chore: replace em dashes with ASCII hyphens.
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
2
.github/workflows/debug.yml
vendored
2
.github/workflows/debug.yml
vendored
@@ -94,7 +94,7 @@ jobs:
|
||||
run: |
|
||||
if [ ! -z "${{ secrets.BOT_TOKEN }}" ]; then
|
||||
export VERSION=$(cat module.prop | grep 'version=' | awk -F '=' '{print $2}')
|
||||
export COMMIT=$(git log --oneline -n 5 --no-decorate | sed 's/^[0-9a-f]* //' | sed 's/^/— /')
|
||||
export COMMIT=$(git log --oneline -n 5 --no-decorate | sed 's/^[0-9a-f]* //' | sed 's/^/- /')
|
||||
FILE=$(find . -name "*.zip")
|
||||
pip3 install telethon==1.31.1
|
||||
python3 $GITHUB_WORKSPACE/.github/taamarinbot.py "$FILE"
|
||||
|
||||
2
.github/workflows/release.yml
vendored
2
.github/workflows/release.yml
vendored
@@ -104,5 +104,5 @@ jobs:
|
||||
[ -z "$FILE" ] && echo "No ZIP file found!" && exit 1
|
||||
|
||||
export VERSION=$(git rev-parse --short HEAD)
|
||||
export COMMIT=$(git log --oneline -n 10 --no-decorate | sed 's/^[0-9a-f]* //' | sed 's/^/— /')
|
||||
export COMMIT=$(git log --oneline -n 10 --no-decorate | sed 's/^[0-9a-f]* //' | sed 's/^/- /')
|
||||
python3 .github/taamarinbot.py "$FILE"
|
||||
@@ -1,4 +1,4 @@
|
||||
# PronBox — v1.13.0
|
||||
# PronBox - v1.13.0
|
||||
|
||||
Разработано в стенах **НИИ «ТехноПрон»**. Magisk `id` остаётся `box_for_root`.
|
||||
|
||||
@@ -10,11 +10,11 @@
|
||||
- `box.stealth`: собирает TT/olcrtc/wgobfs порты; IPv6 UDP → `icmp6-port-unreachable`
|
||||
|
||||
## wg-obfuscator
|
||||
- Реальные peer endpoints больше не пишутся в JSON (sing-box ломался) — state-файл `wgobfs-real-peers.txt`
|
||||
- Реальные peer endpoints больше не пишутся в JSON (sing-box ломался) - state-файл `wgobfs-real-peers.txt`
|
||||
|
||||
## Notes
|
||||
- После установки банка/Госуслуг: `box.stealth renew`
|
||||
- Root/Magisk native — по-прежнему Shamiko / MagiskHide, не PronBox
|
||||
- Root/Magisk native - по-прежнему Shamiko / MagiskHide, не PronBox
|
||||
- wg-obfuscator на VPS всё ещё нужен для профиля WG
|
||||
|
||||
## Based on
|
||||
|
||||
42
README.md
42
README.md
@@ -1,6 +1,6 @@
|
||||
# PronBox
|
||||
|
||||
Форк [box_for_magisk](https://github.com/taamarin/box_for_magisk) — прозрачный прокси для Android (root).
|
||||
Форк [box_for_magisk](https://github.com/taamarin/box_for_magisk) - прозрачный прокси для Android (root).
|
||||
Собрано в стенах **НИИ «ТехноПрон»**. Отображаемое имя в Magisk: **PronBox**; module id: `box_for_root` (апгрейд совместим).
|
||||
|
||||
Работает через Magisk, KernelSU и APatch. Ядро по умолчанию: **sing-box**. Anti-detection без LSPosed + sidecar: [olcrtc](https://github.com/openlibrecommunity/olcrtc) / [TrustTunnel](https://github.com/TrustTunnel/TrustTunnel) / [wg-obfuscator](https://github.com/ClusterM/wg-obfuscator).
|
||||
@@ -14,7 +14,7 @@ Stock [Box for Root](https://github.com/taamarin/box_for_magisk) хорошо п
|
||||
1. **Не поддерживает** новые протоколы вроде olcrtc, TrustTunnel и WG-obfuscation «из коробки».
|
||||
2. **Легко детектится** проверщиками вроде [RKNHardering](https://github.com/xtclovver/RKNHardering): REST API на `9090`, скан localhost, TUN-интерфейсы.
|
||||
|
||||
PronBox решает это **без LSPosed** — iptables port-hide, hardening конфигов и sidecar-цепочка. Разработано командой НИИ «ТехноПрон».
