Skip to content

WireUp v1.1.0 - OpenVPN Authentication Support

Latest

Choose a tag to compare

@j0lt-github j0lt-github released this 12 Dec 08:03
· 1 commit to main since this release

WireUp v1.1.0 - OpenVPN Authentication Support 🔐

Enhanced authentication capabilities for password-protected VPN connections

📦 Installation

Download wireup-v1.1.0.jar below and load it in Burp Suite:

  1. Burp Suite → ExtensionsInstalledAdd
  2. Select the downloaded JAR file
  3. The WireUp tab will appear

✨ New Features

OpenVPN Authentication

  • 🔑 Username/Password Support - Full support for auth-user-pass configs
  • 📱 TOTP/2FA Integration - Enter 6-digit codes for two-factor authentication
  • 🤖 Auto-Detection - Automatically shows auth fields when needed
  • 🔐 Secure Handling - Credentials never written to disk

UI Improvements

  • Disconnect Confirmation - Prevent accidental disconnections
  • 🎨 Dynamic UI - Auth panel auto-shows/hides based on VPN type
  • Response UI - Background threading for better responsiveness
  • 📝 Maker Credit - Attribution to j0lt

🔧 How to Use Authentication

For Password-Protected OpenVPN

  1. Paste your .ovpn config with auth-user-pass directive
  2. Authentication fields appear automatically
  3. Enter credentials:
    • Username
    • Password
    • TOTP Token (if using 2FA - optional)
  4. Click Connect - Authentication handled automatically!

Example Config

client
dev tun
proto udp
remote vpn.example.com 1194
auth-user-pass
# ... rest of config ...

When you paste this, username/password fields will automatically appear!

🔐 Security Features

Credential Protection

  • Never Persisted - Credentials stored in memory only
  • Secure Files - Auth files created with 600 permissions
  • Memory Clearing - Password cleared from char arrays after use
  • Auto-Cleanup - Auth files deleted on disconnect

Authentication Flow

1. User enters credentials in UI
2. Extension creates /etc/openvpn/auth.txt (600 perms)
3. Config auto-modified to: auth-user-pass /etc/openvpn/auth.txt
4. OpenVPN reads credentials from file
5. Successful authentication!
6. File deleted on disconnect

📋 What's Changed

Added

  • Username/Password input fields
  • TOTP/2FA token field
  • Auto-detection of auth-user-pass in configs
  • Secure auth file creation and mounting
  • Config auto-modification for auth file path
  • Disconnect confirmation dialog
  • Professional README documentation

Improved

  • UI responsiveness with background threading
  • Error handling for authentication failures
  • Security logging for credential operations
  • Resource cleanup on container shutdown

Fixed

  • Container name conflicts on reload
  • Lint warnings for unused variables

📚 TOTP Support

Some VPNs require appending TOTP tokens to passwords:

Option 1: Separate fields (recommended)

  • Password: mypassword
  • TOTP: 123456
  • Result: mypassword123456

Option 2: Combined

  • Password: mypassword123456
  • TOTP: (leave empty)

Both approaches work!

🐛 Known Issues

None reported in this release.

📖 Full Changelog

Commits: v1.0.0...v1.1.0

Files Modified

  • ConfigPanel.java - Added auth UI components
  • ControlPanel.java - Credential collection and passing
  • OpenVpnConfig.java - Auth detection and storage
  • DockerManager.java - Auth file creation and mounting
  • Dockerfile - Config modification for auth file
  • README.md - Updated documentation

⬆️ Upgrading from v1.0.0

  1. Unload v1.0.0 from Burp Suite
  2. Load v1.1.0 JAR
  3. Existing configs work as before
  4. New auth fields available for password-protected VPNs

No breaking changes!

🙏 Credits

Created by: j0lt

Special thanks to users who requested authentication support!

📄 License

MIT License - See LICENSE


Download: wireup-v1.1.0.jar (attached below)