#tls
Wiki 3
- Bypassing DPI with eBPF sock_ops Bora Tanrıkulu builds gecit — eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
- Domain Fronting Hiding the real destination of an HTTPS request behind a different, high-reputation SNI
- TLS Desync via Fake ClientHello Send a low-TTL fake ClientHello with a benign SNI before the real one, so the DPI logs the wrong hostname and waves the connection through
Toolbox 1
- gecit System-wide DPI bypass that injects fake TLS ClientHellos from eBPF, no tunnel or remote server