Categories

• Network tunnels

  • code-talker-tunnel - Code Talker Tunnel (previously called SkypeMorph) is a protocol camouflaging tool, designed to reshape traffic output of any censorship circumvention tool to look like Skype video calls
  • Firezone - Self-hosted VPN server using WireGuard. Supports MFA, SSO, and has easy deployment options.
  • uproxy - uProxy is a browser extension that lets friends route their connection to their Internet through each other's computers. It can help people with restricted or insecure access to the Internet get to the content they care about safely.
  • shadowsocks - a fast socks5 proxy that encrypts traffic
  • obfsproxy with OpenVPN - OpenVPN traffic obfuscation using obfsproxy
  • flashproxy - miniature proxy that runs in a web browser, and reflects traffic to a Tor relay.
  • meek - Tor pluggable transport that uses HTTP for carrying bytes and TLS for obfuscation.
  • WireGuard - WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
  • tunsafe - TunSafe is a fast and modern layer 3 VPN tunnel that implements the new and modern WireGuard protocol that is becoming increasingly popular in the VPN community due to its security, speed, reliability and ease of use. TunSafe was developed with the goal to bring the power of the WireGuard-protocol to all the Windows users around the world and in March 2018 the first version was released.
  • govpn - Simple secure VPN daemon, aimed to be reviewable, secure, DPI/censorship-resistant.
  • infranet - Infranet is a system that attempts to circumvent web censorship by allowing clients to surreptitiously request sensitive content via cooperating Web servers distributed across the global Internet.
  • v2ray - A platform for building proxies to bypass network restrictions
  • lantern - Lantern is a free desktop application that delivers fast, reliable and secure access to the open Internet for users in censored regions
  • algo - Set up a personal VPN in the cloud
  • MTProxy - Proxy server which helps telegram users who are inside censored areas still be able to connect to telegram
  • streisand - single command set for a server running a wide variety of anti-censorship software

• Decentralized systems

  • AKASHA - next-generation social media network immune to censorship by design. It is built on top of Ethereum using Smart Contracts and IPFS
  • freenet - Freenet is a peer-to-peer platform for censorship-resistant communication.

• Firewall analysis

  • mongol - A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.

• Steganography

  • Real Steganography with TrueCrypt - hiding containers inside MP4 video files.

• Misc

  • OnionShare - tool that lets you securely and anonymously share a file of any size (over TOR).

• Articles and research papers

  • Analyzing China's Blocking of Unpublished Tor Bridges
  • Learning more about the GFW's active probing system
  • A closer look at the Great Firewall of China - Tor Blog
  • How the Great Firewall of China is Blocking Tor
  • Towards a Censorship Analyser for Tor
  • stegotorus
  • Format-Transforming Encryption
  • ScrambleSuit
  • My Experience With the Great Firewall of China - Infosec
  • Selected Research Papers in Internet Censorship
  • Course info - ECEN 5003: Censorship Circumvention

• Privacy and anonymity

  • tor - The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection
  • whonix - Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP.
  • i2p - I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.
  • vuvuzela - Vuvuzela is a messaging system that protects the privacy of message contents and message metadata. Users communicating through Vuvuzela do not reveal who they are talking to, even in the presence of powerful nation-state adversaries.