Tree: 62f2953515

EgorWeders-patch-1

ipv6

master

masterv6

more-fakes

openvpn

quic_block

test_windres

windivert-test

windivert2

0.0.1

0.0.2

0.0.3

0.0.4

0.0.5

0.0.6

0.0.7

0.0.8

0.0.9

0.1.0

0.1.1

0.1.2

0.1.2rc1

0.1.2rc2

0.1.2rc3

0.1.3

0.1.4

0.1.5

0.1.5rc1

0.1.5rc2

0.1.5rc3

0.1.6

0.1.7

0.1.8

0.2.0

0.2.1

0.2.2

0.2.3rc1

0.2.3rc2

0.2.3rc3

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '62f2953515'

${ noResults }

Commit Graph

74 Commits (62f29535151ed3e45e026e17a464a26b7e9c57cf)

Author	SHA1	Message	Date
ValdikSS	b45b463d51	Update readme	3 years ago
ValdikSS	80fcd9c5cf	Replace required/optional brackets in the readme	3 years ago
ValdikSS	21ff80b43c	Automatic TTL value picker for --set-ttl Fake Packet mode This is a per-connection (per-destination) automatic TTL adjusting feature. Basically a --set-ttl mode where you don't need to set specific TTL value. It works as follows: 1. All incoming SYN/ACKs (the response to client's SYN) are intercepted 2. TTL value is extracted from SYN/ACK 3. New TTL is calculated with the simple formula: 128 > extracted_ttl > 64: // Server is running Windows fakepacket_ttl = 128 - extracted_ttl - decrement 64 > extracted_ttl > 34: // Server is running Linux/FreeBSD/other fakepacket_ttl = 64 - extracted_ttl - decrement 4. Fake packet is sent To comply with the multi-path multi-hop server connections where 1 hop dispersion is not rare, decrement should be at least of value "2", which is the default. The patch does not process "too strange" TTL values (bigger than 128, less than 34).	3 years ago
ValdikSS	bbb6af89fe	New Fake Packet circumvention method: wrong SEQ/ACK numbers This method sends Fake Packet with the TCP SEQ/ACK numbers "in the past": -66000 is used for ACK (right out of the ACK permissive window in Linux stack), -10000 is used for SEQ (without any reasoning). This method is pretty effective in Russia. It also could be handy in a networks which prohibit changing TTL values (mobile networks with tethering block/premium feature).	3 years ago
ValdikSS	b9682ac222	Print parsed hostnames in DEBUG mode	3 years ago
ValdikSS	35c6e401db	Handle TLS SNI in blacklist option Now blacklist applies not only to HTTP websites, but also to HTTPS. Fixes #213	3 years ago
ValdikSS	cf7d1c69e0	Add TLS Server Name Indication (SNI) extractor	3 years ago
ValdikSS	7d50748e2e	GoodbyeDPI version 0.1.7	3 years ago
ValdikSS	e28cb52645	Send native-fragged fragments in the reversed order Some websites (or more precisely, TLS terminators/balancers) can't handle segmented TLS ClientHello packet properly, requiring the whole ClientHello in a single segment, otherwise the connection gets dropped. However they still operate with a proper TCP stack. Cheat on them: send the latter segment first (with TCP SEQ "in the future"), the former segment second (with "current" SEQ), allowing OS TCP stack to combine it in a single TCP read(). This fixes long-standing number of TCP fragmentation issues: Fixes #4, #158, #224, #59, #192 and many others.	3 years ago
ValdikSS	e3638786da	Add Native Fragmentation support (without window size) This patch adds `--native-frag` option for userspace TCP segmentation (packet splitting), without shrinking TCP Window Size in SYN/ACK. Compared to Window Size shrinking, this method does not require waiting for ACK, which saves two RTTs. This is preferrable method of operation since it has no cons. It's faster and easier to handle in the software.	3 years ago
ValdikSS	ad60d30caa	Fix fake packet handling without other modifying parameters Fixes #150	3 years ago
ValdikSS	b5d75a6c8e	Version v0.1.6	6 years ago
ValdikSS	f2de8fce8d	Fake Request Mode	6 years ago
KOLANICH	ff4c11a6eb	Integers fixes (with small modifications), closes #84 Signed-off-by: ValdikSS <[email protected]>	7 years ago
