mirrors/SpoofDPI
1
0
Fork 0
mirror of https://github.com/xvzc/SpoofDPI.git synced 2024-12-22 22:36:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
A simple and fast anti-censorship tool written in Go
159 Commits 2 Branches 30 Tags 14 MiB
Go 98.2%
Shell 1.2%
Dockerfile 0.6%
ffd4a4bcfb
Go to file
xvzc ffd4a4bcfb Merge pull request #17 from xvzc/test 
test
2022-03-11 10:43:43 +09:00
.github/workflows Update release.yaml 2022-03-11 10:42:47 +09:00
cmd/spoof-dpi update log format 2022-01-12 03:06:14 +09:00
doh add doh module 2022-01-10 23:41:31 +09:00
net fix unexpectedly formated http request 2022-03-06 17:44:11 +09:00
packet add handling unexpected reequest format 2022-03-06 17:53:22 +09:00
proxy fix unexpectedly formated http request 2022-03-06 17:44:11 +09:00
util add net module and fixed the other modules 2022-01-11 02:11:30 +09:00
.gitignore update .gitignore 2022-01-12 18:53:25 +09:00
go.mod add log option 2022-01-12 00:05:16 +09:00
go.sum add log option 2022-01-12 00:05:16 +09:00
install.sh update install.sh 2022-01-12 22:36:32 +09:00
LICENSE add license 2022-01-04 22:07:01 +09:00
readme_ko.md Update readme_ko.md 2022-03-06 14:43:37 +09:00
readme_zh-cn.md Update readme_zh-cn.md 2022-03-06 14:44:02 +09:00
readme.md test 2022-03-11 10:43:17 +09:00
release updated build script 2022-03-06 17:06:58 +09:00

readme.md

SpoofDPI

Read in other Languages: English, 한국어, 简体中文

A simple and fast software designed to bypass Deep Packet Inspection

image

Installation

Binary

SpoofDPI will be installed in ~/.spoof-dpi/bin.
To run SpoofDPI in any directory, add the line below to your ~/.bashrc || ~/.zshrc || ...

export PATH=$PATH:~/.spoof-dpi/bin

curl

Install the latest binary with curl

  • OSX
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s osx
  • Linux
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux

wget

Install the latest binary with wget

  • OSX
wget -O - https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s osx
  • Linux
wget -O - https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux

Go

You can also install SpoofDPI with go install
$ go install github.com/xvzc/SpoofDPI/cmd/spoof-dpi

Remember that $GOPATH should be set in your $PATH

Git

You can also build your own
$ git clone https://github.com/xvzc/SpoofDPI.git
$ cd SpoofDPI
$ go build ./cmd/...

Usage

Usage: spoof-dpi [options...]
--dns=<addr>   | default: 8.8.8.8
--port=<port>  | default: 8080
--debug=<bool> | default: false

If you are using any vpn extensions such as Hotspot Shield in Chrome browser,
go to Settings > Extensions, and disable them.

OSX

Run $ spoof-dpi and it will automatically set your proxy

Linux

Run $ spoof-dpi and open your favorite browser with proxy option
google-chrome --proxy-server="http://127.0.0.1:8080"

How it works

HTTP

Since most of websites in the world now support HTTPS, SpoofDPI doesn't bypass Deep Packet Inspections for HTTP requets, However It still serves proxy connection for all HTTP requests.

HTTPS

Although TLS 1.3 encrypts every handshake process, the domain names are still shown as plaintext in the Client hello packet. In other words, when someone else looks on the packet, they can easily guess where the packet is headed to. The domain name can offer a significant information while DPI is being processed, and we can actually see that the connection is blocked right after sending Client hello packet. I had tried some ways to bypass this, and found out that it seemed like only the first chunk gets inspected when we send the Client hello packet splited in chunks. What SpoofDPI does to bypass this is to send the first 1 byte of a request to the server, and then send the rest.

SpoofDPI doesn't decrypt your HTTPS requests, and that's why we don't need the SSL certificates.

Inspirations

Green Tunnel by @SadeghHayeri
GoodbyeDPI by @ValdikSS