Category Archives: Security

Unhelpful IP Helper: A Handle Leak Story

By | August 13, 2025

After my post about a CancelIoEx bug, I decided to cover another defect in Windows system components—this time in IP Helper (the part of the Windows API responsible for network statistics and connection tables). Among other things, this API lets you map packets intercepted at the network level to local processes. You’d think it’s a battle-tested mechanism running… Read More »

A Rare CancelIoEx Hang in Go on Windows

By | August 10, 2025

I don’t consider myself a Go expert and have only occasionally used this language, but I’d like to share a story about a bug at the intersection of Go and the Windows kernel that I was “lucky” enough to encounter. This bug is still present (GitHub issue #64482), although there’s reason to hope it will be fixed in… Read More »

ProxiFyre v2.0: Deferred Context Resolution and System-Wide SOCKS5 Tunneling

By | July 20, 2025

In recent months, I’ve continued to encounter cases where traditional VPN connections are becoming less reliable or outright blocked. For users who rely on remote access to home infrastructure or private networks, especially from regions with increasing traffic inspection or censorship, this creates a tangible threat to continuity. My own setup — a home server behind a WireGuard… Read More »

Bypass Censorship & DPI with WireSock Secure Connect on Windows

By | April 16, 2025

In a sense, this article is a continuation of a series of materials about implementing a WireGuard client based on Cloudflare BoringTun and a custom packet filter for Windows. This approach differs from the conventional method used in most VPN clients, which typically rely on a virtual network interface. Instead, WireGuard integration here occurs entirely in userspace, with… Read More »

Bypassing Egypt’s WireGuard Ban: An Update

By | May 18, 2024

In our earlier post, we discussed bypassing Egypt’s WireGuard VPN ban by routing handshake packets through a SOCKS5 proxy. However, recent developments indicate this method is no longer sufficient. Together with Shady Nagy, we’ve researched and tested a new approach. In the preliminary WireSock VPN Client v1.2.41, a new parameter, Socks5ProxyAllTraffic, has been added. When set to true… Read More »

From Basics to Mastery: Implementing SSH VPN Tunneling on Windows with ProxiFyre

By | June 3, 2023

In conditions of constantly increasing state control over the internet, manifested, among other things, in the blocking of VPN protocols, the problem of developing alternative methods of connection is becoming increasingly relevant. This issue is not only theoretical but also quite practical. Having moved from Russia about a year ago, I continue to actively use the home infrastructure… Read More »

Setting Up WireGuard on Oracle Cloud: Overcoming NAT and Routing Challenges

By | April 29, 2023

WireGuard® is an open-source VPN solution that is known for its simplicity, speed, and security. While setting up a WireGuard instance on most cloud providers is relatively straightforward, Oracle Cloud Infrastructure presents some unique challenges. This blog post will help you navigate those challenges and guide you through configuring a WireGuard instance on Oracle Cloud. We’ll discuss a… Read More »

Securing Remote Desktop with SSH

By | March 29, 2020

Covid-19 led to a globe-wide work-from-home experiment, and it is logical to expect the growing number of users accessing their computers remotely using Remote Desktop. Having an RDP port open to the Internet is generally considered insecure, and most of the security experts advise using VPN or/and two-factor authentication to improve the security. Here we will review an… Read More »