Projects sharing features with Streisand

Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination

Cloak is a set of censorship circumvention tools designed for secure proxy tunneling and internet traffic obfuscation. It focuses on bypassing restrictive firewalls and state surveillance by disguising proxy connections as standard web browsing. The project utilizes HTTP fingerprint masquerading to imitate common browser signatures and routes traffic through content delivery networks to mask the identity of the origin server. To further hide the server's purpose, it includes a mechanism to redirect unauthenticated connection requests to a third-party website. The system implements transport

This project is a censorship circumvention tool and transparent proxy gateway designed to bypass local network restrictions. It functions as a SOCKS5 proxy server, a DNS tunneling tool, and a network traffic obfuscator to help users access blocked websites. The software implements masking protocols to hide the origin and destination of data to evade restrictive firewalls. It provides capabilities for network traffic obfuscation and secure DNS tunneling to protect network privacy and resolve blocked domains. The system handles wide-scale traffic management by intercepting system network traff

This project is a censorship circumvention proxy client and cross-platform installer. It provides software designed to bypass internet filters, restrictive network firewalls, and the Great Firewall of China to enable access to blocked global websites. The software enables the download and installation of proxy and VPN clients across multiple desktop and mobile operating systems. These tools route traffic to bypass national firewalls and restrictive network filters. The project also covers network access acceleration to improve connection stability when accessing foreign servers and the manag

gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio

This project is a toolset for automated VPN installation, proxy server management, and server-side network throughput optimization. It provides a Shadowsocks proxy server manager used to deploy and configure proxy servers on virtual private servers. The system utilizes automated deployment scripts to handle the installation of encryption methods, ports, and passwords on remote servers. It includes a VPS network optimizer that activates BBR congestion control to reduce latency and increase throughput for high-bandwidth streaming. The software covers remote proxy configuration and client confi

Argosbx is an automated deployment script and multi-protocol proxy manager designed to expose local services to the internet using Cloudflare Argo tunnels. It functions as a tool for installing and configuring network tunneling kernels, including Sing-box and Xray, to create secure proxies and bypass network restrictions without the need for open firewall ports. The project distinguishes itself by providing a proxy subscription generator that creates formatted and password-protected URLs for syncing configurations across client devices. It also manages diverse tunneling protocols, such as VLE

PiVPN is an automated VPN deployer and server manager designed to establish secure gateways for remote network access. It provides a command-line tool for the installation and configuration of WireGuard and OpenVPN servers on Linux systems, with specific optimizations for single-board computers like the Raspberry Pi. The project distinguishes itself through a wrapper-based management interface that abstracts complex server commands into simplified operations. This includes automated handling of firewall rules, port forwarding, and package installation, as well as the ability to export client

ShadowsocksX-NG is a macOS application that functions as a Shadowsocks proxy client to establish encrypted tunnels for bypassing network censorship. It operates as an encrypted tunnel manager that allows for the configuration of secure ciphers and the import of proxy server profiles. The client includes a proxy converter that transforms SOCKS5 traffic into HTTP proxy traffic to provide compatibility for applications that do not support SOCKS. It also integrates a traffic steering system using Proxy Auto-Configuration files to automatically determine which network requests bypass the proxy. T

x-ui-yg is a web-based proxy panel and multi-protocol manager used to deploy and manage network proxy protocols for bypassing internet censorship. It serves as a centralized administrator for secure network tunnels, providing a dashboard to obscure internet traffic and maintain user privacy. The project functions as a proxy subscription server, generating aggregated client subscription links and configuration files locally to remove reliance on third-party conversion tools. It also acts as a CDN proxy orchestrator, allowing the use of CDN domains and encryption to mask server identities and p

wireguard-install is an automated setup tool and guided shell script for deploying and configuring WireGuard VPN servers on various Linux distributions. It functions as a Linux VPN server automator that handles the installation of network tunnel software and the establishment of security configurations on host systems. The project includes a command line interface for managing client access, allowing for the addition and removal of authorized VPN users and the generation of client configurations. It also provides a utility to uninstall the network tunnel and remove all associated system confi

V2ray-core is a modular network proxy engine designed to manage inbound and outbound traffic through a unified, rule-based processing pipeline. It functions as a background service that operates multiple concurrent network protocols within a single process, allowing for flexible traffic management and the independent handling of diverse communication streams. The project distinguishes itself through a highly decoupled architecture that treats network protocols as swappable modules, enabling the encapsulation of various transport layers into a consistent stream-based model. It features a centr

FXMinerProxy is a Stratum mining proxy and hardware management tool that intercepts and routes traffic between cryptocurrency hardware and mining pools. It functions as a middleware system for managing mining farms, allowing for the encryption of miner traffic and the redirection of mining rewards to custom wallets. The project features a specialized fee collection system that deducts development and operator fees using tiered scaling and conversion rate calculations. It also includes a remote administration suite for pushing configuration updates, executing shell commands on connected client

Reinstall is an automated operating system deployer and bare metal provisioning tool designed for virtual private servers and remote hardware. It functions as a remote disk imaging utility and OS management tool, enabling the deployment and reinstallation of Linux and Windows operating systems without requiring physical access to the machine. The project distinguishes itself by automating complex installation hurdles, such as bypassing hardware requirements for RAM, TPM, and SecureBoot. It manages critical low-level tasks including hardware-aware driver injection, raw disk image deployment wi

