Page 1 of 1

Restrict Psiphon3 Application through Safesquid

Posted: Tue Aug 27, 2019 7:56 am
by chinna
Hello,
Where you ever successful at stopping psiphon3 from tunneling through safesquid?

Re: Restrict Psiphon3 Application through Safesquid

Posted: Wed Aug 28, 2019 12:13 pm
by umashankar
Hi Chinna,

We have identified and tested below scenario.
1. Psiphon Application connects to different Anonymous Proxy Servers over the internet.
These proxy servers are connected on different IP Addresses and it is hard to track those IP Addresses.
After connecting to the proxy server Psiphon application sends client request encapsulated inside the POST data with content-type as "application/octet-stream".
So we have created this request type which qualifies for all IP Addresses sending POST data with content-type as "application/octet-stream".

2. Other signature to identify Psiphon Application.
It also sometimes send POST data with FQDN as hostname and useragent as "Go-http-client".
So we have created a request type which sends POST data with content-type as "application/octet-stream" and User Agent as "Go-http-client".

There can be a situation where Psiphon application will connect(CONNECTED), but you will not be able to do any surfing.
Follow the below attached images one after other.
requestprofile1.png
requestprofile1.png (138.96 KiB) Viewed 1410 times
profile2.png
profile2.png (163.88 KiB) Viewed 1410 times