net4people / bbs

Forum for discussing Internet censorship circumvention
3.2k stars 75 forks source link

Trojan-killer: Detect TLS in TLS. #250

Open RPRX opened 1 year ago

RPRX commented 1 year ago

https://github.com/XTLS/Trojan-killer

期待反馈。

Looking forward to feedback.

SekiBetu commented 1 year ago

image

TLS-in-TLS 检测现状 可恶 不愧是德军 竟然能识破我是男扮女装

Current state of TLS-in-TLS detection Damn it, the Germans were able to detect that I was a man dressed as a woman.

ghost commented 1 year ago

Is it able to detect other types of TLS-in-TLS outside Trojan?

diwenx commented 1 year ago

Is it able to detect other types of TLS-in-TLS outside Trojan?

From what I understand, this test should be agnostic to the proxy protocol in use as long as 1) the inner TLS handshake immediately follows the outer TLS handshake (no websocket handshakes in between layers); and 2) the inner TLS is using TLS 1.3. So it should also work against vmess/ss-over-TLS.