One-command install script for self-hosted AmneziaWG 2.0 VPN — Ubuntu & Debian, DPI bypass, traffic obfuscation, auto-hardening, client management

ditto: WAN Traffic Obfuscation at Line Rate (source code belonging to the NDSS 2022 paper)

👻 Phantom-WG is a modular tool for setting up and managing WireGuard VPN infrastructure on your own server. Beyond basic VPN management, it provides censorship-resistant connections, multi-layer encryption, and advanced privacy scenarios.

Analysis of modern network protocols designed to maintain data integrity and availability in adversarial environments.

Protocol-level traffic obfuscation engine — pluggable transports for DPI evasion, traffic analysis resistance, and network security research

XOR каждого байта трафика на клиенте и на сервере. Простейший обфускатор для обхода DPI. Поддерживает UDP, TCP, IPv4, IPv6.

Swiss Army Netcat — single static Rust binary replacing nc, ncat, socat, and pwncat. Encrypted channels (TLS/Noise), auto-PTY shells, file transfer with SHA256 verification, SOCKS5 pivoting, port relay, TCP scanning, traffic obfuscation, and process masquerade.

ShadowLink is a specialized, local-only VPN tunnel designed for maximum privacy. It wraps your traffic in AES-256-GCM encryption with ephemeral keys before it even hits your network card, creating a powerful "double-encryption" layer over your existing VPN. Features a strict kill-switch, system-wide proxy routing, and a modern cyber-aesthetic GUI.

Go library for UDP traffic obfuscation. AEAD encryption, TCP framing, replay protection. Designed for VPS, OpenWrt routers, and censorship bypass.