BO
bob12vpn/vpn-hater
It detects VPN's packets and disconnect the connection of VPN with packet injection. This project started from BoB(Best of the Best) 12th program.
๐ก๏ธ VPN-Hater
๐ VPN-Hater is an innovative, open-source solution aimed at enhancing network security by blocking VPN connections. Distinguished from traditional inline methods, VPN-Hater is both reliable and cost-effective, ensuring uninterrupted network performance even in high-traffic scenarios.
Environment
- Linux
๐ Key Features
- ๐ก Out-of-Path Method: Guarantees uninterrupted network performance.
- ๐ Packet Injection: Expertly blocks VPNs by injecting termination packets.
- ๐ Supports Multiple Protocols: Compatible with PPTP, L2TP, TCP Based VPN(OpenVPN TCP), and non-encrypted OpenVPN UDP.
- ๐๏ธ High Traffic Handling: Maintains consistent speed under heavy load.
- ๐ธ Cost-Effective Solution: Minimizes equipment replacement costs.
๐ ๏ธ Usage Guide
๐ Setting Up
-
Network Environment Setup: Configure your network for port mirroring.
1) Using TAP device to mirror packets
2) Using Internet Router with port mirroring function
3) Using Switch with port mirroring function
-
Installation:
$ git clone https://github.com/bob12vpn/vpn-hater.git $ sudo apt install build-essential $ sudo apt install libpcap-dev $ make -j
add
-joption for compile faster -
Execution:
- command
$ sudo ./vpn-hater <mirror interface> <send interface> [sni list txt]
- example
$ sudo ./vpn-hater eth0 wlan0 sni.txt
๐ก How It Works
- PPTP & L2TP: Strategy involves injecting termination request packets.
- OpenVPN UDP (Non-Encrypted): Employs explicit-exit-notify packet injection.
- OpenVPN TCP: Utilizes parsed signature & injects FIN/RST packets.
- TCP-Based VPNs: Enhanced blocking via signature parsing.
๐ฌ Support
๐ค For assistance, contact us at: do901328@gmail.com