|
||||
PronBox решает это **без LSPosed** - iptables port-hide, hardening конфигов и sidecar-цепочка. Разработано командой НИИ «ТехноПрон».
|
||||
|
||||
---
|
||||
|
||||
@@ -29,15 +29,15 @@ PronBox решает это **без LSPosed** — iptables port-hide, hardening
|
||||
| Localhost scan | не защищён | **iptables port-hide** для observer apps |
|
||||
| olcrtc / TrustTunnel | нет | **sidecar → SOCKS → sing-box** |
|
||||
| WG obfuscator | нет | **wg-obfuscator → WireGuard** |
|
||||
| Быстрый профиль | — | **Manage Profiles / `sbfr p …`** |
|
||||
| LSPosed / VPN Hide | — | **не требуется** |
|
||||
| Автор | — | **команда НИИ «ТехноПрон»** |
|
||||
| Быстрый профиль | - | **Manage Profiles / `sbfr p …`** |
|
||||
| LSPosed / VPN Hide | - | **не требуется** |
|
||||
| Автор | - | **команда НИИ «ТехноПрон»** |
|
||||
|
||||
---
|
||||
|
||||
## Возможности
|
||||
|
||||
- Прозрачный прокси через **iptables TPROXY** — без `VpnService`, без VPN-иконки, без `TRANSPORT_VPN`.
|
||||
- Прозрачный прокси через **iptables TPROXY** - без `VpnService`, без VPN-иконки, без `TRANSPORT_VPN`.
|
||||
- **Stealth-слой** (`box.stealth`): скрытие localhost-портов от банков и anti-tamper SDK.
|
||||
- **Sidecar** (`box.sidecar`): olcrtc и TrustTunnel как локальный SOCKS5 upstream для sing-box.
|
||||
- Авто-hardening sing-box/clash: удаление REST API, запрет TUN, блок QUIC (опционально).
|
||||
@@ -146,7 +146,7 @@ cp /data/adb/box/sing-box/config.stealth.example.json /data/adb/box/sing-box/con
|
||||
|
||||
### 3. Observer-приложения (stealth)
|
||||
|
||||
Файл `/data/adb/box/stealth.list.cfg` — приложения, которым **скрываем** localhost-прокси:
|
||||
Файл `/data/adb/box/stealth.list.cfg` - приложения, которым **скрываем** localhost-прокси:
|
||||
|
||||
```text
|
||||
# один package на строку
|
||||
@@ -216,7 +216,7 @@ stealth_extra_ports=("7890" "7891" "1080" "10808" "2080")
|
||||
| TUN-интерфейсы (`tun0`, MTU) | Policy routing fwmark (нативно) |
|
||||
| REST API на LAN | Установленные VPN-приложения (needsReview) |
|
||||
|
||||
Полный **NOT DETECTED** против RKNHardering + VPS + root недостижим. Цель форка — убрать **hard detect** от localhost, API и TUN.
|
||||
Полный **NOT DETECTED** против RKNHardering + VPS + root недостижим. Цель форка - убрать **hard detect** от localhost, API и TUN.
|
||||
|
||||
---
|
||||
|
||||
@@ -247,16 +247,16 @@ sidecar_set_final="true"
|
||||
|
||||
### olcrtc
|
||||
|
||||
Официального Android-релиза нет — бинарник собирается вручную:
|
||||
Официального Android-релиза нет - бинарник собирается вручную:
|
||||
|
||||
```bash
|
||||
# https://github.com/openlibrecommunity/olcrtc — mage mobile
|
||||
# https://github.com/openlibrecommunity/olcrtc - mage mobile
|
||||
# положите бинарник:
|
||||
# /data/adb/box/bin/olcrtc
|
||||
chmod 755 /data/adb/box/bin/olcrtc
|
||||
|
||||
cp /data/adb/box/sidecar/olcrtc.example.yaml /data/adb/box/sidecar/olcrtc.yaml
|
||||
# room id + crypto.key (64 hex) — одинаковые на клиенте и сервере
|
||||
# room id + crypto.key (64 hex) - одинаковые на клиенте и сервере
|
||||
```
|
||||
|
||||
`settings.ini`:
|
||||
@@ -275,7 +275,7 @@ sidecar_outbound_tag="olcrtc-proxy"
|
||||
|
||||
## WireGuard Obfuscator ([ClusterM/wg-obfuscator](https://github.com/ClusterM/wg-obfuscator))
|
||||
|
||||
Это **не VPN**, а UDP-обфускатор WireGuard (маскировка под STUN и т.п.). Нужен **на обоих концах** — телефон + VPS с тем же `key`. Со сторонним WG-сервером без своего obfuscator не заработает.
