---
title: "How to run a Vulnerability Assessment or a Deep Scan using a SOCKS5 Proxy?"
canonical: "https://kb.cynergy.app/space/GS/967049217/How%20to%20run%20a%20Vulnerability%20Assessment%20or%20a%20Deep%20Scan%20using%20a%20SOCKS5%20Proxy%3F"
format: markdown
---
In this article, we will inform you how to install and run a scan using a SOCKS5 Proxy.

Note that you can use any SOCKS5 proxy you prefer, the current integration was tested working with the “Danted” SOCKS5 proxy, 

> ℹ️ **It is advised to use trusted SOCKS5 proxies. Cynergy takes no responsibility for any software installed in your organization's environment. **


1. First, you should have a SOCKS5 proxy up and running in your environment.

<details>
<summary>Danted SOCKS5 Proxy Installation</summary>

#### Installing "danted" socks proxy 

```
apt -y install dante-server && danted -v && chmod +x /etc/init.d/danted && update-rc.d danted defaults && cv /etc/danted.conf /etc/danted.conf.bak
```

#### # Creating a user password for socks proxy

```
useradd proxy_username --shell /usr/sbin/nologin && [your passed] password_for_proxy_username
```

#### Enabling The Proxy

```
systemctl enable danted && systemctl start danted
```

#### Configuring proxy service

```
**************** Config File (danted.conf) ****************

 

logoutput: /var/log/danted.log

internal: eth160

external: eth160

clientmethod: none

socksmethod: username

user.privileged: root

user.notprivileged: nobody

client pass {

        from: 0.0.0.0/0 to: 0.0.0.0/0

        log: error connect disconnect

}

client block {

        from: 0.0.0.0/0 to: 0.0.0.0/0

        log: connect error

}

socks pass {

        from: 0.0.0.0/0 to: 0.0.0.0/0

command: bind connect udpassociate

        log: error connect disconnect

socksmethod: username

}

socks block {

        from: 0.0.0.0/0 to: 0.0.0.0/0

        log: connect error

}
```
</details>

2. Once the proxy service is installed verify that you can access internal systems from the internet via the proxy service. In order to enable it, **make sure there are forwarding rules in your firewall from your external IP to the server's internal IP running the proxy service.**
3. Make sure that the traffic is allowed for port 1080, or any other port you have decided to run the proxy on.
4. save the credentials in the authentication manager in Cynergy.
  1. Click on your “Profile name” → “Authentications”
    Click on “ADD AUTHENTICATION”
    Fill in the details and save
  Now you are ready to run the first scan
  1. Select the relevant domain.
    Go to the “Inventory” → “Infrastracture” tab
  3. Add the** IP of the internal** asset to scan **NOT THE PROXY SERVICE ADDRESS** and connect it to the relevant subdomain that holds the External IP
  4. Add a test for the asset
    Select a “Deep Scan” or a “Vulnerability Assessment”
    Select “Use Proxy”
    Select the internal host to scan - make sure you have added it previously manually
    Write the external IP address of your service
  If you saved the proxy credentials click on the “Use Prefered Credentials”
8. If you haven't saved it - Write the external IP of the Proxy service
10. Now you are ready to start testing!