Tree: cd1ce83272

EgorWeders-patch-1

ipv6

master

masterv6

more-fakes

openvpn

quic_block

test_windres

windivert-test

windivert2

0.0.1

0.0.2

0.0.3

0.0.4

0.0.5

0.0.6

0.0.7

0.0.8

0.0.9

0.1.0

0.1.1

0.1.2

0.1.2rc1

0.1.2rc2

0.1.2rc3

0.1.3

0.1.4

0.1.5

0.1.5rc1

0.1.5rc2

0.1.5rc3

0.1.6

0.1.7

0.1.8

0.2.0

0.2.1

0.2.2

0.2.3rc1

0.2.3rc2

0.2.3rc3

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'cd1ce83272'

${ noResults }

Commit Graph

85 Commits (cd1ce832725a4dcf4d8356e58b6b5835edf8d636)

Author	SHA1	Message	Date
EgorWeders	cd1ce83272	Added arg case for logs	9 months ago
EgorWeders	78537481b0	Added testing output	9 months ago
EgorWeders	9c44ea9766	Fixed not defined var	9 months ago
EgorWeders	78b787ba39	Added global pointer	9 months ago
ValdikSS	8a0bef08bf	0.2.3rc3 version	9 months ago
ValdikSS	cb9cc82fde	Fix: fake_load_random maximum packet size	9 months ago
ValdikSS	c2784dd79e	0.2.3rc2 version	9 months ago
ValdikSS	bc95b6f598	--fake-resend option: repeat sending each fake packet number of times	9 months ago
ValdikSS	985a09c73d	Print number of custom fake payloads on start	9 months ago
ValdikSS	15793fb84f	--fake-gen option: generate random-filled Fake Packets This option is similar to fake-from-hex, but generates number of packets with random payload.	9 months ago
ValdikSS	f0d42129aa	--fake-from-hex option: load Fake Packet from HEX data This option replaces built-in fake packets with the user-supplied ones, could be used multiple times (up to 30). Each fake packet loaded with this option is sent in command line order, every time (on each TLS ClientHello or HTTP GET/POST).	9 months ago
ValdikSS	62f2953515	Ignore all RSTs with -p	10 months ago
ValdikSS	7b66094f56	Fix help print (`--help`), '?' is reserved in getopt. Broken due to 16f2a8fb81	10 months ago
ValdikSS	dcff8389b3	Fix fox 16f2a8fb81	10 months ago
EgorWeders	16f2a8fb81	Added argument --debug-exit (#512) * Added argument --debug-exit	10 months ago
ValdikSS	e9ac13bcda	Enum style fixes. Closes #504, #507.	11 months ago
EgorWeders	78ae517871	Changed to enum	11 months ago
EgorWeders	ed45c42c9e	Added different return codes	11 months ago
ValdikSS	abcca5ea84	Print errorcode in WinDivert error message	11 months ago
JijogBf	8401dfcc1a	FIX: Comment's indexes in printf block at main function (line 979)	11 months ago
ValdikSS	c4bbd0b8e2	Print human-readable WinDivert error messages	11 months ago
ValdikSS	6b2f3cfa74	Bump version to v0.2.3. Closes #429	11 months ago
ValdikSS	9bfce3156e	Make mode -9 the default, instead of -5 Auto-ttl gives many false positives in TTL detection, which breaks non-blocked websites. Use the combination of wrong-seq and wrong-chksum and hope to the best. Also block QUIC to workaround possible throttling, as right now it is not dissected.	11 months ago
ValdikSS	f7362094d3	New modes: -8 and -9 -8 is -7 with added --wrong-seq, it sends two subsequent fake packets, one with incorrect sequence, and another one with incorrect checksum. -9 is -8 with QUIC block.	11 months ago
ValdikSS	f1aece75ae	New mode: -7 - As -6 but with wrong chksum	11 months ago
ValdikSS	60dd3cb004	Make ClientHello ignore --max-payload limits Receive TLS ClientHello despite max-payload limit set, to get all the benefits of the option (decreased CPU consumption) but still handle all TLS connections, including Kyber.	11 months ago
ValdikSS	d031ae65bf	New option: -q - block QUIC/HTTP3 Only Initial packet in Long Header Packets are blocked. The packet should be at least 1200 bytes in size.	11 months ago
