#censorship-circumvention

9 pages search “censorship-circumvention” ↳ all tags

Wiki 4

  • Bypassing DPI with eBPF sock_ops Bora Tanrıkulu builds gecit — eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
  • Domain Fronting Hiding the real destination of an HTTPS request behind a different, high-reputation SNI
  • Serverless Relay Transport Using a cloud provider's free-tier serverless runtime (Apps Script, Workers, Cloud Run) as the exit hop for a circumvention proxy
  • TLS Desync via Fake ClientHello Send a low-TTL fake ClientHello with a benign SNI before the real one, so the DPI logs the wrong hostname and waves the connection through

Toolbox 5

  • gecit System-wide DPI bypass that injects fake TLS ClientHellos from eBPF, no tunnel or remote server
  • GooseRelayVPN SOCKS5 VPN tunneling raw TCP through a Google Apps Script relay to a small VPS exit, with end-to-end AES-256-GCM so Google never sees plaintext
  • MasterHttpRelayVPN Python proxy that fronts HTTPS traffic through a free Google Apps Script relay
  • MasterHttpRelayVPN-RUST Rust port of MasterHttpRelayVPN — zero-dep cross-platform DPI bypass via Google Apps Script relay with egui desktop UI and Android VpnService
  • MTproxy-reanimation nftables SYN limiter and server-side TCP desync for Telemt MTProto proxies, driven from one bash menu