traffic-obfuscation

One-command AmneziaWG 2.0 / 3.x installer for a self-hosted VPN server on Ubuntu and Debian: DPI bypass, traffic obfuscation, split tunneling, auto-hardening, client management. Includes a VPN cascade guide.

Self-hosted, censorship-resistant VPN with REALITY / anti-DPI obfuscation and post-quantum (X25519 + ML-KEM-768) crypto. Rust core + native Android/Windows/macOS clients. Works on networks with active DPI (Iran, China, Russia).

ditto: WAN Traffic Obfuscation at Line Rate (source code belonging to the NDSS 2022 paper)

Self-hosted AmneziaWG manager for AWG 1.0, 1.5, 2.0, and 3.x, with Web UI, Docker, WARP, backups, and diagnostics.

Phantom-WG is a modular tool for setting up and managing WireGuard VPN infrastructure on your own server. Beyond basic VPN management, it provides censorship-resistant connections, multi-layer encryption, and advanced privacy scenarios.

Analysis of Secure Communication Protocols in Adversarial Environments

Look like the web. Move like the web.

Fake corporate website generator and realistic traffic imitator for proxy camouflage

ETP/1 是一个面向 Go net.Conn 有序可靠字节流的流量混淆层。它先认证加密每条 记录，再使用受 Enigma 机启发的插线板、三个转子和反射器改变密文表示，最后映射为 可打印 ASCII 流，并可插入无需协商位置的填充字符。

English Description LSSD is an infiltration logic designed specifically to bypass modern AI-driven firewalls and Deep Packet Inspection (DPI). Its core philosophy shifts away from high-intensity single-vector attacks toward a "low-frequency, high-dispersion" fragmentation strategy. Segmentation: The core attack payload is decomposed into microscop

The network protocol that knows you're watching

Censorship-Resistant Transport Standard: testable requirements + an append-only threat registry for protocols that must survive active censorship

[Data Source] ----> [QI-Shield Core Engine] | /---------+---------\ | | [Real Connection B] <---Hidden---> [Spoofed Connection A (Decoy)] | | (Secure Tunnel) (Hacker's Labyrinth)

XOR каждого байта трафика на клиенте и на сервере. Простейший обфускатор для обхода DPI. Поддерживает UDP, TCP, IPv4, IPv6.

Implementation of synergistic feature selection, traffic obfuscation, and hierarchical darknet traffic classification.

Go library for UDP traffic obfuscation. AEAD encryption, TCP framing, replay protection. Designed for VPS, OpenWrt routers, and censorship bypass.

Experimental hybrid post-quantum VPN in Rust — ML-KEM-768 + X25519 key agreement, hybrid Ed25519 + ML-DSA-65 (FIPS 204) auth, QUIC-style obfuscated data path. UNAUDITED: for learning & reference, not for protecting real traffic.

Technical analysis of infrastructure-level DPI censorship