简介 ================== INTANG 是一个研究项目,旨在避开来自中国防火墙 (GFW) 的 "TCP 重置攻击"。
简介 ================== INTANG 是一个研究项目,旨在避开来自中国防火墙 (GFW) 的 "TCP 重置攻击"。
INTANG is a research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices. INTANG runs as a client-side only tool in background to protect the TCP connections from being interfered (or even monitored) by the GFW. It works on TCP/IP layers instead of application layer, thus considered more general and can help all application layer protocols to evade censorship, e.g. HTTP, DNS over TCP, OpenVPN, Tor. It can also be run on a proxy to make the deployment easier for those who are incapable of running INTANG (using OSes other than Linux or doesn't have root privillige).
Linux (must has netfilter supported in kernel)
Tested with Ubuntu 12.04/14.04/16.04.
sudo apt-get update
sudo apt-get install libnetfilter-queue-dev libnfnetlink-dev redis-server libhiredis-dev libev-dev python-redis python-scapy
or
./install_deps.sh
make
And the binary will be located under bin folder.
run.sh to start the daemon. Logs are by default written to /var/log/intangd.log. If you want to test a specific strategy, use run.sh <strategy ID>. Strategy IDs can be checked with run.sh -h.stop.sh to stop the daemon. It simply send SIGINT signal to the daemon.The daemon needs root privilege to run. If you are using Virtual Machine, you'll need to configure the networks in Bridge Mode.
…
INTANG is a research-oriented project. Anyone using it should be aware of the potential risks and responsible for his/her own actions against the censorship authority.
During internal review, we discovered multiple remotely triggerable vulnerabilities. Some of these issues may lead to serious consequences, including potential remote code execution under certain conditions. While we are making efforts to address and patch some of these problems, the system as a whole should still be considered insecure for any real-world use.
Please use this software strictly for research and educational purposes in controlled environments only.
Any questions could be direct to [email protected]
Zhongjie Wang, Yue Cao, Zhiyun Qian, Chengyu Song, and Srikanth V. Krishnamurthy. 2017. Your State is Not Mine: A Closer Look at Evading Stateful Internet Censorship. In Proceedings of IMC ’17. ACM, New York,NY, USA, 14 pages. https://doi.org/10.1145/3131365.3131374
Please see FAQ page.
暂无开放 Issues，或尚未同步最近议题。