{"action":"created","issue":{"url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/868","repository_url":"https://api.github.com/repos/breakwa11/shadowsocks-rss","labels_url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/868/labels{/name}","comments_url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/868/comments","events_url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/868/events","html_url":"https://github.com/breakwa11/shadowsocks-rss/issues/868","id":245051742,"number":868,"title":"SS被动检测1.0版","user":{"login":"breakwa11","id":8436963,"avatar_url":"https://avatars0.githubusercontent.com/u/8436963?v=4","gravatar_id":"","url":"https://api.github.com/users/breakwa11","html_url":"https://github.com/breakwa11","followers_url":"https://api.github.com/users/breakwa11/followers","following_url":"https://api.github.com/users/breakwa11/following{/other_user}","gists_url":"https://api.github.com/users/breakwa11/gists{/gist_id}","starred_url":"https://api.github.com/users/breakwa11/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/breakwa11/subscriptions","organizations_url":"https://api.github.com/users/breakwa11/orgs","repos_url":"https://api.github.com/users/breakwa11/repos","events_url":"https://api.github.com/users/breakwa11/events{/privacy}","received_events_url":"https://api.github.com/users/breakwa11/received_events","type":"User","site_admin":false},"labels":[{"id":261006440,"url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/labels/discussion","name":"discussion","color":"009800","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":22,"created_at":"2017-07-24T11:33:58Z","updated_at":"2017-07-24T13:00:33Z","closed_at":null,"body":"程序介绍：\r\n这个程序是一个运行在Windows下的socks5代理，通过设置被检测程序的代理服务器来模拟通过路由器进行被动检测。\r\n本程序基于.NET Framework 4.0运行\r\n被动检测即仅仅根据所通过的流量来做判断，不会对连接本身产生任何影响，不会修改数据包\r\n使用本程序如果你不信任，或者觉得它可能通过进程名作弊，建议使用独立的虚拟机运行\r\n本程序为了防被恶意利用，采用了一个精度不太高的检测办法，同时程序进行了代码混淆压缩，且不开源\r\n支持检测流加密ss或使用AEAD加密ss，非ss流量不管，但不表示非ss流量不能检测。另外，**SS的obfs对于本程序不会有任何效果**\r\n\r\n测试目标：\r\n检测通过SS访问youtube/google/twitter/facebook的加密流量，浏览器限定为chrome或firefox，如果你通过SS访问以上网站，则能较快地检测出来\r\n收录特征不含IE或edge部分，懒得弄，只是为了做个演示，要做的话正好可以把你用什么浏览器也识别出来。\r\n\r\n测试方法：\r\n例如ss-windows设置socks5代理服务器为127.0.0.1:1081，此程序监听的端口为1081，或者使用proxifier让被检测的程序强制走socks5代理。\r\n然后通过代理访问被检测目标网站，经过一定量的连接后程序便会输出检测结果\r\n你可以通过不同的代理软件测试，例如使用https代理或v2ray等等，测试程序会不会作出错误的判断\r\n你也可以开启负载均衡，看看程序能识别出来多少个\r\n\r\n测试结果：\r\n程序会按照流量动态判断，程序会显示判断结果及其结果的可信度，流量越多结果越精确\r\n欢迎反馈测试结果\r\n\r\n其它问题：\r\n程序可能会有BUG，因为我自己的测试不一定充分。而发现了BUG不一定会去更新这个程序，除非有足够的人认为这不能说明SS能被识别，那么可能考虑逐步提升识别精度。有种情况例如有的人自己仿照SS写了一个自己的工具，协议近似但不兼容（同样使用流加密），但同样被识别为SS的情况，那么事实上他的工具本质上和SS并没有区别，没有重复写的必要。\r\n\r\n程序下载地址：\r\nhttp://www.mediafire.com/file/5w4i93a58a2rc99/socks5.7z\r\n\r\n程序验证：\r\n压缩包 14,267 字节\r\nEXE长度 34,304 字节\r\nCRC32: F119B86F\r\nMD5: 829592950A5F880AEF6B8F17944B0CFC\r\nSHA-1: 3F8407883D7B16E3092DDF6BCB01401D7BF1F149\r\nSHA-256: 3B56DC460590829808E15FBEEE3A415EA453502B1AFFF7F2D17D3881BA8F1D97\r\n\r\n下载后请务必验证解压缩后的EXE文件的hash"},"comment":{"url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/comments/317414974","html_url":"https://github.com/breakwa11/shadowsocks-rss/issues/868#issuecomment-317414974","issue_url":"https://api.github.com/repos/breakwa11/shadowsocks-rss/issues/868","id":317414974,"user":{"login":"XinoAssassin","id":5835976,"avatar_url":"https://avatars3.githubusercontent.com/u/5835976?v=4","gravatar_id":"","url":"https://api.github.com/users/XinoAssassin","html_url":"https://github.com/XinoAssassin","followers_url":"https://api.github.com/users/XinoAssassin/followers","following_url":"https://api.github.com/users/XinoAssassin/following{/other_user}","gists_url":"https://api.github.com/users/XinoAssassin/gists{/gist_id}","starred_url":"https://api.github.com/users/XinoAssassin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/XinoAssassin/subscriptions","organizations_url":"https://api.github.com/users/XinoAssassin/orgs","repos_url":"https://api.github.com/users/XinoAssassin/repos","events_url":"https://api.github.com/users/XinoAssassin/events{/privacy}","received_events_url":"https://api.github.com/users/XinoAssassin/received_events","type":"User","site_admin":false},"created_at":"2017-07-24T13:00:33Z","updated_at":"2017-07-24T13:00:33Z","body":"给您提个醒，混淆没啥用。"}}
{"actor":{"display_login":"XinoAssassin"}}