chisel

Wireguard or OpenVPN might work, if someone has a server set up, set up your client to connect. If those don't work you can try something like wssocks (https://github.com/genshen/wssocks) or wstunnel (https://github.com/erebe/wstunnel). It tunnels connections through WebSockets, so you can make the connection look like a regular HTTPS connection. Another option would just be a regular-old HTTPS proxy (Nginx, Apache2, etc). Set up an HTTPS proxy somewhere on the internet, connect through it, but configure it to return a regular web page if someone tries to make a non-proxy connection through it. Another tool that may help setting up is chisel (https://github.com/jpillora/chisel). Those HTTPS ones may work if, when authorities connect to the host, it returns pages that look like some kind of private video server. (Maybe run an actual video

chisel is a similar tool in this space https://github.com/jpillora/chisel I don’t get why headers and requests need to be spoofed if all traffic is over https?

chisel offers the same thing, although I'm not sure if they use websocket : https://github.com/jpillora/chisel

Personally I use https://github.com/jpillora/chisel as a reverse Proxy through nginx, then connect through it using OpenVPN to bypass a similarly restrictive firewall. But this discussion is filled with other, similar hacks, I may have to try some of them.

I love it in the context of hacking actually. When working on HackTheBox machines or other CTFs you sometimes need to deploy tools onto the machine like these: https://github.com/jpillora/chisel https://github.com/DominicBreuker/pspy When you deploy them they just work. Compare that to compiled C++ code you often face issues with the deployment in my experience. And production machines usually do not ship compilers.

related: chisel [1] does TCP over HTTP [1] https://github.com/jpillora/chisel

Wireguard docs are useful: https://www.wireguard.com/netns/ If you want to RUN a VPN, master iptables and enterprise networking: https://www.amazon.com/Linux-Firewalls-3rd-Steve-Suehring/dp... . If you want to WRITE a VPN, read the source of a few openly available relatively simple VPN/tunnel implementations. https://github.com/yarrick/iodine https://github.com/jpillora/chisel Familiarise yourself with packet layers. Fantastic resource: https://github.com/netspooky/protocols/tree/main/broadcast_b...

Chisel https://github.com/jpillora/chisel

I use chisel for dancing across firewalls and across Big Corp's (TM) network policies. Chisel is fantastic. It wraps an SSH tunnel for proxying TCP (or reverse proxying) in HTTP, which I expose over TLS. https://github.com/jpillora/chisel

I came across Chisel today -- it supports TCP traffic and isn't limited to 3 tunnels like Serveo https://github.com/jpillora/chisel