Symposium sur la sécurité des technologies de l'information et des communications

Conférence francophone sur le thème de la sécurité de l'information.
Elle se déroulera à Rennes du 4 au 6 juin 2025.

soxy: a suite of services over Citrix, VMware Horizon and native Windows RDPArnaud Fontaine, Jean-Romain Garnier, Nicolas Devillers


Date : 06 juin 2025 à 09:45 — 15 min.

soxy is a modular tool to interact with several VDIs that operate over RDP, such as VMware Horizon, Citrix, native Windows RDP and XRDP. It supports useful debug services (e.g. clipboard, console/shell, sharing, FTP server, SOCKS5 proxy). It is a more stable, complete and modular alternative to existing tools such as SocksOverRDP, ica2TCP, and rdp2tcp.

At the time of writing, soxy provides:

  • a bootstrap module using a PowerShell backend script ("stage0");
  • a (basic) FTP server to access the virtual machine's filesystem;
  • a telnet-like interface to spawn and interact with a console/shell executed on the virtual machine;
  • a telnet-like interface to read/write the Windows clipboard of the virtual machine;
  • a SOCKS5 proxy which permits to open connections on client's side as if it was opened in the virtual machine.