erebe / wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
BSD 3-Clause "New" or "Revised" License
4.19k stars 363 forks source link

Customize the TLS handshake #62

Closed c1b3rd0rk closed 3 years ago

c1b3rd0rk commented 3 years ago

Some environments will raise an alert if your connection does not look like it is coming from the average client. I did not test wstunnel yet but I guess the TLS handshake will stick out. Would it be possible to customize the handshake in order to prevent fingerprinting? Related: https://engineering.salesforce.com/tls-fingerprinting-with-ja3-and-ja3s-247362855967

erebe commented 3 years ago

done in pre-release 3.1 https://github.com/erebe/wstunnel/releases/tag/v3.1