In 2021, the WireGuard VPN protocol became so popular in Egypt that it was honored to be included in the block list, indescribably “delighting” not only customers of Cloudflare Warp+, Mullvad Wireguard and other commercial VPN providers, but also some corporate VPN users. Preliminary research has shown that DPI targets WireGuard Handshake Initiate packets that have a fixed… Read More »
Here is a guide on how to create a personal Always Free SOCKS5 anonymous proxy supporting UDP ASSOCIATE (RFC1928) in Oracle Cloud. I created this memo for myself while setting up SOCKS5 proxy to experiment with forwarding WireGuard handshake packets over SOCKS5. But after some thought, I decided to share it with the community. My choice was Dante,… Read More »
In early 2019, Cloudflare introduced BoringTun, an implementation of the WireGuard protocol written in Rust. The project code is distributed under the BSD-3-Clause license and consists of two main parts: The executable boringtun, an userspace WireGuard implementation for Linux and macOS. The library boringtun that can be used to implement fast and efficient WireGuard client apps on various platforms, including iOS and… Read More »
This tutorial goes through the process of setting up a VPN chain using WireGuard on Windows. There are a plenty of tutorials on the Internet devoted to “chaining” VPN servers, however most of them are Linux-based and require certain technical skill. In the previous post we already learned how to set up WireGuard VPN Server on Windows and… Read More »
I suspect that I’m not the only one who runs a small and quiet system with Microsoft Windows at home 24/7 and which can be accessed remotely via RDP (using laptop, tablet or even smartphone) and somewhat worried about the number of none authorized attempts to connect. Over the year ago I have published this post devoted to… Read More »
Covid-19 led to a globe-wide work-from-home experiment, and it is logical to expect the growing number of users accessing their computers remotely using Remote Desktop. Having an RDP port open to the Internet is generally considered insecure, and most of the security experts advise using VPN or/and two-factor authentication to improve the security. Here we will review an… Read More »
One of our customers has recently reported that WinpkFilter installation has failed with error code 0x800700b7. This was the first report mentioning such error code, and we have spent some time to research the issue at a customer side. Such behavior seems to be worth mentioning in a dedicated post. 0x800700b7 error code can be decoded as ERROR_ALREADY_EXISTS.… Read More »
Why do I need to bridge or a couple of real life cases when you may need an alternative to built-in Windows network bridge? Over ten years have passed since I have published the first version of Ethernet Bridge. The main purpose of this simple tool, inspired by Steve Gibson from Gibson Research Corporation, was supporting OpenVPN in… Read More »
Recently, I have had a small but curious research project with the requirement to decrypt ProtectedHomepages binary value stored under [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected – It is a violation of Windows Policy to modify. See aka.ms/browserpolicy]. While googling around the problem, I have seen a related question on Stack Overflow, so I decided that it may have sense to share… Read More »
There is a very popular and important question about Windows Packet Filter: “Can I handle Gigabit traffic in WinpkFilter user-mode application without noticeable performance degradation?”. I was asked rather frequently and usually, my answer starts with “that depends…” followed up by various performance related considerations and ends with a sentence “if you need maximum possible performance then consider… Read More »