94 lines
2.5 KiB
Markdown
94 lines
2.5 KiB
Markdown
# 【M22项目】VPN特征提取-刘宏宇
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OSS-383 | 2024-09-23T16:21:15.000+0800 | 刘宏宇 | 处理中 |
|
||
|
||
|
||
---
|
||
|
||
1、VPN信息表：[https://docs.geedge.net/display/TSGEN/M22-VPN+List]
|
||
|
||
2、序号：223、 225、 226、 227、 228、 230、 233、 234、 236
|
||
|
||
3、分析过程、结果同步到：[https://docs.geedge.net/pages/viewpage.action?pageId=129101971]**liuhongyu** commented on *2024-10-23T09:20:41.832+0800*:
|
||
|
||
第一轮分析使用fiddler解析共发现6个VPN有API，通过获取serverlist提取serverip完成特征提取，经验证，特征可阻断VPN连接。
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-10-24T16:14:23.978+0800*:
|
||
|
||
第二轮分析通过apk逆向解析发现VeilDuckVPN有API，可通过fidder获取serverIP
|
||
|
||
计划特征提取方式：
|
||
||总表序号||VPN Name||特征提取方式||
|
||
|{color:#172b4d}223{color}|{color:#172b4d}Vava VPN{color}|编写自动化脚本提取|
|
||
|{color:#172b4d}225{color}|{color:#172b4d}Veilduck{color}|通过API获取serverlist|
|
||
|{color:#172b4d}226{color}|{color:#172b4d}VPN 3000{color}|编写自动化脚本提取|
|
||
|{color:#172b4d}227{color}|{color:#172b4d}VPN Brazil{color}|通过API获取serverlist|
|
||
|{color:#172b4d}228{color}|{color:#172b4d}VPN Canada{color}|通过API获取serverlist|
|
||
|{color:#172b4d}230{color}|{color:#172b4d}VPN Germany{color}|通过API获取serverlist|
|
||
|{color:#172b4d}233{color}|{color:#172b4d}VPN India{color}|通过API获取serverlist|
|
||
|{color:#172b4d}234{color}|{color:#172b4d}VPN Indonesia{color}|通过API获取serverlist|
|
||
|236|VPN Korea|通过API获取serverlist|
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-10-29T15:07:19.027+0800*:
|
||
|
||
总表序号225、227、228、230、233、234、236共七个VPN特征提取已完成，经验证可完全封堵。
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-11-01T10:34:52.579+0800*:
|
||
|
||
总表序号223，Vava VPN自动化脚本提取累计1856个serverIP
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-11-01T17:11:46.030+0800*:
|
||
|
||
总表序号226，VPN 3000wireshark抓包分析提取IP57个
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-11-14T09:36:08.704+0800*:
|
||
|
||
总表序号223，Vava VPN自动化脚本提取serverIP累计1994个,已完成封堵
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-11-18T18:19:37.877+0800*:
|
||
|
||
总表序号223，Vava VPN复测穿透，自动化脚本提取serverIP累计2540个
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuhongyu** commented on *2024-11-20T09:42:26.628+0800*:
|
||
|
||
总表序号223，Vava VPN自动化脚本提取serverIP累计3022个
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
## Attachments
|
||
|