https://github.com/hackeralert/heavypin
A lightweight HTTPS-based proxy for bypassing firewalls.
https://github.com/hackeralert/heavypin
censorship circumvention firewall freedom https networking privacy proxy security vpn
Last synced: about 2 months ago
JSON representation
A lightweight HTTPS-based proxy for bypassing firewalls.
- Host: GitHub
- URL: https://github.com/hackeralert/heavypin
- Owner: HACKERALERT
- License: gpl-3.0
- Created: 2023-05-05T15:48:29.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-01-01T01:51:26.000Z (5 months ago)
- Last Synced: 2025-03-27T01:12:21.192Z (2 months ago)
- Topics: censorship, circumvention, firewall, freedom, https, networking, privacy, proxy, security, vpn
- Language: Go
- Homepage:
- Size: 55.7 KB
- Stars: 18
- Watchers: 4
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# Heavypin
A lightweight proxy designed to bypass firewalls by transferring traffic through HTTPS requests.
# Installation
You will need both a server and a client application for Heavypin to work. Make sure you have Go installed.
## Server
Install Heavypin on the server that will act as the proxy:
```
go install github.com/HACKERALERT/Heavypin/heavypin-server@latest
```
To start the proxy server:
```
heavypin-server -p password
```
This will start an HTTPS server on `:443` using an automatically generated self-signed RSA 4096 certificate.
## Client
On your local machine, you will need the client application to connect to the server:
```
go install github.com/HACKERALERT/Heavypin/heavypin-client@latest
```
Connect to the server by passing in the server's IP address and password:
```
heavypin-client -s https:// -p password
```
Once connected, you can `http://localhost:8000` as a HTTP proxy in your browser to bypass firewalls.
# Goals
Heavypin is a mostly experimental and proof-of-concept project to demonstrate and implement some simple circumvention techniques in a lightweight, minimal codebase. It's simple and limited in functionality, but usable enough that I felt it would be useful to the public. As such, I don't plan to make Heavypin the next Shadowsocks or V2Ray by constantly adding new obfuscation and circumvention techniques. In some sense, Heavypin is already one of the best tools available for censorship circumvention because it doesn't just mask your traffic to appear as standard web browsing over HTTPS, but it is actually doing exactly that.
# Inspiration
The name "Heavypin" comes from "HTTPS VPN", since it is essentially a "VPN" running over HTTPS.
# How It Works
Heavypin is an HTTPS-based proxy, meaning that instead of working with raw sockets, it uses HTTPS as a transport layer for tunneling data. Heavypin starts a local HTTP proxy server to catch your browser's traffic, and then uses many HTTPS requests to the proxy server to forward your traffic to the destination server. Then, through HTTP long polling, the client will fetch responses to previous requests from the proxy server and stream them back to the browser through the local HTTP proxy. Because everything is done over HTTPS, your connection to the proxy server looks like normal web traffic to an unsuspecting observer. This makes it possible to bypass firewalls that block certain ports and protocols. For further resistance against detection, all traffic between the client and proxy server is randomly padded to protect against basic forms of traffic analysis, and the proxy server is protected against active probing by requiring a password to function. Requests to the proxy server that don't supply the correct password in the header or form data will receive an inconspicuous 404 Not Found, effectively concealing the actual proxy server that lies beneath it. The main obstacle to using Heavypin is finding an IP that is not already blocked by the censor/firewall in question since there is no technique to reach an unreachable address.