SadeghHayeri/GreenTunnel
GreenTunnel
GreenTunnel is a network utility designed to circumvent deep packet inspection and bypass internet censorship. It functions as a tool that modifies outgoing network packets and encrypts DNS lookups to prevent internet service providers and network filtering systems from detecting and blocking specific web destinations.
The project implements an HTTP fragmentation proxy and an HTTPS handshake fragmenter. These components split request headers and TLS handshake records across multiple segments to conceal hostnames and destination server names from inspection systems.
The software also includes a DNS-over-HTTPS client to retrieve IP addresses using encrypted protocols, preventing the interception or spoofing of standard DNS lookups. Additional capabilities cover TCP packet manipulation and segment fragmentation at the transport layer to evade traffic inspection.
Features
- Packet Inspection Evasion Engines - Functions as an evasion engine that alters traffic patterns to bypass deep packet inspection systems.
- Censorship Bypasses - Employs specific techniques to evade internet censorship and IP-based blocking.
- Handshake Fragmentation - Fragments TLS handshake records to conceal the requested server name from inspection systems.
- DNS-over-HTTPS Clients - Implements a DNS-over-HTTPS client to securely resolve domain names and prevent ISP interception.
- DPI Bypass Utilities - Provides utilities specifically designed to modify network traffic to avoid deep packet inspection.
- Fragmentation Proxies - Implements a local proxy that fragments HTTP request headers to hide hostnames from censorship filters.
- Local Proxy Gateways - Provides a local server architecture that intercepts and modifies outgoing network traffic before forwarding it.
- Handshake Fragmentation - Fragments initial HTTPS handshake records to prevent inspection systems from identifying the server name.
- TCP Segment Slicing - Slices TCP streams into small segments to hide identifying headers from deep packet inspection.
- Packet Manipulation Toolkits - Actively modifies raw network data at the transport layer to bypass signature-based filtering rules.
- Handshake Fragmentation - Splits the initial HTTPS handshake to hide the destination server name from network filters.
- Encrypted DNS Resolvers - Routes domain name lookups through secure protocols like DoH to ensure DNS privacy.
- Fragmentation Evasion - Splits HTTP requests across segments to hide host headers from network inspection systems.
- Open-source projects made by Iranian developers - Listed in the “Open-source projects made by Iranian developers” section of the Github Do Not Ban Us awesome list.
- Censorship Circumvention - Cross-platform tool designed to bypass internet censorship and filtering.
