Proxychains/LD_PRELOAD via_socks.sh routing tools through reverse SOCKS5 tunnel

Detects the execution of tooling routed through a reverse SOCKS5 pivot via wrappers such as via_socks.sh, proxychains4 with a SOCKS5 configuration, or LD_PRELOAD injection of libproxychains.so.