ops-proxyns

Routes all process traffic through Tor using Linux network namespaces for pentest OPSEC.

6|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill ops-proxyns-wyl-cmd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ops-proxyns
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/ops-proxyns
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill ops-proxyns-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During penetration tests and reconnaissance, tools like proxychains fail to cover Go/Rust static binaries, leak DNS and IPv6 traffic, and can be bypassed by applications, exposing your real source IP to targets, WAFs, and SIEM systems. ## Core Features & Use Cases - Kernel-Level Traffic Isolation: Uses Linux network namespaces to force all TCP, UDP, DNS, and ICMP traffic through Tor, working with any binary including Go and Rust tools. - Tor Circuit Rotation: Rotate exit node IPs via the Tor control port with automated scripts and randomized delays to avoid rate limiting and IP bans. - Leak Prevention & Stealth: Blocks IPv6, prevents DNS leaks, and provides rotating User-Agent headers with request jitter for stealthy reconnaissance. - Use Case: At the start of an authorized pentest engagement, launch a proxy-ns shell and run the entire toolchain (subfinder, httpx, nuclei, nmap -sT) inside it so no probe ever reveals your originating IP. ## Quick Start Set up proxy-ns with Tor on my Kali Linux machine and start a protected shell so all my recon commands run through the Tor network.

Frequently Asked Questions about ops-proxyns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I route all my pentest tool traffic through Tor?

Build and install proxy-ns, start the Tor service, then run sudo proxy-ns $SHELL to open a shell where every command's traffic is routed through Tor. All tools including subfinder, httpx, nuclei, and curl work inside this namespace.

proxy-ns vs proxychains for penetration testing?

proxy-ns uses kernel network namespaces so it covers Go/Rust static binaries, UDP, and DNS, and cannot be bypassed by applications. proxychains relies on LD_PRELOAD, which fails on static binaries, only covers TCP, and can leak DNS.

How do I rotate my Tor exit node IP address?

Send AUTHENTICATE and SIGNAL NEWNYM commands to the Tor control port 9051 using nc, wait a few seconds, then verify the new IP with sudo proxy-ns curl -s ifconfig.me. The skill includes a script to automate rotation between request batches.

Why does nmap SYN scan fail through Tor?

Tor only transports TCP streams, so raw SYN scans (-sS) cannot work through it. Use nmap -sT (TCP connect scan) instead when running inside a proxy-ns shell.

How do I check for DNS and IPv6 leaks when using Tor?

Inside the proxy-ns shell, run curl -6 ifconfig.me which should fail, and dig +short myip.opendns.com @resolver1.opendns.com to confirm DNS resolves through Tor. proxy-ns blocks IPv6 automatically by design.