Internet-viewer

IP	ASN	Country	Region	City	Organization
2.56.10.36	213373	Netherlands			IP Connect Inc
2.58.56.35	210558	Netherlands	Flevoland	Lelystad	1337 Services GmbH
2.58.56.43	210558	Netherlands	Flevoland	Lelystad	1337 Services GmbH
2.58.56.46	210558	Netherlands	Flevoland	Lelystad	1337 Services GmbH
2.58.56.93	210558	Netherlands	Flevoland	Lelystad	1337 Services GmbH
2.58.56.220	210558	Netherlands	Flevoland	Lelystad	1337 Services GmbH
5.2.67.226	60404	Netherlands			The Infrastructure Group B.V.
5.2.72.110	60404	Netherlands			The Infrastructure Group B.V.
5.2.79.179	60404	Netherlands			The Infrastructure Group B.V.

This Version Allow run as `nobody` AND ports below 1024

/etc/systemd/system/frps.service

Systems that has `AmbientCapabilities` support (usually kernel >= linux4.3)

[Unit]
Description=FRP Server Daemon

The netfilter hooks in the kernel and where they hook in the packet flow

The figure below calls out

The netfilter hooks
The order of table traversal

The following files show an example of how to create subdomains for onion site hidden services. (This hasn't been tested for hidden services for anything other than HTTP/HTTPS.)

(You might also want to read our blog post about ProPublica’s Tor hidden service, including a tutorial and notes on running a hidden service: https://www.propublica.org/nerds/item/a-more-secure-and-anonymous-propublica-using-tor-hidden-services )

In general, this works (maybe just in recent Tor clients) because Tor will handle the connection to www.xxxxxxxxxxxxxxxx.onion as a connection to xxxxxxxxxxxxxxxx.onion. The encapsulated HTTP/HTTPS connection contains the subdomain in the Host: header (and in the case of HTTPS, the SNI

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

	# sudo apt-get install obfs4proxy obfsproxy tor

	# sudo vi /etc/tor/torrc

	UseBridges 1
	ClientTransportPlugin obfs3 exec /usr/bin/obfsproxy managed
	ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed

	# send email to bridges@torproject.org with body `get transport obfs4` you can get new bridges.
	bridge obfs4 195.154.49.15:44705 BACD07DACE996093DC7635F33A98C49... cert=xc/wtKNWADfJQf232xSXT0WpzsaINw6fgPvZBy5Rkw4.../ypaZPDug9L... iat-mode=0

	#!/bin/bash

	# needs openssl 1.1+
	# needs `basez` https://manpages.debian.org/testing/basez/base32hex.1.en.html
	# (but something else that decodes the base64 and re-encodes the raw key bytes
	# to base32 is probably fine too)

	##### generate a key

	openssl genpkey -algorithm x25519 -out /tmp/k1.prv.pem

	@echo off
	@reg copy HKLM\HARDWARE\ACPI\DSDT\VBOX__ HKLM\HARDWARE\ACPI\DSDT\NOBOX__ /s /f
	@reg delete HKLM\HARDWARE\ACPI\DSDT\VBOX__ /f
	@reg add HKLM\HARDWARE\DESCRIPTION\System /v SystemBiosVersion /t REG_MULTI_SZ /d "NOBOX - 1" /f
	@reg add HKLM\HARDWARE\DESCRIPTION\System /v VideoBiosVersion /t REG_MULTI_SZ /d "NOBOX - 1" /f
	@taskkill /f /im VBoxTray.exe
	@exit