GitHunt
BO

bob12vpn/vpn-hater

It detects VPN's packets and disconnect the connection of VPN with packet injection. This project started from BoB(Best of the Best) 12th program.

๐Ÿ›ก๏ธ VPN-Hater

๐ŸŒ VPN-Hater is an innovative, open-source solution aimed at enhancing network security by blocking VPN connections. Distinguished from traditional inline methods, VPN-Hater is both reliable and cost-effective, ensuring uninterrupted network performance even in high-traffic scenarios.


Environment

  • Linux

๐Ÿš€ Key Features

  • ๐Ÿ’ก Out-of-Path Method: Guarantees uninterrupted network performance.
  • ๐Ÿ”’ Packet Injection: Expertly blocks VPNs by injecting termination packets.
  • ๐Ÿ”„ Supports Multiple Protocols: Compatible with PPTP, L2TP, TCP Based VPN(OpenVPN TCP), and non-encrypted OpenVPN UDP.
  • ๐ŸŽ๏ธ High Traffic Handling: Maintains consistent speed under heavy load.
  • ๐Ÿ’ธ Cost-Effective Solution: Minimizes equipment replacement costs.

๐Ÿ› ๏ธ Usage Guide

๐ŸŒŸ Setting Up

  1. Network Environment Setup: Configure your network for port mirroring.

    1) Using TAP device to mirror packets

    2) Using Internet Router with port mirroring function

    3) Using Switch with port mirroring function

  2. Installation:

    $ git clone https://github.com/bob12vpn/vpn-hater.git
    $ sudo apt install build-essential
    $ sudo apt install libpcap-dev
    $ make -j

    add -j option for compile faster

  3. Execution:

    • command
    $ sudo ./vpn-hater <mirror interface> <send interface> [sni list txt]
    • example
    $ sudo ./vpn-hater eth0 wlan0 sni.txt

๐Ÿ“ก How It Works

  • PPTP & L2TP: Strategy involves injecting termination request packets.
  • OpenVPN UDP (Non-Encrypted): Employs explicit-exit-notify packet injection.
  • OpenVPN TCP: Utilizes parsed signature & injects FIN/RST packets.
  • TCP-Based VPNs: Enhanced blocking via signature parsing.

๐Ÿ“ฌ Support

๐Ÿค For assistance, contact us at: do901328@gmail.com


๐Ÿ“ธ Example Usage

image