traffic-obfuscation

Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.

Self-hosted, censorship-resistant VPN with REALITY / anti-DPI obfuscation and post-quantum (X25519 + ML-KEM-768) crypto. Rust core + native Android/Windows/macOS clients. Works on networks with active DPI (Iran, China, Russia).

ditto: WAN Traffic Obfuscation at Line Rate (source code belonging to the NDSS 2022 paper)

Self-hosted AmneziaWG manager for AWG 1.0, 1.5, 2.0, and 3.1, with Web UI, Docker, WARP, backups, and diagnostics.

Phantom-WG is a modular tool for setting up and managing WireGuard VPN infrastructure on your own server. Beyond basic VPN management, it provides censorship-resistant connections, multi-layer encryption, and advanced privacy scenarios.

Look like the web. Move like the web.

Analysis of Secure Communication Protocols in Adversarial Environments

Fake corporate website generator and realistic traffic imitator for proxy camouflage

High-performance DPI bypass and network traffic obfuscation tool in Rust.

English Description LSSD is an infiltration logic designed specifically to bypass modern AI-driven firewalls and Deep Packet Inspection (DPI). Its core philosophy shifts away from high-intensity single-vector attacks toward a "low-frequency, high-dispersion" fragmentation strategy. Segmentation: The core attack payload is decomposed into microscop

ETP/1 是一个面向 Go net.Conn 有序可靠字节流的流量混淆层。它先认证加密每条 记录，再使用受 Enigma 机启发的插线板、三个转子和反射器改变密文表示，最后映射为 可打印 ASCII 流，并可插入无需协商位置的填充字符。

High-performance SOCKS5 proxy server and Go SDK with encrypted TCP/UDP and traffic obfuscation.

The network protocol that knows you're watching

⚡ Hawal (هه‌واڵ) — Modern, Zero-Dependency Tunnel Management Panel & Lightning-Fast Multiplexing Core for Censorship Circumvention

Censorship-Resistant Transport Standard: testable requirements + an append-only threat registry for protocols that must survive active censorship

Implementation of synergistic feature selection, traffic obfuscation, and hierarchical darknet traffic classification.

XOR каждого байта трафика на клиенте и на сервере. Простейший обфускатор для обхода DPI. Поддерживает UDP, TCP, IPv4, IPv6.

Swiss Army Netcat — single static Rust binary replacing nc, ncat, socat, and pwncat. Encrypted channels (TLS/Noise), auto-PTY shells, file transfer with SHA256 verification, SOCKS5 pivoting, port relay, TCP scanning, traffic obfuscation, and process masquerade.

[Data Source] ----> [QI-Shield Core Engine] | /---------+---------\ | | [Real Connection B] <---Hidden---> [Spoofed Connection A (Decoy)] | | (Secure Tunnel) (Hacker's Labyrinth)

Integrated network security testing platform: 10 modules, dashboard, WebSocket terminal. 59 tests.