|
||||
Это **не VPN**, а UDP-обфускатор WireGuard (маскировка под STUN и т.п.). Нужен **на обоих концах** - телефон + VPS с тем же `key`. Со сторонним WG-сервером без своего obfuscator не заработает.
|
||||
|
||||
```text
|
||||
sing-box WireGuard peer
|
||||
@@ -411,7 +411,7 @@ Magisk / KernelSU / APatch
|
||||
|
||||
## Обновление модуля
|
||||
|
||||
Установите новый ZIP поверх старого через Magisk Manager. При запросе **restore settings.ini** — Vol+ сохранит ваши настройки stealth/sidecar.
|
||||
Установите новый ZIP поверх старого через Magisk Manager. При запросе **restore settings.ini** - Vol+ сохранит ваши настройки stealth/sidecar.
|
||||
|
||||
---
|
||||
|
||||
@@ -431,7 +431,7 @@ su -c rm -rf /data/adb/modules/box_for_root
|
||||
## Ограничения и disclaimer
|
||||
|
||||
- Модуль требует **root**. Это само по себе детектируется native-проверками.
|
||||
- Stealth **не маскирует** Java API (`NetworkCapabilities`) — для этого нужен kernel hook (VPN Hide kmod), мы сознательно обходимся без LSPosed.
|
||||
- Stealth **не маскирует** Java API (`NetworkCapabilities`) - для этого нужен kernel hook (VPN Hide kmod), мы сознательно обходимся без LSPosed.
|
||||
- olcrtc на Android требует **ручной сборки** бинарника.
|
||||
- TrustTunnel в sing-box upstream пока через **sidecar SOCKS**, не нативный outbound.
|
||||
- Автор не несёт ответственности за блокировки аккаунтов, некорректные конфиги и петли маршрутизации.
|
||||
@@ -440,13 +440,13 @@ su -c rm -rf /data/adb/modules/box_for_root
|
||||
|
||||
## Credits
|
||||
|
||||
- [taamarin/box_for_magisk](https://github.com/taamarin/box_for_magisk) — базовый модуль
|
||||
- [CHIZI-0618/box4magisk](https://github.com/CHIZI-0618/box4magisk) — оригинальный Box for Magisk
|
||||
- [okhsunrog/vpnhide](https://github.com/okhsunrog/vpnhide) — идея port-hide без LSPosed
|
||||
- [openlibrecommunity/olcrtc](https://github.com/openlibrecommunity/olcrtc) — WebRTC-туннель
|
||||
- [TrustTunnel/TrustTunnel](https://github.com/TrustTunnel/TrustTunnel) — HTTPS VPN-протокол
|
||||
- [xtclovver/RKNHardering](https://github.com/xtclovver/RKNHardering) — референс методики детекта
|
||||
- [taamarin/box_for_magisk](https://github.com/taamarin/box_for_magisk) - базовый модуль
|
||||
- [CHIZI-0618/box4magisk](https://github.com/CHIZI-0618/box4magisk) - оригинальный Box for Magisk
|
||||
- [okhsunrog/vpnhide](https://github.com/okhsunrog/vpnhide) - идея port-hide без LSPosed
|
||||
- [openlibrecommunity/olcrtc](https://github.com/openlibrecommunity/olcrtc) - WebRTC-туннель
|
||||
- [TrustTunnel/TrustTunnel](https://github.com/TrustTunnel/TrustTunnel) - HTTPS VPN-протокол
|
||||
- [xtclovver/RKNHardering](https://github.com/xtclovver/RKNHardering) - референс методики детекта
|
||||
|
||||
## License
|
||||
|
||||
GPL-3.0 — см. [LICENSE](LICENSE).
|
||||
GPL-3.0 - см. [LICENSE](LICENSE).
