Awesome anti-censorship

A curated list of open source tools and readings for fighting Internet censorship.

Inspired by the awesome list.

Categories

• Privacy and anonymity
• Network tunnels
• Firewall analysis
• Decentralized systems
• Steganography
• Deniable encryption
• Misc
• Related awesome lists
• Articles and research papers

Privacy and anonymity

• tor - The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection
• i2p - I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.
• vuvuzela - Vuvuzela is a messaging system that protects the privacy of message contents and message metadata. Users communicating through Vuvuzela do not reveal who they are talking to, even in the presence of powerful nation-state adversaries.
• whonix - Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP.

Network tunnels

• shadowsocks - a fast socks5 proxy that encrypts traffic
• v2ray - A platform for building proxies to bypass network restrictions
• obfsproxy - Tor framework for implementing pluggable transports (anti-censorship network tunnels)
• obfsproxy with OpenVPN - OpenVPN traffic obfuscation using obfsproxy
• flashproxy - miniature proxy that runs in a web browser, and reflects traffic to a Tor relay.
• meek - Tor pluggable transport that uses HTTP for carrying bytes and TLS for obfuscation.
• lantern - Lantern is a free desktop application that delivers fast, reliable and secure access to the open Internet for users in censored regions
• algo - Set up a personal VPN in the cloud
• MTProxy - Proxy server which helps telegram users who are inside censored areas still be able to connect to telegram
• streisand - single command set for a server running a wide variety of anti-censorship software
• WireGuard - WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
• tunsafe - TunSafe is a fast and modern layer 3 VPN tunnel that implements the new and modern WireGuard protocol that is becoming increasingly popular in the VPN community due to its security, speed, reliability and ease of use. TunSafe was developed with the goal to bring the power of the WireGuard-protocol to all the Windows users around the world and in March 2018 the first version was released.
• scramblesuit - Tor pluggable transport that uses look-like-nothing traffic as a cover channel
• FTE - fteproxy provides transport-layer protection to resist keyword filtering, censorship and discriminatory routing policies
• telex - involves placing anticensorship technology into the Internet's core network infrastructure, through cooperation from large ISPs.
• uproxy - uProxy is a browser extension that lets friends route their connection to their Internet through each other's computers. It can help people with restricted or insecure access to the Internet get to the content they care about safely.
• NaïveProxy - NaïveProxy uses Chrome's network stack to camouflage traffic with stronger censorship resistence and less detectablility than custom-made network stacks (Shadowsocks and variants, V2Ray suite, handmade Golang stacks).
• gost - GO Simple Tunnel - a simple tunnel written in golang
• obfs4 - the newest version of the Tor obfsproxy obfuscation proxy. implements multiple pluggable transports.
• trojan - An unidentifiable mechanism that helps you bypass GFW
• govpn - Simple secure VPN daemon, aimed to be reviewable, secure, DPI/censorship-resistant.
• gohop - A VPN implemention in golang, with crypto and obfuscation in nature.
• Dust - A Polymorphic Engine for Filtering-Resistant Transport Protocols
• marionette - Marionette is a programmable client-server proxy that enables the user to control network traffic features with a lightweight domain-specific language.
• facebook-tunnel Tunneling Internet traffic over FB chat.
• chnroutes- modifies the route table to route only censored ips through vpn
• firefly-proxy - A proxy software to help circumventing the Great Firewall.
• iodine - This is a piece of software that lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed.
• obfuscated-openssh - Handshake obfuscation strengthens the initial SSH handshake against systems that identify or classify various network protocols by examining data in transit for static signatures.
• infranet - Infranet is a system that attempts to circumvent web censorship by allowing clients to surreptitiously request sensitive content via cooperating Web servers distributed across the global Internet.
• fwlite - A powerful HTTP proxy server designed to circumvent the Great Firewall (GFW)
• code-talker-tunnel - Code Talker Tunnel (previously called SkypeMorph) is a protocol camouflaging tool, designed to reshape traffic output of any censorship circumvention tool to look like Skype video calls
• stegotorus - StegoTorus, a tool that comprehensively disguises Tor from protocol analysis. To foil analysis of packet contents, Tor’s traffic is steganographed to resemble an innocuous cover protocol, such as HTTP.
• go-packetflagon - A local HTTP application that serves customised Proxy Auto Configuration files for your browser to help bypass Internet censorship.
• Firezone - Self-hosted VPN server using WireGuard. Supports MFA, SSO, and has easy deployment options.

Decentralized systems

• ipfs - IPFS is a global, versioned, peer-to-peer filesystem (awesome list)
• dat - a decentralized tool for distributing data (awesome list)
• ZeroNet - Decentralized websites using Bitcoin crypto and the BitTorrent network
• sovereign - Censorship resistant democracies.
• tribler - Privacy enhanced BitTorrent client with P2P content discovery
• AKASHA - next-generation social media network immune to censorship by design. It is built on top of Ethereum using Smart Contracts and IPFS
• twister - twister is an experimental peer-to-peer microblogging software.
• freenet - Freenet is a peer-to-peer platform for censorship-resistant communication.

Firewall analysis

• ooni-probe - OONI Probe network measurement tool for detecting internet censorship https://ooni.io
• mongol - A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
• ChinaDNS - Protect yourself against DNS poisoning in China.
• gfwlist/gfwlist - Great Firewall of China ban list
• gfw_whitelist - A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
• antizapret - List of Russian government's IP addresses.
• BlockCheck - A script that detects what kind of blocking (DNS, IP, DPI) your ISP is using (for Russia).
• GoodbyeDPI - Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
• DPITunnel - DPI Tunnel is an application for Android that uses various techniques to bypass DPI (Deep Packet Inspection) systems, which are used to block some sites.
• Geneva (Genetic Evasion) - Novel experimental genetic algorithm that evolves packet-manipulation-based censorship evasion strategies against nation-state level censors.

Steganography

• DissidentX - DissidentX is encoding messages in files on the web.
• Real Steganography with TrueCrypt (applies to VeraCrypt as well) - hiding containers inside MP4 video files.
• PixelKnot - image steganography for Android.

Misc

• cachebrowser - CacheBrowser is a system designed to help Internet users bypass Internet censorship. The core idea ofCacheBrowser is to grab censored content cached byContent Delivery Networks such asAkamai andCloudFlare directly from their CDN edge servers, therefore, foiling censors' DNS interference.
• rubberhose - Julian Assange's deniable-encryption filesystem.
• OnionShare - tool that lets you securely and anonymously share a file of any size (over TOR).

Related awesome lists

• awesome-vpn A curated list of awesome free VPNs and proxies.
• awesome-privacy Limiting personal data leaks on the internet
• personal-security-checklist A curated list of links and tips, to protect privacy and improve security

Articles and research papers

• Analyzing China's Blocking of Unpublished Tor Bridges
• Learning more about the GFW's active probing system
• A closer look at the Great Firewall of China - Tor Blog
• How the Great Firewall of China is Blocking Tor
• Towards a Censorship Analyser for Tor
• stegotorus
• Format-Transforming Encryption
• ScrambleSuit
• My Experience With the Great Firewall of China - Infosec
• Selected Research Papers in Internet Censorship
• Course info - ECEN 5003: Censorship Circumvention