ValdikSS	1c7fe5f843	Use newlines for current options information	6 years ago
ValdikSS	46db057662	Add version number into greeting message	6 years ago
ValdikSS	c4d0ba1297	Skip impostor and loopback packets. Fixes #53.	7 years ago
ValdikSS	a028cb01f4	WinDivert 1.4 support	7 years ago
ValdikSS	38b1ff1a92	Fix -f and -e options	7 years ago
ValdikSS	50e70ace76	Handle HTTP redirects within IPv6 Flow Label = 0x00 packets	7 years ago
ValdikSS	135c97ae69	Move program source code to src directory	7 years ago
ValdikSS	860f483ac3	IPv6 DNS redirection	7 years ago
ValdikSS	3d36127f5b	Handle IPv6 packets and prepare for IPv6 DNS redirection	7 years ago
ValdikSS	aa28d3e12a	Make sure to search DLLs only in safe path, not in current working dir	7 years ago
ValdikSS	cc770d302c	Add GoodbyeDPI Github link to the welcome message.	7 years ago
ValdikSS	2e23d93762	New option: --ip-id. Handles additional IP ID numbers of passive DPI.	7 years ago
ValdikSS	14ae107b53	Handle only IP IDs in [0x0; 0xF] (or→and)	7 years ago
ValdikSS	1bdfbb8c45	Move active filter template and passive filter to defines	7 years ago
ValdikSS	5eddb5f18a	Fix crash on error (free→LocalFree) and print KB3033929 message	7 years ago
ValdikSS	8e7f4ff505	Properly exclude Teredo	7 years ago
ValdikSS	bb8fc64f18	Handle ip.id up to 0xF. Some DPI send several TCP RST or HTTP redirection packets with increasing IP ID number. Handle them all.	7 years ago
ValdikSS	490525387d	Remove unused string	7 years ago
ValdikSS	5e9e1f0eb6	Preliminary IPv6 support. No IPv6 support in DNS redirection code. IPv6 DNS request packets would be dropped.	7 years ago
ValdikSS	3ffce30871	Minor modifications. * puts() instead of printf("%s") * strdup() instead of malloc + strcpy	7 years ago
ValdikSS	eaac2d1a80	Minor service fixes	7 years ago
ValdikSS	ccd21a4281	ntohs -> htons (they produce the same output, but still)	7 years ago
ValdikSS	23babdc8fa	Windows Service support. Program can now be started as a Windows Service. No additional arguments needed. Refer to `service_install` and `service_remove` scripts in released zip file.	7 years ago
ValdikSS	95765f3ed9	Store fragment_size_message as a pointer	7 years ago
ValdikSS	a5b185c2a9	Set proper options if started without arguments	7 years ago
ValdikSS	c9cd3ac8c7	Fix signed/unsigned integer comparison warning for HTTP fragmentation	7 years ago
ValdikSS	fab9662ac9	Use WinDivert TCP Header structure to change Window Size	7 years ago
ValdikSS	a88ab4337e	Apply HTTP Persistent fragmentation only for sufficiently large packets	7 years ago
ValdikSS	582503452f	Implement TCP fragmentation for HTTP Persistent (keep-alive) sessions. New option `-k` splits HTTP request into two segments, and either send only the first one (Windows would retransmit the other one based on ACK number in ACK reply) or both (with `-n` enabled). This fixes behaviour on some DPI which trace persistent sessions but do not reassemble packages.	7 years ago
ValdikSS	03e36b968a	Free allocated error message string	7 years ago
ValdikSS	312d2b1d55	Remove unused IPV4_TOTALLEN_OFFSET	7 years ago
ValdikSS	60e87f769a	Minor modifications	7 years ago
ValdikSS	bfed8638e5	Implement blacklist. Only domains and subdomains from the blacklist file would be processed with HTTP modifications. Does not affect HTTPS data.	7 years ago
ValdikSS	72516c0b2b	Add information about --dns-verb option	7 years ago
ValdikSS	dd4d6bc5c6	Do not print DNS warnings by default and drop duplicate requests. Windows is known to use all available interfaces for DNS requests, which is handled as a duplicate (retransmission) in dns redirector. It's safe to just drop these duplicates.	7 years ago
ValdikSS	5f231996d4	Fix incorrect host header memmove()s. Fixes #47	7 years ago