Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/xvzc/SpoofDPI
A simple and fast anti-censorship tool written in Go
https://github.com/xvzc/SpoofDPI
anti-censorship censorship-circumvention censorship-free deep-packet-inspection dpi dpi-bypassing dpi-filtering golang proxy-server
Last synced: about 1 month ago
JSON representation
A simple and fast anti-censorship tool written in Go
- Host: GitHub
- URL: https://github.com/xvzc/SpoofDPI
- Owner: xvzc
- License: apache-2.0
- Created: 2021-12-26T07:24:14.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2024-07-31T11:50:19.000Z (4 months ago)
- Last Synced: 2024-07-31T13:03:13.931Z (4 months ago)
- Topics: anti-censorship, censorship-circumvention, censorship-free, deep-packet-inspection, dpi, dpi-bypassing, dpi-filtering, golang, proxy-server
- Language: Go
- Homepage:
- Size: 13.1 MB
- Stars: 561
- Watchers: 10
- Forks: 31
- Open Issues: 14
-
Metadata Files:
- Readme: readme.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
- awesome-repositories - xvzc/SpoofDPI - A simple and fast anti-censorship tool written in Go (Go)
README
**⭐PRs or any form of contribution will be appreciated⭐**
# SpoofDPI
Read in other Languages: [🇬🇧English](https://github.com/xvzc/SpoofDPI), [🇰🇷한국어](https://github.com/xvzc/SpoofDPI/blob/main/readme_ko.md), [🇨🇳简体中文](https://github.com/xvzc/SpoofDPI/blob/main/readme_zh-cn.md), [🇷🇺Русский](https://github.com/xvzc/SpoofDPI/blob/main/readme_ru.md)
A simple and fast software designed to bypass **Deep Packet Inspection**
# Installation
## Binary
SpoofDPI will be installed in `~/.spoof-dpi/bin`.
To run SpoofDPI in any directory, add the line below to your `~/.bashrc || ~/.zshrc || ...`
```
export PATH=$PATH:~/.spoof-dpi/bin
```
---
```bash
# OSX
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s darwin-amd64
# linux-amd64
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux-amd64
# linux-arm
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux-arm
# linux-arm64
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux-arm64
# linux-mips
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux-mips
# linux-mipsle
curl -fsSL https://raw.githubusercontent.com/xvzc/SpoofDPI/main/install.sh | bash -s linux-mipsle
```
## Go
You can also install SpoofDPI with **go install**
`$ go install github.com/xvzc/SpoofDPI/cmd/spoof-dpi`
> Remember that $GOPATH should be set in your $PATH
## Git
You can also build your own
`$ git clone https://github.com/xvzc/SpoofDPI.git`
`$ cd SpoofDPI`
`$ go build ./cmd/...`
# Usage
```
Usage: spoof-dpi [options...]
-addr string
listen address (default "127.0.0.1")
-debug
enable debug output
-dns-addr string
dns address (default "8.8.8.8")
-dns-port int
port number for dns (default 53)
-enable-doh
enable 'dns over https'
-no-banner
disable banner
-pattern string
bypass DPI only on packets matching this regex pattern
-port int
port (default 8080)
-timeout int
timeout in milliseconds (default 2000)
-url value
Bypass DPI only on this url, can be passed multiple times
-v print spoof-dpi's version. this may contain some other relevant information
-window-size int
chunk size, in number of bytes, for fragmented client hello,
try lower values if the default value doesn't bypass the DPI;
set to 0 to use old (pre v0.10.0) client hello splitting method:
fragmentation for the first data packet and the rest (default 50)
```
> If you are using any vpn extensions such as Hotspot Shield in Chrome browser,
go to Settings > Extensions, and disable them.
### OSX
Run `$ spoof-dpi` and it will automatically set your proxy
### Linux
Run `$ spoof-dpi` and open your favorite browser with proxy option
`google-chrome --proxy-server="http://127.0.0.1:8080"`
# How it works
### HTTP
Since most of websites in the world now support HTTPS, SpoofDPI doesn't bypass Deep Packet Inspections for HTTP requets, However It still serves proxy connection for all HTTP requests.
### HTTPS
Although TLS 1.3 encrypts every handshake process, the domain names are still shown as plaintext in the Client hello packet.
In other words, when someone else looks on the packet, they can easily guess where the packet is headed to.
The domain name can offer a significant information while DPI is being processed, and we can actually see that the connection is blocked right after sending Client hello packet.
I had tried some ways to bypass this, and found out that it seemed like only the first chunk gets inspected when we send the Client hello packet splited in chunks.
What SpoofDPI does to bypass this is to send the first 1 byte of a request to the server,
and then send the rest.
> SpoofDPI doesn't decrypt your HTTPS requests, and that's why we don't need the SSL certificates.
# Inspirations
[Green Tunnel](https://github.com/SadeghHayeri/GreenTunnel) by @SadeghHayeri
[GoodbyeDPI](https://github.com/ValdikSS/GoodbyeDPI) by @ValdikSS