Tree: 79bda5c482

EgorWeders-patch-1

ipv6

master

masterv6

more-fakes

openvpn

quic_block

test_windres

windivert-test

windivert2

0.0.1

0.0.2

0.0.3

0.0.4

0.0.5

0.0.6

0.0.7

0.0.8

0.0.9

0.1.0

0.1.1

0.1.2

0.1.2rc1

0.1.2rc2

0.1.2rc3

0.1.3

0.1.4

0.1.5

0.1.5rc1

0.1.5rc2

0.1.5rc3

0.1.6

0.1.7

0.1.8

0.2.0

0.2.1

0.2.2

0.2.3rc1

0.2.3rc2

0.2.3rc3

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '79bda5c482'

${ noResults }

Commit Graph

79 Commits (79bda5c482569b22e3d4c48d62ee7c247fb1a9f6)

Author	SHA1	Message	Date
ValdikSS	11c322aaed	Show fragmentation value issues only when Window Size is used	4 years ago
ValdikSS	b45b463d51	Update readme	4 years ago
ValdikSS	80fcd9c5cf	Replace required/optional brackets in the readme	4 years ago
ValdikSS	21ff80b43c	Automatic TTL value picker for --set-ttl Fake Packet mode This is a per-connection (per-destination) automatic TTL adjusting feature. Basically a --set-ttl mode where you don't need to set specific TTL value. It works as follows: 1. All incoming SYN/ACKs (the response to client's SYN) are intercepted 2. TTL value is extracted from SYN/ACK 3. New TTL is calculated with the simple formula: 128 > extracted_ttl > 64: // Server is running Windows fakepacket_ttl = 128 - extracted_ttl - decrement 64 > extracted_ttl > 34: // Server is running Linux/FreeBSD/other fakepacket_ttl = 64 - extracted_ttl - decrement 4. Fake packet is sent To comply with the multi-path multi-hop server connections where 1 hop dispersion is not rare, decrement should be at least of value "2", which is the default. The patch does not process "too strange" TTL values (bigger than 128, less than 34).	4 years ago
ValdikSS	bbb6af89fe	New Fake Packet circumvention method: wrong SEQ/ACK numbers This method sends Fake Packet with the TCP SEQ/ACK numbers "in the past": -66000 is used for ACK (right out of the ACK permissive window in Linux stack), -10000 is used for SEQ (without any reasoning). This method is pretty effective in Russia. It also could be handy in a networks which prohibit changing TTL values (mobile networks with tethering block/premium feature).	4 years ago
ValdikSS	b57a204d96	Apply each Fake Packet method to each packet separately Before: --set-ttl and --wrong-chksum generated single Fake Packet with both low TTL and incorrect checksum. Now: --set-ttl and --wrong-chksum generate two packets: one with low TTL, another with incorrect checksum.	4 years ago
ValdikSS	3899a719c1	Update Makefile, make fortify work on modern mingw compilers	4 years ago
ValdikSS	b9682ac222	Print parsed hostnames in DEBUG mode	4 years ago
ValdikSS	35c6e401db	Handle TLS SNI in blacklist option Now blacklist applies not only to HTTP websites, but also to HTTPS. Fixes #213	4 years ago
ValdikSS	cf7d1c69e0	Add TLS Server Name Indication (SNI) extractor	4 years ago
ValdikSS	5b79d8e8ba	Update Makefile, make fortify work on modern mingw compilers	4 years ago
ValdikSS	7d50748e2e	GoodbyeDPI version 0.1.7	4 years ago
ValdikSS	e28cb52645	Send native-fragged fragments in the reversed order Some websites (or more precisely, TLS terminators/balancers) can't handle segmented TLS ClientHello packet properly, requiring the whole ClientHello in a single segment, otherwise the connection gets dropped. However they still operate with a proper TCP stack. Cheat on them: send the latter segment first (with TCP SEQ "in the future"), the former segment second (with "current" SEQ), allowing OS TCP stack to combine it in a single TCP read(). This fixes long-standing number of TCP fragmentation issues: Fixes #4, #158, #224, #59, #192 and many others.	4 years ago
ValdikSS	e3638786da	Add Native Fragmentation support (without window size) This patch adds `--native-frag` option for userspace TCP segmentation (packet splitting), without shrinking TCP Window Size in SYN/ACK. Compared to Window Size shrinking, this method does not require waiting for ACK, which saves two RTTs. This is preferrable method of operation since it has no cons. It's faster and easier to handle in the software.	4 years ago
ValdikSS	ad60d30caa	Fix fake packet handling without other modifying parameters Fixes #150	4 years ago
ValdikSS	b5d75a6c8e	Version v0.1.6	6 years ago
ValdikSS	f2de8fce8d	Fake Request Mode	6 years ago
KOLANICH	ff4c11a6eb	Integers fixes (with small modifications), closes #84 Signed-off-by: ValdikSS <[email protected]>	7 years ago
ValdikSS	1c7fe5f843	Use newlines for current options information	7 years ago
ValdikSS	46db057662	Add version number into greeting message	7 years ago
ValdikSS	c4d0ba1297	Skip impostor and loopback packets. Fixes #53.	7 years ago
ValdikSS	aad03f2e4a	Enable PIE, High Entropy ASLR and add more warnings to Makefile	7 years ago
ValdikSS	a028cb01f4	WinDivert 1.4 support	7 years ago
ValdikSS	38b1ff1a92	Fix -f and -e options	7 years ago
ValdikSS	50e70ace76	Handle HTTP redirects within IPv6 Flow Label = 0x00 packets	7 years ago
ValdikSS	135c97ae69	Move program source code to src directory	7 years ago