I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some other protocol. I would control the client and the server machines and could communicate securely as I'd be in OpenVPN but the packets would be disguised as legit HTTP traffic hiding the extra OpenVPN traffic in there.
I understand there would be issues with integrity of the packets if someone knew this was happening and that security through obscurity isn't best practise.
My questions are really to ask what your thoughts are on the implementation. How would you go about this?
I believe that it would work something like:
- Force NIC through iptables or static route through my own virtual interface.
- Sniff my interface and modify so that packets can be changed and the relevant other traffic (voip, SSL) etc be added in the traffic of HTTP, then pump through eth0 to the internet.
- When it reaches the destination server, it does the opposite to decrypt the traffic.
- Process the traffic through the server and report back.
I've found stunnel and obfsproxy so far but I don't believe that's the same concept.
This is very much an idea in progress. Can you please advise of your thoughts? Any feedback welcome.
Thanks, truex0r