Firecracker is a virtual machine monitor that leverages hardware-assisted virtualization to create and manage isolated execution environments. It functions as a lightweight runtime designed to launch virtual machines with minimal memory overhead and near-instantaneous startup times, providing the security of traditional hardware virtualization with the efficiency of containerized workloads. The project distinguishes itself through a security-focused architecture that enforces strict process boundaries using system-level barriers and restricted user privileges. It minimizes the attack surface

Security Monkey is a cloud security posture management tool and configuration auditor. It functions as a monitoring platform that tracks cloud assets and records state changes to identify when security policies are altered or insecure configurations are introduced. The system maintains a multi-cloud asset inventory, tracking resources across AWS, GCP, OpenStack, and GitHub organizations. It provides a centralized interface for searching and browsing assets across multiple cloud providers and regions. The platform covers cloud security auditing and infrastructure change tracking by comparing

Pi-hole is a self-hosted network utility that functions as a DNS sinkhole server to provide network-wide ad blocking. By acting as a dedicated network gateway, it intercepts and discards requests for known advertising, tracking, and malicious domains across an entire local network, preventing unwanted content from loading on any connected device. The software operates through a lightweight background daemon that handles high volumes of concurrent DNS queries with minimal resource overhead. It utilizes a host-file injection mechanism to redirect traffic toward its local filtering engine and ap

v2ray-core is a network proxy framework and custom proxy engine designed for censorship circumvention. It functions as a traffic routing platform that directs network data between inbound and outbound connections to access blocked content and services. The system employs a modular architecture using pluggable protocol handlers and a chain-based connection pipeline to transform and forward network traffic. It provides secure tunneling infrastructure to establish encrypted connections and uses a rule-based routing system to direct data between protocols and destinations. The framework includes

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers

This project is a repository of free proxy server configurations and subscription links designed to bypass internet censorship and regional restrictions. It provides curated collections of public server addresses for the Shadowsocks, V2Ray, and Trojan network protocols. The project includes a subscription converter that transforms raw proxy node links into standardized formats compatible with mobile and desktop applications. It specifically provides subscription links for Clash and other VPN clients, utilizing an automated refresh mechanism to maintain high availability of the shared nodes.

ShadowsocksR-Windows is a proxy client for Windows designed to route network traffic through ShadowsocksR proxy servers. It functions as a network proxy that establishes secure tunnels to bypass internet censorship and regional restrictions. The application manages system-wide network routing and provides SOCKS5 proxy client capabilities to hide origin IP addresses. It redirects local traffic through a remote server to maintain internet privacy and circumvent network-level blocks. The project incorporates traffic interception and encapsulation through a user-mode network wrapper and TAP-base

Edgetunnel is a serverless network proxy and VLESS proxy implementation designed to run on Cloudflare Workers. It functions as a VPN proxy that routes network traffic through edge computing platforms to provide an anonymized gateway for outbound internet requests. The project focuses on internet censorship circumvention and the bypass of network restrictions. It utilizes serverless proxy routing to mask original traffic sources and navigate regional filters or firewalls. The system manages traffic through serverless-based proxy tunneling, using WebSocket-based stream forwarding and protocol-

ShadowsocksBio is a documentation site and technical resource dedicated to network proxy guides and censorship circumvention. It serves as a specialized guide for using Shadowsocks to route traffic around internet firewalls and bypass network restrictions. The project provides technical explanations of encrypted proxy protocols and DNS modification methods. It includes an analysis of various proxy clients across mobile and desktop platforms, comparing their features and pricing. The content covers the configuration of Shadowsocks proxy clients across different operating systems and documents

MTProxy is a proxy server that routes traffic to Telegram servers using the MTProto protocol to bypass network restrictions. It functions as a system for managing secure connections and forwarding protocol traffic between clients and destination servers. The project implements traffic obfuscation by adding random padding to packets to mask data patterns and hide proxy usage from internet service providers. It also includes a connection manager that restricts user access through the validation of specific authentication secrets. The system provides operational observability by exposing real-t

This project is a censorship circumvention utility designed to maintain connectivity to restricted online services by evading deep packet inspection. It functions as a network traffic redirection service that manipulates packet headers at the transport layer to bypass regional network filters and censorship systems. The tool distinguishes itself by providing granular control over traffic management, allowing users to define specific lists of domains and IP addresses for targeted interception. By applying custom bypass strategies only to these designated hosts, the utility ensures that the rem

Shadowsocks is a secure network tunneling tool designed for censorship circumvention and private internet connectivity. It functions as a proxy system that routes traffic through encrypted tunnels, allowing users to bypass regional network restrictions and protect data from interception across public infrastructures. The project utilizes a lightweight, custom proxy protocol that incorporates stream-based cipher encryption to obfuscate payload content and prevent deep packet inspection. By employing an asynchronous, event-driven networking model, the system manages concurrent connections effic

Oblivion Desktop is a proxy client desktop application and network privacy tool designed to manage encrypted network tunnels and routing rules. It serves as a proxy protocol manager that encrypts outgoing traffic and rotates IP addresses to hide user identity and location, primarily to bypass internet censorship and regional restrictions. The application provides a graphical interface for configuring multiple tunneling protocols, TUN interfaces, and PAC files to secure device network traffic. It includes capabilities for internet censorship circumvention and privacy proxy management, allowing