h1-vpn

Docker image to connect to the HackerOne Gateway (VPN) through a socks5 proxy.

Prerequisites

1. In order to run this container you'll need docker installed.

   • Windows
   • OS X
   • Linux

2. For Apple Silicon Mac, enable docker's Rosetta for x86/amd64 emulation.

Features

• Register a new Cloudflare WARP account by connecting to a HackerOne program
• Connect/disconnect from VPN
• Use socks5 proxy with optional authentication

Usage

Environment Variables

Environment variables are defined in .env file.

• PROXY_USER
• PROXY_PASSWORD
• PROXY_PORT

You can set PROXY_USER and PROXY_PASSWORD to connect to the proxy. Leave these variables blank to skip authentication while connecting to the socks5 server.

Leave PROXY_PORT blank to use the default port 1080.

Steps

1. Start the container:

   docker compose up -d
   

2. Check the connection status:

   docker compose exec -it warp-cli warp-cli --accept-tos status
   

   If you see an error Error: "Unable to connect to CloudflareWARP daemon. Maybe the daemon is not running?", run the following command to start CloudflareWARP daemon.

   docker compose exec -it warp-cli warp-svc &
   

3. Register to a HackerOne program. Find the team-domain on your Gateway Programs page.

   docker compose exec -it warp-cli warp-cli --accept-tos teams-enroll <team-domain>
   

   Follow this documentation to obtain the token.

   docker compose exec -it warp-cli warp-cli --accept-tos teams-enroll-token "<token>"
   

4. Once you are registered for a program, you can connect and disconnect from the VPN with one line of command. Connect to the VPN:

   docker compose exec -it warp-cli warp-cli --accept-tos connect
   

5. Check the connection status:

   docker compose exec -it warp-cli warp-cli --accept-tos status
   
   Status update: Connected
   Success
   

6. Check the account details. Make sure that Account type is Team and Organization shows the intended team domain.

   docker compose exec -it warp-cli warp-cli account
   
   Account type: Team
   Device ID: <device_id>
   Public key: <public_key>
   Account ID: <account_id>
   Organization: <team-domain>
   

7. Test request example given PROXY_USER=admin, PROXY_PASSWORD=admin and PROXY_PORT=1080:

   curl --socks5-hostname admin:admin@localhost:1080 -k https://ifconfig.me
   

8. Disconnect from the VPN:

   docker compose exec -it warp-cli warp-cli --accept-tos disconnect
   

License

Copyright (c) 2014-2023 HackerOne Inc. and individual contributors. Licensed under MIT license, see LICENSE for the full license.