ValdikSS	15eb10ac68	Fragment packet by the beginning of SNI value. #357 It has been reported that the DPI systems in Saudi Arabia and United Arab Emirates are started to search for the beginning of SNI extension header and its value, without parsing the TLS ClientHello packet, in any part of TCP session. Workaround the issue by splitting the packet right after the end of extension headers and before its value. https://ntc.party/t/goodbyedpi-in-saudi-arabia/7884 https://ntc.party/t/goodbyedpi-in-uae/7914	1 year ago
ValdikSS	4c846c712d	Handle TLSv1.2 record version handshakes (16 03 03). #353	1 year ago
mohadangKim	54349a1c31	fix memcpy usage	3 years ago
ValdikSS	4f18a73239	Print correct set-ttl/auto-ttl mode in the status	3 years ago
ValdikSS	67629fb6ef	Disable auto-ttl if set-ttl has been used after auto-ttl	3 years ago
ValdikSS	27a6d256f0	Handle HTTP GET and POST in packets larger than --max-payload If --max-payload 1200 is used and there's HTTP request with lots of cookies which exceed 1200 bytes in size, this packet would have been skipped as 'too large', and the circumvention won't be applied. Fix this by checking for "GET " or "POST" in the beginning of the packet regardless of its size.	3 years ago
ValdikSS	99c403ca62	GoodbyeDPI v0.2.2	3 years ago
ValdikSS	6ee4101f58	Fix --set-ttl when used with --min-ttl	3 years ago
ValdikSS	55a3a94065	Handle "0" in domain names	3 years ago
ValdikSS	1cfd2b1b9f	Allow to set --max-payload to zero	3 years ago
ValdikSS	871670845f	Document forgotten --max-payload in -5 and -6 modes (v0.2.0+)	4 years ago
ValdikSS	4a8f7ac4fb	Call WinDivertShutdown on shutdown	4 years ago
ValdikSS	ee4ce8893c	Initial support for WinDivert 2.0+ This patch adds WinDivert 2.0+ support in a backward-incompatible way. WinDivert 1.4 won't work after this commit anymore.	4 years ago
ValdikSS	406cf2ca68	GoodbyeDPI v0.2.1	4 years ago
ValdikSS	277b1fb4ef	SNI extraction bugfix: add forgotten hyphen as an allowed domain character This fixes --allow-no-sni option for domains with hyphen.	4 years ago
ValdikSS	5494be72ba	GoodbyeDPI v0.2.0	4 years ago
ValdikSS	f97a2d04f0	Use --max-payload-size=1200 for -5 and -6 modes.	4 years ago
ValdikSS	d7c681d1a2	Add Max Payload Size limit option (`--max-payload-size`) This option excludes TCP packets with the data payload larger than defined value from being copied by WinDivert driver to GoodbyeDPI. As most of HTTP and TLS ClientHello packets are repatively small, and file transfers are usually big and are sent/received using the whole available MTU/MSS, we can just exclude them from being processed by our userspace program to reduce unnecessary CPU load.	4 years ago
ValdikSS	cc1676ad92	--allow-no-sni option. Useful with --blacklist and undetectable SNI. This option is added specially for protonmail.com, as it sends low Window Size in SYN-ACK for requests from Russia, to force the client to fragment the packet. GoodbyeDPI doesn't do reassembling and can't extract SNI in this case, thus won't circumvent the censorship if --blacklist option is used.	4 years ago
ValdikSS	7f59593a28	Check TLS Handshake ClientHello byte if packet length is enough	4 years ago
ValdikSS	372cc6a45d	Properly handle Native Fragmentation packet of bigger or equal size than the fragment size	4 years ago
ValdikSS	46c4f36de8	Add Fake Packet maximum TTL limit to Auto TTL mode This patchset adds maximum TTL size of the fake packet to be sent, to further improve compatibility with asymmertic routing and non-standard TTL value set on servers.	4 years ago
ValdikSS	8911e459d8	Exit when native fragmentation is enabled but http/https values are not set	4 years ago