with mTLS and end-to-end encryption on by default. Includes a built-in CLI and REST API for live tunnel management.

Drop the binary on each host and connect them — zero config.

$ wallhack
wallhack 0.6.2
Type 'help' for available commands.

wallhack> info
role:              entry
listen addr:       :6565
version:           wallhack 0.6.2
uptime:            2s

Then on another host:

wallhack --connect 10.0.0.1

When it connects, the REPL notifies you:

[+] peer "pivot" connected (10.0.1.5:52341)

Any traffic you route to the tunnel — TCP, UDP, ICMP, over IPv4 or IPv6 — is delivered into the target network without proxy chains or SOCKS configuration.

Zero Config →

Key Features

Core Capabilities

Transparent Layer 3 tunneling — TCP, UDP, ICMP
Dual-stack IPv4 and IPv6
Zero config — roles and encryption negotiate automatically
Multi-hop pivoting via intermediate relays
UDP transport (QUIC) — egress over any open port, per-stream loss recovery
TCP transport (WebSockets) — traverses HTTP proxies and DPI as HTTPS
mTLS and E2EE on by default
Interactive REPL and REST API for live management
Zero-dependency static binaries (6 MB)

Performance and Reliability

Throughput is in the gigabit range under ideal conditions. When network conditions worsen, the UDP transport remains usable where the TCP transport collapses.

Benchmarks →

Binary Size

Distributed as a single static binary.

Target	Default	Slim
Linux x64 (glibc)	6.1 MB	4.7 MB
Linux x64 (musl, static)	6.0 MB	4.7 MB
Linux arm64	5.4 MB	4.1 MB

Download →