GhosTCP is a program for Windows that protects the TCP connections from being interfered.
Run as Client
run tcpioneer.exe to start the program
Run as Service
run install.bat to install the service
How to configure
server=IP:Port #domain in config will use this DNS(DNSoverTCP),if not set it will use the DNS of system
ipv6=true/false #domain below will enable/disable IPv6
subdomain=* #set the depth of domain search, default 2
ttl=* #the fake tcp packet will use this TTL
domain=ip,ip,... #this domain will use these IPs
domain #this domain will be resolved by DNS
ip:port #this ip:port will send fake packet when creating connection
method=* #the methods to modify TCP
methods:
ttl #the fake tcp packets will use the TTL you set
w-md5 #the fake tcp packets will have a wrong md5 option
w-csum #the fake tcp packets will have a wrong checksum
w-ack #the fake tcp packets will have a wrong ACK number
tfo #SYN packet will take a part of data when the server supports TCP Fast Open
df #the true tcp packets will not be fragmented
https #the domain below will be move to https when using http on port 80
How to get the TTL
tracert 8.8.8.8
set the ttl longer than the TTL to the node whose IP address is in your area and shorter than the TTL to the server.
server=IP:Port #Domain in config will use this DNS(DNSoverTCP),if not set it will use the DNS of system
ipv6=true/false #Domain below will enable/disable IPv6
ttl=* #the fake tcp packet will use this TTL
domain=ip,ip,... #this domain will use these IPs
domain #this domain will be resolved by DNS
ip:port #this ip:port will send fake packet when creating connection
method=* #the methods to modify TCP
methods:
ttl #the fake tcp packets will use the TTL you set
w-md5 #the fake tcp packets will have a wrong md5 option
w-csum #the fake tcp packets will have a wrong checksum
w-ack #the fake tcp packets will have a wrong ACK number
tfo #SYN packet will take a part of data when the server supports TCP Fast Open
https #the domain below will be move to https when using http on port 80
How to get the TTL
tracert 8.8.8.8
set the ttl longer than the TTL to the node whose IP address is in your area and shorter than the TTL to the server.
from https://github.com/9o5yzkqz/TCPioneer
-----
TCPioneer-with-modifications
TCPioneer is a program for Windows that protects the TCP
connections from being interfered. This repo is my personal
modification, to not pollute the code of others, I choose to copy the
code to my own repo.
-conf string
Specifying the config (default "default.conf")
-install
Install service
-remove
Remove service
-scanip string
Scan IP Range
-scanspeed int
Scan Speed (default 1)
-scantimeout uint
Scan Timeout
-scanurl string
Scan URL
-start
Start service
-stop
Stop service
How to configure
server=IP:Port #domain in config will use this DNS(DNSoverTCP),if not set it will use the DNS of system
ipv6=true/false #domain below will enable/disable IPv6
subdomain=* #set the depth of domain search, default 2
ttl=* #the fake tcp packet will use this TTL
domain=ip,ip,... #this domain will use these IPs
domain #this domain will be resolved by DNS
ip:port #this ip:port will send fake packet when creating connection
method=* #the methods to modify TCP
methods:
ttl #the fake tcp packets will use the TTL you set
w-md5 #the fake tcp packets will have a wrong md5 option
w-csum #the fake tcp packets will have a wrong checksum
w-ack #the fake tcp packets will have a wrong ACK number
tfo #SYN packet will take a part of data when the server supports TCP Fast Open
df #the true tcp packets will not be fragmented
https #the domain below will be move to https when using http on port 80
How to get the TTL
tracert 8.8.8.8
set the ttl longer than the TTL to the node whose IP address is in your area and shorter than the TTL to the server.
关于中国，文章指出，自1949年中共建政以来，从毛泽东到习近平，洗刷从第一次鸦片战争到1940年代的西方侵袭的所谓耻辱一直是中共政权的重要论述之一。不过，尽管那些不平等条约如今已经不复存在，但1858年俄国沙皇与清王朝签署的条约仍然留下印记，中国因此失去了漠河以东满洲里以及东西伯利亚大片土地和很长的海岸线。中国政府没有公开索要这些土地，但以洗刷历史耻辱的名义，在从克什米尔到西沙、南沙群岛，到钓鱼岛，当然也包括台湾等在内的地方推行一种帝国主义政策。俄、中、土三国都寻求恢复很久以前的边境，而他们索要的地区通常都自然资源十分丰富。越来越多的中国人向往逃离“越来越多的中国人向往出国“，这是《快报》周刊驻京文章的标题。记者Sébastien Le Belzic写道，由于封城防疫措施，由于中国对外封闭，越来越多的中国人寻求出国，但只有少数人能获得护照。上海一家旅行社员工向记者表示，她从没见过有这么多人希望彻底离开中国。她每天接待差不多三十个这样的客户。不过，由于种种限制措施以及高额费用，90%的要求无法实现。文章指出，自2020年3月以来，中国只有2%的国际航班继续运行，但在政府看来，这还是太多了。自上个月起，几乎很难获准出国旅行。一名上海女青年通过加密通讯网络向《快报》周刊记者表示，她已经不再有任何幻想。她在美国读书后，回国在金融领域工作，有一份很好的工资，原想可以充分享用自己的成功，但自3月底起，却突然被关在家里不让出门。她心里很害怕，时常也缺少食物。如今她愿意放弃这一切，希望离这”地狱“越远越好。文章写道，社交媒体微信与微博平台上，搜索“润“ （逃跑）一词的频率一年内增加了440%，根据《日经新闻》的分析，该词条的搜索仅是4月15日这一天就达到7200万。上海这家旅行社员工向记者表示，2018年，中国国家主席习近平修改宪法，取消领导人任期制时，已经出现首波出国潮。2020年3月，武汉封城防疫时，出国申请再次走高。现在则是爆炸性增长。她表示，她从未见过如此多的申请。人们好像真正是很绝望。文章综述指出，2020年以前，每年平均大约有15万中国人出国，前往他国定居，另有大约70万人出国读书。2021年，国家出入境管理局只记录到7400万人进出国门，比疫情前减少79%。 2021年上半年，中国只发放33万5000本护照，尚不足2019年上半年护照发放总数的2%。北京一名退休人员向记者表示，她和丈夫想去波士顿探望女儿，但护照过期，而派出所又拒绝给她新护照。她感觉生活在监狱里。文章总结指出，随着新冠疫情爆发，中国突然对外关上大门。社交平台上关于移民问题的讨论区如今也被关闭。一名上海女青年抱怨说，她的外国朋友都想离开，他们可以离开这所监狱，但中国人不能。无论贫富，也无论在城市，还是在乡村，在中国，没人能躲得过政府。