|
||||
|
||||
@@ -25,7 +25,7 @@ ZIP в релиз на Gitea: `E:\bfr_mod\pronbox-v1.13.0.zip`
|
||||
|
||||
1. `http://10.2.0.2/M1rs3m/BFR` → **Releases** → **New Release**
|
||||
2. Tag: `v1.13.0`
|
||||
3. Title: `PronBox v1.13.0 — stealth RU + mixed 19090`
|
||||
3. Title: `PronBox v1.13.0 - stealth RU + mixed 19090`
|
||||
4. Description: содержимое `CHANGELOG_STEALTH.md`
|
||||
5. Attach: `pronbox-v1.13.0.zip`
|
||||
6. Publish
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
# PronBox package filter — traffic routing
|
||||
# PronBox package filter - traffic routing
|
||||
# mode:blacklist = listed apps go DIRECT (bypass proxy)
|
||||
# Recommended for banks / gosuslugi / checkers so they see home RU IP.
|
||||
mode:blacklist
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
#!/system/bin/sh
|
||||
# VeilBox profile switcher — trusttunnel | olcrtc
|
||||
# VeilBox profile switcher - trusttunnel | olcrtc
|
||||
# Usage:
|
||||
# su -c '/data/adb/box/scripts/box.profile list'
|
||||
# su -c '/data/adb/box/scripts/box.profile use trusttunnel'
|
||||
|
||||
@@ -204,7 +204,7 @@ stealth_guard_network_mode() {
|
||||
[ "${stealth_mode}" != "true" ] && return 0
|
||||
[ "${stealth_forbid_tun}" != "true" ] && return 0
|
||||
if [[ "${network_mode}" == @(mixed|tun) ]]; then
|
||||
log Warning "[Stealth] TUN is detectable — switching network_mode to tproxy"
|
||||
log Warning "[Stealth] TUN is detectable - switching network_mode to tproxy"
|
||||
sed -i 's/\(network_mode=\)\"[^\"]*\"/\1"tproxy"/g' ${settings}
|
||||
network_mode="tproxy"
|
||||
fi
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
#!/system/bin/sh
|
||||
# BFR Sidecar — olcrtc / TrustTunnel local protocol adapters (SOCKS5 upstream for sing-box)
|
||||
# BFR Sidecar - olcrtc / TrustTunnel local protocol adapters (SOCKS5 upstream for sing-box)
|
||||
|
||||
if ! /system/bin/sh -n /data/adb/box/settings.ini 2>/dev/null; then
|
||||
echo "Err: settings.ini syntax error" >&2
|
||||
@@ -142,7 +142,7 @@ sidecar_inject_singbox() {
|
||||
if command -v yq >/dev/null 2>&1; then
|
||||
yq="yq"
|
||||
else
|
||||
log Error "[Sidecar] yq not found — cannot inject socks outbound"
|
||||
log Error "[Sidecar] yq not found - cannot inject socks outbound"
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
@@ -178,7 +178,7 @@ sidecar_inject_singbox() {
|
||||
log Info "[Sidecar] route.final -> ${final_tag}"
|
||||
sidecar_patch_dns "${final_tag}"
|
||||
else
|
||||
log Info "[Sidecar] sidecar_set_final=false — keep profile route.final (BFR Manager switch)"
|
||||
log Info "[Sidecar] sidecar_set_final=false - keep profile route.final (BFR Manager switch)"
|
||||
fi
|
||||
}
|
||||
|
||||
@@ -209,11 +209,11 @@ sidecar_start_process() {
|
||||
# TT + olcrtc for BFR Manager profile flipping; missing one must not block the other
|
||||
sidecar_start_one trusttunnel "${box_dir}/bin/trusttunnel_client" "${sidecar_dir}/trusttunnel.toml" \
|
||||
"${sidecar_tt_port}" "${sidecar_pid_tt}" || \
|
||||
log Warning "[Sidecar] trusttunnel failed/missing — continue without it"
|
||||
log Warning "[Sidecar] trusttunnel failed/missing - continue without it"
|
||||
sleep 2
|
||||
sidecar_start_one olcrtc "${box_dir}/bin/olcrtc" "${sidecar_dir}/olcrtc.yaml" \
|
||||
"${sidecar_olc_port}" "${sidecar_pid_olc}" || {
|
