Waujito
commented
3 months ago omg I love the title Can you try this patch? Use it with --fake-sni=ttl
diff --git a/youtubeUnblock.c b/youtubeUnblock.c
index 118553b..70b9e86 100644
--- a/youtubeUnblock.c
+++ b/youtubeUnblock.c
@@ -505,7 +505,6 @@ static int process_packet(const struct packet_data packet, struct queue_data qda
goto fallback;
}
-
struct verdict vrd = analyze_tls_data(data, dlen);
verdnlh = nfq_nlmsg_put(buf, NFQNL_MSG_VERDICT, qdata.queue_num);
@@ -532,21 +531,47 @@ static int process_packet(const struct packet_data packet, struct queue_data qda
(struct tcphdr *)tcph, (struct iphdr *)iph);
if (config.fake_sni_strategy != FKSN_STRAT_NONE) {
- uint8_t fake_sni[MNL_SOCKET_BUFFER_SIZE];
- uint32_t fsn_len = MNL_SOCKET_BUFFER_SIZE;
+ uint8_t rfsiph[60];
+ uint8_t rfstcph[60];
- ret = gen_fake_sni(iph, tcph, fake_sni, &fsn_len);
- if (ret < 0) {
- errno = -ret;
- perror("gen_fake_sni");
- goto fallback;
- }
+ memcpy(rfsiph, iph, iph_len);
+ memcpy(rfstcph, tcph, tcph_len);
+
+ struct iphdr *fsiph = (void *)rfsiph;
+ struct tcphdr *fstcph = (void *)rfstcph;
+
+ for (int i = 0; i < 10; i++) {
+ uint8_t fake_sni[MNL_SOCKET_BUFFER_SIZE];
+ uint32_t fsn_len = MNL_SOCKET_BUFFER_SIZE;
+ ret = gen_fake_sni(fsiph, fstcph, fake_sni, &fsn_len);
+ if (ret < 0) {
+ errno = -ret;
+ perror("gen_fake_sni");
+ goto fallback;
+ }
+
+ printf("%d\n", i);
+ ret = send_raw_socket(fake_sni, fsn_len);
+ if (ret < 0) {
+ errno = -ret;
+ perror("send fake sni");
+ goto fallback;
+ }
+
+ uint32_t iph_len;
+ uint32_t tcph_len;
+ uint32_t plen;
+ tcp4_payload_split(fake_sni, fsn_len, &fsiph, &iph_len, &fstcph, &tcph_len, NULL, &plen);
+
+
+ printf("%d\t", ntohl(fstcph->seq));
+ fstcph->seq = htonl(ntohl(tcph->seq) + plen * (i + 1));
+ printf("%d\n", ntohl(fstcph->seq));
+ memcpy(rfsiph, fsiph, iph_len);
+ memcpy(rfstcph, fstcph, tcph_len);
+ fsiph = (void *)rfsiph;
+ fstcph = (void *)rfstcph;
- ret = send_raw_socket(fake_sni, fsn_len);
- if (ret < 0) {
- errno = -ret;
- perror("send fake sni");
- goto fallback;
}
}
irulanCorrino
hi. i tried ver-0-1 and it was totally fine until it has stopped working at 10AM this morning (after i had watched one video).
i had uninstalled it and had installed ver-0.2.1-2 but i have nothing in my terminal output:
it just stops there, but unlike issue #43 i DO HAVE youtube loading video's thumbnail, it just shows rotating 'Loading' wheel on that thumbnail forever.
my command was
alias split437="sudo iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 437 --queue-bypass && sudo youtubeUnblock 437 --sni-domains=googlevideo.com,ggpht.com,ytimg.com,l.google.com,youtube.com,play.google.com"i had changed it to
"sudo iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 437 --queue-bypass && sudo youtubeUnblock 437 --sni-domains=all"--no progress.then i had changed it to
"sudo iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 437 --queue-bypass && sudo youtubeUnblock 437 --sni-domains=all --fake-sni=ttl"--no progress.i had modified my settings in browser: network.http.http{2,3}.enable(d) =>
false(about:config in Firefox) --no progress.then i had added a delay to my command's flags
--seg2delay=400--i still have nothing.i am a beginner programmer, what if i should not redefine
iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 437 --queue-bypasswith each new call after a termination of stalled previous command?system info: Artix [no systemd, i use openRC], zen kernel.
P.S.: my biggest concern is that they may had blocked me manually, i am very active online and all village's locals here know i am a hacker... i had installed wireshark yesterday, [three packages from arch repos --gui, cli and alternative cli]. i can dump&debug packets if you needed, but i had no time yet to learn how to work with gui, so little guidance will be very nice, thanks!