设为首页收藏本站

安而遇随-随遇而安

 找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
安而遇随-随遇而安 首页 其他 转载 查看内容

Wear GFW

2022-2-25 15:00| 发布者: 随便、先森。| 查看: 16017| 评论: 0|原作者: MMP|来自: 运维笔记

摘要: 必须python3.6.xCentos7.x 安装(环境)yum install -y python3 python3-devel gcc gcc-c++ git libnetfilter* libffi-devel git clone https://github.com/Kkevsterrr/geneva.git cd geneva/ python3 -m pip install ...

必须
python3.6.x

Centos7.x 安装(环境)

yum install -y python3 python3-devel gcc gcc-c++ git libnetfilter* libffi-devel
git clone https://github.com/Kkevsterrr/geneva.git
cd geneva/
python3 -m pip install -r requirements.txt


Debian10.x 安装(环境)

git clone https://github.com/Kkevsterrr/geneva.git
cd geneva/
apt-get install build-essential python-dev libnetfilter-queue-dev libffi-dev libssl-dev iptables python3-pip
python3 -m pip install -r requirements.txt


四节分流法

nohup python3 engine.py --server-port 80 --strategy "[TCP:flags:SA]-tamper{TCP:window:replace:0}-|" --log debug --server-side >/dev/null 2>&1 &
nohup python3 engine.py --server-port 80 --strategy "[TCP:flags:A]-tamper{TCP:window:replace:0}-|" --log debug --in-queue-num 3 --out-queue-num 4 --server-side >/dev/null 2>&1 &
nohup python3 engine.py --server-port 80 --strategy "[TCP:flags:PA]-tamper{TCP:window:replace:0}-|" --log debug --in-queue-num 5 --out-queue-num 6 --server-side >/dev/null 2>&1 &
nohup python3 engine.py --server-port 80 --strategy "[TCP:flags:FA]-tamper{TCP:window:replace:0}-|" --log debug --in-queue-num 7 --out-queue-num 8 --server-side >/dev/null 2>&1 &

全部启动后(大概 5秒)

iptables -F

iptables -A OUTPUT -p tcp --sport 80 --tcp-flags SYN,RST,ACK,FIN,PSH SYN,ACK -j NFQUEUE --queue-num 2
iptables -A OUTPUT -p tcp --sport 80 --tcp-flags SYN,RST,ACK,FIN,PSH ACK -j NFQUEUE --queue-num 4
iptables -A OUTPUT -p tcp --sport 80 --tcp-flags SYN,RST,ACK,FIN,PSH PSH,ACK -j NFQUEUE --queue-num 6
iptables -A OUTPUT -p tcp --sport 80 --tcp-flags SYN,RST,ACK,FIN,PSH FIN,ACK -j NFQUEUE --queue-num 8


启动80端口

nohup python3 xxx.py >/dev/null 2>&1 &

代码如下

# coding: utf8

import socketserver
import socket

class TCPHandler(socketserver.BaseRequestHandler):

    # 重写handle方法
    def handle(self):
        while True:
            try:
                data = {
                    "Http_Status": "HTTP/1.1 301 ok",
                    "Content-Type": "text/html; charset=utf-8",
                    "Location": "https://baidu.com/",
                    # "Html": 'JS跳转html代码', # 如果需要,注销上行"Location",下面 self.data 修改为注释行
                }
                self.data = bytes("{0}\r\nContent-Type: {1}\r\nLocation: {2}\r\n".format( \
                    data['Http_Status'],data['Content-Type'],data['Location']), 'ascii')
                
                #self.data = bytes("{0}\r\nContent-Type: {1}\r\n\r\n{2}".format( \
                #    data['Http_Status'],data['Content-Type'], data['Html']), 'ascii')
                
                # self.server.allow_reuse_address = True
                self.server.request_queue_size = 1024
                self.server.socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
                self.server.socket.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
                self.request.sendall(self.data)
                

                break

            except ConnectionResetError as e:
                print(self.client_address, e)
                break

if __name__ == '__main__':

    HOST, PORT = '0.0.0.0', 80
    with socketserver.ThreadingTCPServer((HOST, PORT), TCPHandler) as server:
        server.serve_forever()
    

不同域名跳转不同地址

可能你有多个域名,但是跳转不一样? 

可能你需要跳转后的路径、参数不变? 

看这里,统统解决!!!

# coding: utf8

import socketserver
import socket

class TCPHandler(socketserver.BaseRequestHandler):

    # 重写handle方法
    def handle(self):
        while True:
            try:
                data = {
                    "Http_Status": "HTTP/1.1 200 ok",
                    "Content-Type": "text/html; charset=utf-8",
                    # "Location": "https://baidu.com/",
                    "Html": '''<html>
<head></head>
<body>
	<a href="" id="hao123"></a>
	<script type="text/javascript">
		var arr = {
			'1.xxx.com': 'https://baidu.com',
			'2.xxx.com': 'http://qq.com',
		}
		var strU = arr[window.location.hostname]+window.location.pathname+window.location.search;
		    hao123.href=strU;
		if(document.all){
			document.getElementById("hao123").click();
		}else {
			var e=document.createEvent("MouseEvents");
			e.initEvent("click",true,true);
			document.getElementById("hao123").dispatchEvent(e);
		}
	</script>
</body>
</html>''', # 如果需要,注销上行"Location",下面 self.data 修改为注释行
                }
                # self.data = bytes("{0}\r\nContent-Type: {1}\r\nLocation: {2}\r\n".format( \
                #     data['Http_Status'],data['Content-Type'],data['Location']), 'ascii')
                
                self.data = bytes("{0}\r\nContent-Type: {1}\r\n\r\n{2}".format( \
                   data['Http_Status'],data['Content-Type'], data['Html']), 'ascii')
                
                # self.server.allow_reuse_address = True
                self.server.request_queue_size = 1024
                self.server.socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
                self.server.socket.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
                self.request.sendall(self.data)
                

                break

            except ConnectionResetError as e:
                print(self.client_address, e)
                break

if __name__ == '__main__':

    HOST, PORT = '0.0.0.0', 80
    with socketserver.ThreadingTCPServer((HOST, PORT), TCPHandler) as server:
        server.serve_forever()


参考: https://github.com/kkevsterrr/geneva
参考: https://2047.name/t/16483    
参考: https://gfw.report/blog/gfw_esni_blocking/zh/
参考: https://github.com/lehui99/articles/blob/main/301%E6%B5%B7%E5%A4%96%E8%B7%B3%E8%BD%AC%E5%8E%9F%E7%90%86%E8%A7%A3%E6%9E%90%E5%85%BC%E8%B0%88%E7%BC%93%E8%A7%A3%E5%81%87%E5%A2%99%E4%BC%AA%E5%A2%99%E6%94%BB%E5%87%BB%E5%8B%92%E7%B4%A2%E7%9A%84%E5%A4%9A%E7%A7%8D%E6%8A%80%E6%9C%AF%E6%89%8B%E6%AE%B5%EF%BC%88%E4%BA%8C%EF%BC%89.md
电报群: https://t.me/davidtechtalk 

鲜花

握手

雷人

路过

鸡蛋

最新评论

返回顶部