Skip to content

Commit 5852927

Browse files
authored
remove full packet prefixes (#199)
remove existing full packet prefixes entirely preventing hard-coded fields from being included long-term
1 parent 4891368 commit 5852927

File tree

2 files changed

+2
-32
lines changed

2 files changed

+2
-32
lines changed

pkg/transports/wrapping/prefix/long_prefixes.go

Lines changed: 0 additions & 17 deletions
This file was deleted.

pkg/transports/wrapping/prefix/prefix.go

Lines changed: 2 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -84,9 +84,7 @@ const (
8484
TLSAlertFatal
8585
DNSOverTCP
8686
OpenSSH2
87-
TLSCompleteCHNoSNI
88-
TLSCompleteCHSNI
89-
HTTPGetComplete
87+
9088
// GetShortBase64
9189
)
9290

@@ -132,12 +130,7 @@ func (id PrefixID) Name() string {
132130
return "DNSOverTCP"
133131
case OpenSSH2:
134132
return "OpenSSH2"
135-
case TLSCompleteCHNoSNI:
136-
return "TLSFullCHNoSNI"
137-
case TLSCompleteCHSNI:
138-
return "TLSFullCH"
139-
case HTTPGetComplete:
140-
return "HTTPFull"
133+
141134
// case GetShort:
142135
// return "GetShort"
143136
default:
@@ -168,12 +161,6 @@ var defaultPrefixes = map[PrefixID]prefix{
168161
DNSOverTCP: {[]byte("\x05\xDC\x5F\xE0\x01\x20"), 6, 6 + minTagLength, 6 + minTagLength, randomizeDstPortMinVersion, 53, false},
169162
// SSH-2.0-OpenSSH_8.9p1
170163
OpenSSH2: {[]byte("SSH-2.0-OpenSSH_8.9p1"), 21, 21 + minTagLength, 21 + minTagLength, randomizeDstPortMinVersion, 22, false},
171-
// TLS 1.3 ClientHello complete without an SNI. Flushes after Prefix
172-
TLSCompleteCHNoSNI: {tlsCompleteCHNoSNI, len(tlsCompleteCHNoSNI), len(tlsCompleteCHNoSNI) + minTagLength, len(tlsCompleteCHNoSNI) + minTagLength, randomizeDstPortMinVersion, 443, true},
173-
// TLS 1.3 ClientHello complete with an SNI. Flushes after Prefix
174-
TLSCompleteCHSNI: {tlsCompleteCHSNI, len(tlsCompleteCHSNI), len(tlsCompleteCHSNI) + minTagLength, len(tlsCompleteCHSNI) + minTagLength, randomizeDstPortMinVersion, 443, true},
175-
// HTTP Get complete packet. Flushes after the prefix before the tag.
176-
HTTPGetComplete: {httpGetComplete, len(httpGetComplete), len(httpGetComplete) + minTagLength, len(httpGetComplete) + minTagLength, randomizeDstPortMinVersion, 80, true},
177164

178165
// // HTTP GET base64 in url min tag length 88 because 64 bytes base64 encoded should be length 88
179166
// GetShort: {base64TagDecode, []byte("GET /"), 5, 5 + 88, 5 + 88, randomizeDstPortMinVersion},

0 commit comments

Comments
 (0)