A command-line decryptor for VPN and proxy configuration files used by various Android and desktop clients. Pantegnos extracts readable server metadata from encrypted proprietary formats, making it useful for security researchers analyzing these tools.
| Format | Extension | Protocol | Module |
|---|---|---|---|
| SlipNet (Encrypted) | .slip |
slipnet-enc:// |
AES-256-GCM with hardcoded key |
| SlipNet (Plaintext) | .slip |
slipnet:// |
Base64 decode + profile parse |
| SlipNet Bundle (Password) | .slip |
slipnet-bundle-enc:// |
PBKDF2 (600k iter) + AES-GCM |
| HA Tunnel Plus | .hat |
(extension-based) | AES-ECB (SHA1-derived key) |
| NpvTunnel (NapsternetV) | .npvt |
NPVT1 |
Custom whitebox AES CTR |
| NetMod | .nm |
nm-*:// |
AES-ECB (fixed key) |
| Happ Proxy | .happ |
happ://crypt[1-4]/ |
RSA-1024/4096 private key |
SlipNet profiles support schema versions 1 through 28, covering fields like VLESS, SSH tunneling, SOCKS5, DoH, SNI fragmentation, and more.
-
Place your encrypted config files in a
configs/directory (or use-inputto specify one). -
Run the tool:
chmod +x Pantegnos
./Pantegnos -input configs -output output- Decrypted files appear in the output directory as
.txtfiles.
| Flag | Default | Description |
|---|---|---|
-input |
configs |
Directory containing encrypted config files |
-output |
output |
Directory where decrypted files are saved |
Requires Go 1.26.3 or later.
go build -o pantegnos .For cross-compilation:
# Linux
GOOS=linux GOARCH=amd64 go build -o pantegnos-linux .
# Windows
GOOS=windows GOARCH=amd64 go build -o pantegnos-win.exe .Pre-built binaries are available in the Releases section.
- colorgrad — Terminal gradient text
- termenv — Terminal capabilities
- golang.org/x/crypto — PBKDF2 key derivation
- golang.org/x/term — Secure password input (bundle mode)
Copyright (c) 2026 FrontierTM. Licensed under the MIT License. See LICENSE for details.
This tool is provided as-is for security research purposes. Users are responsible for ensuring their use complies with applicable laws.