A curated list of open source tools and readings for fighting Internet censorship.
Inspired by the awesome list.
- Privacy and anonymity
- Network tunnels
- Firewall analysis
- Decentralized systems
- Steganography
- Deniable encryption
- Misc
- Articles and research papers
- tor - The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection
- i2p - I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.
- vuvuzela - Vuvuzela is a messaging system that protects the privacy of message contents and message metadata. Users communicating through Vuvuzela do not reveal who they are talking to, even in the presence of powerful nation-state adversaries.
- whonix - Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP.
- obfsproxy - Tor framework for implementing pluggable transports (anti-censorship network tunnels)
- obfsproxy with OpenVPN - OpenVPN traffic obfuscation using obfsproxy
- flashproxy - miniature proxy that runs in a web browser, and reflects traffic to a Tor relay.
- meek - Tor pluggable transport that uses HTTP for carrying bytes and TLS for obfuscation.
- lantern - Lantern is a free desktop application that delivers fast, reliable and secure access to the open Internet for users in censored regions
- scramblesuit - Tor pluggable transport that uses look-like-nothing traffic as a cover channel
- FTE - fteproxy provides transport-layer protection to resist keyword filtering, censorship and discriminatory routing policies
- telex - involves placing anticensorship technology into the Internet's core network infrastructure, through cooperation from large ISPs.
- uproxy - uProxy is a browser extension that lets friends route their connection to their Internet through each other's computers. It can help people with restricted or insecure access to the Internet get to the content they care about safely.
- shadowsocks - a fast socks5 proxy that encrypts traffic
- streisand - single command set for a server running a wide variety of anti-censorship software
- WireGuard - WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
- obfs4 - the newest version of the Tor obfsproxy obfuscation proxy. implements multiple pluggable transports.
- bit-smuggler - tunnel traffic through a bittorrent connection.
- govpn - Simple secure VPN daemon, aimed to be reviewable, secure, DPI/censorship-resistant.
- gohop - A VPN implemention in golang, with crypto and obfuscation in nature.
- Dust - A Polymorphic Engine for Filtering-Resistant Transport Protocols
- marionette - Marionette is a programmable client-server proxy that enables the user to control network traffic features with a lightweight domain-specific language.
- facebook-tunnel Tunneling Internet traffic over FB chat.
- chnroutes- modifies the route table to route only censored ips through vpn
- firefly-proxy - A proxy software to help circumventing the Great Firewall.
- iodine - This is a piece of software that lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed.
- obfuscated-openssh - Handshake obfuscation strengthens the initial SSH handshake against systems that identify or classify various network protocols by examining data in transit for static signatures.
- infranet - Infranet is a system that attempts to circumvent web censorship by allowing clients to surreptitiously request sensitive content via cooperating Web servers distributed across the global Internet.
- goagent - code is missing now.
- fwlite - A powerful HTTP proxy server designed to circumvent the Great Firewall (GFW)
- code-talker-tunnel - Code Talker Tunnel (previously called SkypeMorph) is a protocol camouflaging tool, designed to reshape traffic output of any censorship circumvention tool to look like Skype video calls
- stegotorus - StegoTorus, a tool that comprehensively disguises Tor from protocol analysis. To foil analysis of packet contents, Tor’s traffic is steganographed to resemble an innocuous cover protocol, such as HTTP.
- go-packetflagon - A local HTTP application that serves customised Proxy Auto Configuration files for your browser to help bypass Internet censorship.
- ipfs - IPFS is a global, versioned, peer-to-peer filesystem (awesome list)
- dat - a decentralized tool for distributing data (awesome list)
- ZeroNet - Decentralized websites using Bitcoin crypto and the BitTorrent network
- tribler - Privacy enhanced BitTorrent client with P2P content discovery
- AKASHA - next-generation social media network immune to censorship by design. It is built on top of Ethereum using Smart Contracts and IPFS
- twister - twister is an experimental peer-to-peer microblogging software.
- freenet - Freenet is a peer-to-peer platform for censorship-resistant communication.
- mongol - A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
- ChinaDNS - Protect yourself against DNS poisoning in China.
- https://github.com/gfwlist/gfwlist - Great Firewall of China ban list
- gfw_whitelist - A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
- antizapret - List of Russian government's IP addresses.
- BlockCheck - A script that detects what kind of blocking (DNS, IP, DPI) your ISP is using (for Russia).
- GoodbyeDPI - Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
- DissidentX - DissidentX is encoding messages in files on the web.
- Real Steganography with TrueCrypt (applies to VeraCrypt as well) - hiding containers inside MP4 video files.
- PixelKnot - image steganography for Android.
- cachebrowser - CacheBrowser is a system designed to help Internet users bypass Internet censorship. The core idea ofCacheBrowser is to grab censored content cached byContent Delivery Networks such asAkamai andCloudFlare directly from their CDN edge servers, therefore, foiling censors' DNS interference.
- rubberhose - Julian Assange's deniable-encryption filesystem.
- Learning more about the GFW's active probing system
- A closer look at the Great Firewall of China - Tor Blog
- How the Great Firewall of China is Blocking Tor
- Towards a Censorship Analyser for Tor
- stegotorus
- Format-Transforming Encryption
- ScrambleSuit
- My Experience With the Great Firewall of China - Infosec