||||
log Warning "[Sidecar] olcrtc failed to start — continuing without it"
|
||||
log Warning "[Sidecar] olcrtc failed to start - continuing without it"
|
||||
log Warning "[Sidecar] Tip: telemost room.id = full https://telemost.yandex.ru/j/<id> URL (or numeric id)"
|
||||
log Warning "[Sidecar] Tip: under root:net_admin set net.dns to LAN resolver (e.g. gateway:53)"
|
||||
}
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
#!/system/bin/sh
|
||||
# BFR Stealth — hardening without LSPosed (iptables port hide + API lockdown)
|
||||
# BFR Stealth - hardening without LSPosed (iptables port hide + API lockdown)
|
||||
|
||||
if ! /system/bin/sh -n /data/adb/box/settings.ini 2>/dev/null; then
|
||||
echo "Err: settings.ini syntax error" >&2
|
||||
@@ -97,7 +97,7 @@ stealth_enable() {
|
||||
resolve_stealth_uids
|
||||
|
||||
if [ ! -s "${box_run}/stealth_uids.list" ]; then
|
||||
log Warning "[Stealth] No observer UIDs resolved — add packages to stealth.list.cfg"
|
||||
log Warning "[Stealth] No observer UIDs resolved - add packages to stealth.list.cfg"
|
||||
return 0
|
||||
fi
|
||||
|
||||
|
||||
@@ -1233,7 +1233,7 @@ upwgobfs() {
|
||||
fi
|
||||
if [ ! -f "${box_dir}/sidecar/wg-obfuscator.conf" ] && [ -f "${box_dir}/sidecar/wg-obfuscator.example.conf" ]; then
|
||||
cp -f "${box_dir}/sidecar/wg-obfuscator.example.conf" "${box_dir}/sidecar/wg-obfuscator.conf"
|
||||
log Warning "Created sidecar/wg-obfuscator.conf — set key= and target="
|
||||
log Warning "Created sidecar/wg-obfuscator.conf - set key= and target="
|
||||
fi
|
||||
else
|
||||
log Error "Download failed: ${url}"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
#!/system/bin/sh
|
||||
# VeilBox — WireGuard Obfuscator (ClusterM/wg-obfuscator) lifecycle
|
||||
# VeilBox - WireGuard Obfuscator (ClusterM/wg-obfuscator) lifecycle
|
||||
# Docs: https://github.com/ClusterM/wg-obfuscator
|
||||
#
|
||||
# Client flow:
|
||||
@@ -56,7 +56,7 @@ wgobfs_patch_singbox() {
|
||||
yq="${box_dir}/bin/yq"
|
||||
[ -x "${yq}" ] || yq="yq"
|
||||
if ! command -v "${yq}" >/dev/null 2>&1 && [ ! -x "${yq}" ]; then
|
||||
log Warning "[wgobfs] yq missing — cannot patch WireGuard endpoint"
|
||||
log Warning "[wgobfs] yq missing - cannot patch WireGuard endpoint"
|
||||
return 1
|
||||
fi
|
||||
|
||||
@@ -108,7 +108,7 @@ wgobfs_ensure_conf() {
|
||||
fi
|
||||
if [ -f "${box_dir}/sidecar/wg-obfuscator.example.conf" ]; then
|
||||
cp -f "${box_dir}/sidecar/wg-obfuscator.example.conf" "${wgobfs_config}"
|
||||
log Warning "[wgobfs] created ${wgobfs_config} from example — edit key/target"
|
||||
log Warning "[wgobfs] created ${wgobfs_config} from example - edit key/target"
|
||||
return 0
|
||||
fi
|
||||
log Error "[wgobfs] missing ${wgobfs_config}"
|
||||
@@ -139,7 +139,7 @@ wgobfs_start() {
|
||||
if wgobfs_wait_udp; then
|
||||
log Info "[wgobfs] running (listen see config source-lport, default ${wgobfs_listen_port})"
|
||||
else
|
||||
log Error "[wgobfs] process died — see ${wgobfs_log}"
|
||||
log Error "[wgobfs] process died - see ${wgobfs_log}"
|
||||
tail -n 15 "${wgobfs_log}" 2>/dev/null | while read -r line; do log Error "[wgobfs] ${line}"; done
|
||||
return 1
|
||||
fi
|
||||
|
||||
@@ -103,10 +103,10 @@ clash_provide_rules="${box_dir}/clash/subscription/${name_provide_clash_rules}"
