Muti Metroo is a mesh networking agent for red team operations that creates encrypted virtual TCP tunnels across multiple transport layers (QUIC/TLS 1.3, HTTP/2, WebSocket). It operates entirely in userspace without requiring root privileges.
Key Features
- End-to-end Encryption: X25519 key exchange + ChaCha20-Poly1305 - transit nodes cannot decrypt traffic
- Multiple Transports: QUIC/TLS 1.3, HTTP/2, and WebSocket for protocol diversity
- SOCKS5 Proxy Ingress: Accept client connections with optional authentication
- Port Forwarding: Reverse tunneling to expose local services through the mesh (ngrok-style)
- Multi-hop Mesh Routing: Flood-based route propagation with automatic path selection
- CIDR & Domain-based Exit Routing: Fine-grained control over traffic destinations
- Stream Multiplexing: Multiple virtual streams over a single peer connection
- No Root Required: Runs entirely in userspace
- Embedded Configuration: Single-file deployment with config baked into binary
- Cross-platform: Linux, macOS, Windows (x64 and ARM64)
- Remote Shell: Interactive PTY and streaming command execution
- File Transfer: Upload/download files and directories across the mesh
- Web Dashboard: Real-time metro map visualization of mesh topology
Why Muti Metroo?
Unlike traditional tunneling tools, Muti Metroo provides:
- Native multi-hop routing - no manual listener chaining for double pivots
- End-to-end encryption - transit nodes are cryptographically blind
- Protocol flexibility - blend into existing traffic with HTTP/2 or WebSocket
- Interactive setup wizard - guided configuration for operators
