Hi Chinna,
We have identified and tested below scenario.
1. Psiphon Application connects to different Anonymous Proxy Servers over the internet.
These proxy servers are connected on different IP Addresses and it is hard to track those IP Addresses.
After connecting to the proxy server Psiphon application sends client request encapsulated inside the POST data with content-type as "application/octet-stream".
So we have created this request type which qualifies for all IP Addresses sending POST data with content-type as "application/octet-stream".
2. Other signature to identify Psiphon Application.
It also sometimes send POST data with FQDN as hostname and useragent as "Go-http-client".
So we have created a request type which sends POST data with content-type as "application/octet-stream" and User Agent as "Go-http-client".
There can be a situation where Psiphon application will connect(CONNECTED), but you will not be able to do any surfing.
Follow the below attached images one after other.
- requestprofile1.png (138.96 KiB) Viewed 1499 times
- profile2.png (163.88 KiB) Viewed 1499 times