shadowsocks | Redirect attack on Shadowsocks stream ciphers | Proxy library

 by   edwardz246003 Python Version: Current License: No License

kandi X-RAY | shadowsocks Summary

kandi X-RAY | shadowsocks Summary

shadowsocks is a Python library typically used in Networking, Proxy applications. shadowsocks has no bugs, it has no vulnerabilities and it has low support. However shadowsocks build file is not available. You can download it from GitHub.

Shadowsocks is a secure split proxy loosely based on SOCKS5. It’s widely used in china. I found a vulnerability in shadowsocks protocol which break the confidentiality of shadowsocks stream cipher. A passive attacker can easily decrypt all the encrypted shadowsocks packet using our redirect attack. Even more, a man-in-the-middle attacker can modify traffic in real time like there is no encryption at all. Details of the attack can be found in the pdf. And a POC can be found in the python code.
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              shadowsocks has a low active ecosystem.
              It has 359 star(s) with 70 fork(s). There are 13 watchers for this library.
              OutlinedDot
              It had no major release in the last 6 months.
              There are 3 open issues and 0 have been closed. On average issues are closed in 214 days. There are 1 open pull requests and 0 closed requests.
              It has a neutral sentiment in the developer community.
              The latest version of shadowsocks is current.

            kandi-Quality Quality

              shadowsocks has 0 bugs and 3 code smells.

            kandi-Security Security

              shadowsocks has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
              shadowsocks code analysis shows 0 unresolved vulnerabilities.
              There are 1 security hotspots that need review.

            kandi-License License

              shadowsocks does not have a standard license declared.
              Check the repository for any license declaration and review the terms closely.
              OutlinedDot
              Without a license, all rights are reserved, and you cannot use the library in your applications.

            kandi-Reuse Reuse

              shadowsocks releases are not available. You will need to build from source code and install.
              shadowsocks has no build file. You will be need to create the build yourself to build the component from source.
              shadowsocks saves you 27 person hours of effort in developing the same functionality from scratch.
              It has 73 lines of code, 4 functions and 2 files.
              It has low code complexity. Code complexity directly impacts maintainability of the code.

            Top functions reviewed by kandi - BETA

            kandi has reviewed shadowsocks and discovered the below as its top functions. This is intended to give you an instant insight into shadowsocks implemented functionality, and help decide if they suit your requirements.
            • XOR of two strings
            • Convert a character back into a string .
            Get all kandi verified functions for this library.

            shadowsocks Key Features

            No Key Features are available at this moment for shadowsocks.

            shadowsocks Examples and Code Snippets

            No Code Snippets are available at this moment for shadowsocks.

            Community Discussions

            QUESTION

            How open-ssh can connect through SOCKS5 proxy on windows (Putty is not an option)?
            Asked 2021-May-03 at 14:36

            What I want

            ...

            ANSWER

            Answered 2021-May-03 at 14:36

            I answer my question:

            Since putty is working well : use Putty to forward 22 port through SOCKS5

            A) proxy :

            • SOCKS 5
            • hostname : 127.0.0.1
            • port:1080

            B ) forward port L22 127.0.0.1:22

            C) ssh to 127.0.0.1:22 ssh -l "username" 127.0.0.1

            You can this way use Remote Visual Studio Code through shadowsocks proxy...

            Source https://stackoverflow.com/questions/67320844

            QUESTION

            Web-scraping with PowerShell Issue: My code won't pull in the needed information. Why?
            Asked 2021-Feb-01 at 10:04

            Web-scraping with PowerShell Issue: My code won't pull in the needed information. Why?

            My code up to this point will pull the correct information. the info it shows is:

            ...

            ANSWER

            Answered 2021-Feb-01 at 02:06

            QUESTION

            what is the de facto build command for a -dev package?
            Asked 2020-Sep-24 at 08:58

            I'm working with https://github.com/shadowsocks/shadowsocks-libev

            Found there's *-dev lib under ubnutu apt-get

            ...

            ANSWER

            Answered 2020-Sep-24 at 08:58

            It's not like there is any very specific guidance for -dev packages in general. The person who created the package created a debian/rules and its supporting infrastructure which builds two or more packages from the upstream package source, and decided to put some of those files in the -dev package so that people who only need the binary can install only the binary, and people who want more can install both packages.

            Typically, the non-dev package installs the library file, and the -dev package contains C header files and/or similar resources for someone who wants to compile code which uses this library.

            The Github project for this package contains the definitions in https://github.com/shadowsocks/shadowsocks-libev/tree/master/debian -- in particular, libshadowsocks-libev-dev.install installs the .so (probably a symlink) while libshadowsocks-libev2.install (the non-dev package) installs usr/lib/*/libshadowsocks-libev.so.* (i.e. the actual binary).

            The README.md contains rather detailed instructions for building from source on Debian-based platforms.

            Source https://stackoverflow.com/questions/64038928

            QUESTION

            How to add comments to .env file?
            Asked 2020-Mar-20 at 09:25

            I am using dotenv module to load environment variables from .env file.

            .env:

            ...

            ANSWER

            Answered 2019-Nov-11 at 09:33

            It is possible as of mid-2019.

