Guys, How do you manage to keep your ass saved from cops while tunneling through OpenVPN and hide the traffic from DPI cunts who make the case that cops come and knock at your door?
Let's share the knowledge and tactics you've used, Shall we?
(I hope you use English)
So.. guys lemme share some of my experience from here.
SNI Spoof (I know the data cheaters already know what I'm talking about here)
The trick here is TCP over SSL which makes it possible to fool your ISP by sending a fake SNI header and create a secure connection between the client and server.
So you surf the internet through the HTTP proxy with crafted Payloads? or sock proxy?
Naah! with the OpenVPN.
Yeah, That ain't make any sense here but it will when I explain it a little bit further.
I hope you get the idea now. The same technique can be used with Cloak
These techniques only work with TCP connections, when the ISP DPI, it looks like a regular SSL connection with Spoofed SNI header (Of course they can't see HTTP headers, They are encrypted.)
Note: You should avoid direct connecting to port 22 (SSH) of the stealth server from China and make your configurations. Because the ISP might keep records so it could reveal that you have previously connected to this SSH port of this suspected IP, So they will send cops to your house and cut off your balls.
Bonus pro tips:
1. Buy Microsoft Azure server, so the IP whois will be like "Micorosft blah blah". Then again, you set the fake SNI to Microsoft.com. So the ISP has more reasons to believe that this traffic is nothing but innocent. Just nothing but surfing microsoft.com.
2. OpenVPN can identify its own traffic, and if the request does not come from an OpenVPN Client, the server can redirect the traffic to a different port through the loopback interface (which is not directly accessible, but has to go through the OpenVPN).
And you can run a fake web server with Python (or Netcat or whatever) and set it listening to the port that gets redirected from the OpenVPN server.
Then again, set that simple webserver to respond with a simple 301 redirect to Microsoft.com.
Sample python script.
Boom! That's it.
Even if your ISP grabs the IP address of the stealth server and paste it on a web browser, it will just redirect it to microsoft.com
But if you connect to the stealth server with the OpenVPN client and succeed to authenticate with your key, it allows you to access the internet through the tunnel, Isn't that amazing? Because no one else can suspect.
I've got dozens of more tricks guys, but I hope you guys share your ideas too.
Let's share the knowledge and tactics you've used, Shall we?
(I hope you use English)
So.. guys lemme share some of my experience from here.
SNI Spoof (I know the data cheaters already know what I'm talking about here)
The trick here is TCP over SSL which makes it possible to fool your ISP by sending a fake SNI header and create a secure connection between the client and server.
So you surf the internet through the HTTP proxy with crafted Payloads? or sock proxy?
Naah! with the OpenVPN.
Yeah, That ain't make any sense here but it will when I explain it a little bit further.
Your device | Fooling the ISP with this Innocent looking HTTPS connection with a fake SNI | The stealth server only listening to port 443 (Drops every other incoming packet) |
|---|---|---|
[Whatsapp/Facebook]<--[OpenVPN]<--[Stunnel]<-- from Stealth Server | <==========================> Hey I'm just surfing baindu.com (FAKE SNI) | <--to device<--[Stunnel]<--[OpenVPN]<--[INTERNET] |
I hope you get the idea now. The same technique can be used with Cloak
These techniques only work with TCP connections, when the ISP DPI, it looks like a regular SSL connection with Spoofed SNI header (Of course they can't see HTTP headers, They are encrypted.)
Note: You should avoid direct connecting to port 22 (SSH) of the stealth server from China and make your configurations. Because the ISP might keep records so it could reveal that you have previously connected to this SSH port of this suspected IP, So they will send cops to your house and cut off your balls.
Bonus pro tips:
1. Buy Microsoft Azure server, so the IP whois will be like "Micorosft blah blah". Then again, you set the fake SNI to Microsoft.com. So the ISP has more reasons to believe that this traffic is nothing but innocent. Just nothing but surfing microsoft.com.
2. OpenVPN can identify its own traffic, and if the request does not come from an OpenVPN Client, the server can redirect the traffic to a different port through the loopback interface (which is not directly accessible, but has to go through the OpenVPN).
And you can run a fake web server with Python (or Netcat or whatever) and set it listening to the port that gets redirected from the OpenVPN server.
Then again, set that simple webserver to respond with a simple 301 redirect to Microsoft.com.
Sample python script.
Python:
import SimpleHTTPServer
import SocketServer
class FakeRedirect(SimpleHTTPServer.SimpleHTTPRequestHandler):
def do_GET(self):
print self.path
self.send_response(301)
new_path = '%s%s'%('http://microsoft.com', self.path)
self.send_header('Location', new_path)
self.end_headers()
SocketServer.TCPServer(("", 8080), FakeRedirect).serve_forever()Boom! That's it.
Even if your ISP grabs the IP address of the stealth server and paste it on a web browser, it will just redirect it to microsoft.com
But if you connect to the stealth server with the OpenVPN client and succeed to authenticate with your key, it allows you to access the internet through the tunnel, Isn't that amazing? Because no one else can suspect.
I've got dozens of more tricks guys, but I hope you guys share your ideas too.
