bol-van/zapret

Features

• Censorship Circumvention Tools - Uses packet fragmentation and TCP stream modification to bypass government or provider level web filtering.
• Packet Manipulation Toolkits - Provides a framework for modifying raw network data to deceive deep packet inspection systems and bypass censorship.
• Domain Traffic Filters - Restricts packet manipulation to specific domains using include and exclude lists with wildcard support.
• DPI Bypass Utilities - Manipulates TCP and UDP packets to circumvent deep packet inspection and network censorship.
• Interface-Level Packet Filtering - Uses kernel-level interception to redirect network traffic to a user-mode process for real-time modification.
• Packet Redirection - Implements network-level rerouting of packets from the kernel to user-mode processes for real-time modification.
• Stream Reassemblers - Buffers multi-packet TLS handshakes into a complete request to apply advanced desynchronization strategies.
• Connection State Management - Maintains a connection state table to manage phase-based desynchronization and reassemble multi-packet requests.
• Session Stage Tracking - Tracks TCP and UDP connection phases and sequence numbers to trigger packet manipulation at specific session stages.
• Traffic Interception - Reroutes network traffic to a local proxy using firewall rules for seamless censorship bypass.
• Traffic Obfuscation - Hides prohibited requests from network firewalls using TCP segmentation and fragmentation.
• Traffic Proxying - Intercepts and modifies traffic at the socket level to perform TCP segmentation and maximum segment size adjustment.
• Traffic Redirection Tools - Intercepts and processes traffic passing through a gateway device using divert or redirect mechanisms.
• Transparent Network Proxies - Intercepts traffic via firewall rules to apply evasion techniques without requiring client-side configuration.
• Transparent Proxying - Reroutes network traffic through a local proxy to apply evasion techniques without manual browser configuration.
• Network Traffic Filtering - Defines which packets to process based on IP versions, ports, network interfaces, or specific WiFi networks.
• DPI Desynchronization - Injects fake data and modifies TTL values to deceive deep packet inspection systems while maintaining server connectivity.
• Traffic Fragmentation Tools - Splits UDP packets at the IP level or increases payload size with padding to bypass size-based filters.
• Automated Block Detection - Monitors connection failures and redirects to automatically add blocked hosts to a bypass list in real-time.
• Automated Block List Population - Monitors network connection failures to automatically identify and add blocked domains to a bypass list in real-time.
• Multi-threaded Resolution Optimizers - Performs high-speed multi-threaded DNS lookups for large lists of domains to accelerate the setup of bypass rules.
• Resolution Utilities - Provides a multi-threaded utility for resolving large lists of domains to prepare bypass lists.
• Bypass IP Lists - Maintains and reloads lookup tables of IP addresses and subnets to apply bypass rules to specific destinations.
• Proxy Routing Rules - Redirects specific network traffic to a SOCKS proxy via a transparent soxifier and firewall rules.
• Protocol Handshake Buffering - Collects multi-packet TLS or QUIC handshake messages into a buffer to apply complete evasion strategies.
• DPI Behavior Analysis - Provides a mechanism to test and identify the most effective packet manipulation strategies against target censorship systems.
• Obfuscation Fragmentation - Divides network layer packets into smaller fragments to bypass security filters that lack full reassembly capabilities.
• TCP Segment Slicing - Slices TCP requests into multiple segments and optionally reorders them to disrupt firewall payload reconstruction.
• IP Header Field Manipulation - Adjusts the IPv4 Identification field in packets to mimic different operating systems and break detection patterns.
• Packet Duplication - Sends copies of original packets to confuse systems tracking session characteristics and evade inspection.
• TTL Manipulation - Modifies the Time to Live (TTL) of packets to ensure they reach the server but expire before reaching the inspector.
• TCP Sequence Overlapping - Adds bytes with shifted sequence numbers to segments to force inspectors to lose synchronization.
• SOCKS Proxies - Uses transparent or SOCKS proxies to tamper with TCP streams and resolve DNS remotely to circumvent censorship.
• TCP Stream Interception - Splits and reorders TCP stream segments to prevent firewalls from accurately reconstructing the data stream.
• TCP Window Size Manipulations - Modifies TCP window sizes in SYN packets to force servers to fragment responses and hide sensitive data.
• Traffic Tunneling - Directs specific network traffic through a VPN tunnel based on custom rules and packet marks.
• Firewall Rule Configurations - Executes external shell scripts to implement custom firewall rules alongside the bypass process.
• Background Daemons - Runs bypass processes as a persistent background daemon to maintain network obfuscation.
• TLS Fingerprint Impersonators - Customizes the TLS Client Hello handshake with randomized identifiers and padding to avoid network fingerprinting.
• Packet Injection Utilities - Injects deceptive packets with invalid checksums or sequence numbers to mislead network inspectors.
• Network Protocol Extension Headers - Adds hop-by-hop or destination options headers to IPv6 packets to hide transport protocols from analysis.

Star history