            Start the line with # symbol. See the docs:

            lines beginning with # are treated as comments.

            For vlucas/phpdotenv the same situation.

            Source https://stackoverflow.com/questions/54358871

            QUESTION

            How to automatically execute shell script at startup boot on systemd Ubuntu 18.04
            Asked 2020-Feb-07 at 16:00

            I want setup shadowsocks antumatically start at startup on ubuntu 18.04

            See this.

            My shell is shadowsocks.sh

            ...

            ANSWER

            Answered 2018-Jun-05 at 13:38

            delete -d in shell script

            everything is ok

            Source https://stackoverflow.com/questions/50695843

            QUESTION

            Git clone works with https but not SSH when using Proxy
            Asked 2019-Dec-18 at 09:50

            In my area, download speed is too slow when git clone. So I use Shadowsocks as my proxy on Macbook Mojave, but shadowsocks can't supply proxy for terminal directly, therefore I use Proxifier as transition. The terminal is iTerm2. They are all the background.

            When using proxy, the git clone with ssh can't work and the error is

            ...

            ANSWER

            Answered 2019-Dec-18 at 09:50

            You would need to:

            That is:

            Source https://stackoverflow.com/questions/59384945

            QUESTION

            Unable to start an imported image file
            Asked 2019-Dec-11 at 04:40

            I am new to docker and i am using docker-ce-19.03.4-3.el7.x86_64 on centos7.

            On my machine A:

            • I started a new container:
            ...

            ANSWER

            Answered 2019-Dec-11 at 04:40

            So, the problem you're having is that export does not REALLY capture a container (it just makes a tarball of the filesystem)- note that your new image has no entrypoint or command. That's what that error means- your container has no entrypoint specified, so it is interpreting -s 0.0.0.0 -p 12345 -k welcome -m aes-256-cfb。 as the entrypoint (and -s is not a valid command).

            But... don't do this. Not sure what you're trying to accomplish, but its fighting the way the stuff works. If you need to modify a container, use a Dockerfile, build an image.

            EDIT

            To elaborate a bit- exporting a container (what you're doing) is a bad idea. Images, however are meant to be used this way. docker image save and docker image import are probably what you want- turn an image into a tarball, and then back into an image, with all the image metadata that was set up in the dockerfile preserved.

            If you REALLY need to run a container and then move it, you can do docker commit to create a new image from a running container, followed by the save/import mentioned above.

            Source https://stackoverflow.com/questions/59259656

            QUESTION

            shadowsocks can not open https://scholar.google.com
            Asked 2019-Nov-24 at 13:17

            shadowsocks can not open https://scholar.google.com page show error: Google Sorry…

            We’re sorry…

            …but your computer or network may be sending automated queries. To protect our users, we can’t process your request right now. See Google Help for more information.

            the solution is: edit the VPS setting, vim /etc/hosts , under the vpi6, add below

            ...

            ANSWER

            Answered 2018-Nov-09 at 03:05

            the solution is: edit the VPS setting, vim /etc/hosts , under the vpi6, add below

            Source https://stackoverflow.com/questions/53219268

            QUESTION

            Jupyter notebook refuse to work with nginx
            Asked 2019-Nov-13 at 08:09

            I use nginx to proxy jupyter.mysite.com to localhost:8888

            If i enter mysite.com:8888, the kernel works well! But if i enter jupyter.mysite.com, jupyter notebook will not find a kernel!

            Ing1. Kernel error

            Here is something about the configuration.

            ...

            ANSWER

            Answered 2019-Nov-13 at 08:09

            Finally I found the solution!!! Because jupyter need the nginx to have websocket, so it will not work if you are using a general backproxy.

            Source https://stackoverflow.com/questions/58702973

            QUESTION

            How to prevent gradle from using proxy in IntelliJ IDEA?
            Asked 2019-Jul-26 at 07:41

            IntelliJ IDEA preference setting No proxy, let me repeat No proxy, but sync gradle, I found gradle still took proxy setting, No kidding.

            ...

            ANSWER

            Answered 2019-Jul-26 at 07:41

            When you add proxy in the intellij IDEA it automatically adds the proxy in gradle.properties but when you remove it from settings it's still there. open gradle.properties and remove the proxy.

            It should be something like this:

            Source https://stackoverflow.com/questions/57208034

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install shadowsocks

            You can download it from GitHub.
            You can use shadowsocks like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            CLONE
          • HTTPS

            https://github.com/edwardz246003/shadowsocks.git

          • CLI

            gh repo clone edwardz246003/shadowsocks

          • sshUrl

            git@github.com:edwardz246003/shadowsocks.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link

            Explore Related Topics

            Consider Popular Proxy Libraries

            frp

            by fatedier

            shadowsocks-windows

            by shadowsocks

            v2ray-core

            by v2ray

            caddy

            by caddyserver

            XX-Net

            by XX-net

            Try Top Libraries by edwardz246003

            IIS_exploit

            by edwardz246003Python

            MB-UOV-attack

            by edwardz246003Python

            MB-UOV

            by edwardz246003Python

            DAA_simulator

            by edwardz246003Python