|
||||
|
||||
# Sing configuration
|
||||
# BFR Manager → Manage Profiles lists *.json here. Switchable profiles:
|
||||
# config-trusttunnel.json — final → sidecar-proxy (:10800 TrustTunnel)
|
||||
# config-olcrtc.json — final → olcrtc-proxy (:10801 olcrtc)
|
||||
# config-wg-obfs.json — WireGuard via local wg-obfuscator (:41320)
|
||||
# config-hy2-wg.json — your hysteria/wg base (etc.)
|
||||
# config-trusttunnel.json - final → sidecar-proxy (:10800 TrustTunnel)
|
||||
# config-olcrtc.json - final → olcrtc-proxy (:10801 olcrtc)
|
||||
# config-wg-obfs.json - WireGuard via local wg-obfuscator (:41320)
|
||||
# config-hy2-wg.json - your hysteria/wg base (etc.)
|
||||
# For TT/olcrtc app switching keep sidecar_protocol=both and sidecar_set_final=false
|
||||
# For WG obfuscation set wgobfs_enable=true (needs VPS-side obfuscator)
|
||||
name_sing_config="config.json"
|
||||
@@ -222,7 +222,7 @@ wifi_ssids_list=("WiFi1" "WiFi-2" "WiFi 3")
|
||||
inotify_log_enabled="true"
|
||||
|
||||
# -----------------------------------------------------------------
|
||||
# PronBox stealth — anti-detection without LSPosed (iptables port-hide)
|
||||
# PronBox stealth - anti-detection without LSPosed (iptables port-hide)
|
||||
# -----------------------------------------------------------------
|
||||
|
||||
# Master switch: enables loopback port-hide for observer apps + API lockdown
|
||||
@@ -241,16 +241,16 @@ stealth_disable_api="true"
|
||||
stealth_api_bind="127.0.0.1"
|
||||
stealth_api_port="19090"
|
||||
|
||||
# Block QUIC (UDP 443/80) — reduces fingerprint, may break some sites
|
||||
# Block QUIC (UDP 443/80) - reduces fingerprint, may break some sites
|
||||
stealth_block_quic="false"
|
||||
|
||||
# Force tproxy mode — TUN interfaces are trivially detected by RKNHardering
|
||||
# Force tproxy mode - TUN interfaces are trivially detected by RKNHardering
|
||||
stealth_forbid_tun="true"
|
||||
|
||||
# Extra ports to hide from external INPUT (space-separated in stealth_extra_ports)
|
||||
stealth_extra_ports=("7890" "7891" "19090" "1080" "10808" "2080" "41320" "10800" "10801" "9090" "9091" "1053")
|
||||
|
||||
# Observer apps — packages that probe for VPN/proxy (see stealth.list.cfg)
|
||||
# Observer apps - packages that probe for VPN/proxy (see stealth.list.cfg)
|
||||
stealth_config=$(dirname "$settings")/stealth.list.cfg
|
||||
[ -d "${stealth_config}" ] && rm -rf "${stealth_config}"
|
||||
[ ! -f "${stealth_config}" ] && cat > "${stealth_config}"<<'stealth_init'
|
||||
@@ -268,7 +268,7 @@ stealth_init
|
||||
stealth_packages_list=($(sed -n '/^[^#]/s/^\([^ ]*\.[^ ]*\).*/\1/p' ${stealth_config}))
|
||||
|
||||
# -----------------------------------------------------------------
|
||||
# Sidecar protocols — olcrtc / TrustTunnel via local SOCKS5 chain
|
||||
# Sidecar protocols - olcrtc / TrustTunnel via local SOCKS5 chain
|
||||
# -----------------------------------------------------------------
|
||||
|
||||
sidecar_enable="false"
|
||||
@@ -290,7 +290,7 @@ sidecar_set_final="false"
|
||||
sidecar_dir="${box_dir}/sidecar"
|
||||
|
||||
# -----------------------------------------------------------------
|
||||
# WireGuard Obfuscator — https://github.com/ClusterM/wg-obfuscator
|
||||
# WireGuard Obfuscator - https://github.com/ClusterM/wg-obfuscator
|
||||
# Requires matching obfuscator on the VPS (same key). Not a VPN itself.
|
||||
# -----------------------------------------------------------------
|
||||
wgobfs_enable="false"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
# Generate with TrustTunnel endpoint: trusttunnel_endpoint vpn.toml hosts.toml -c client -a server --format toml
|
||||
# Docs: https://github.com/TrustTunnel/TrustTunnelClient
|
||||
|
||||
# Minimal placeholder — replace with exported client config from your endpoint.
|
||||
# Minimal placeholder - replace with exported client config from your endpoint.
|
||||
# Ensure SOCKS listener matches sidecar_listen_port in settings.ini (default 10800).
|
||||
|
||||
[listener]
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
# VeilBox client — WireGuard Obfuscator (ClusterM)
|
||||
# VeilBox client - WireGuard Obfuscator (ClusterM)
|
||||
# https://github.com/ClusterM/wg-obfuscator
|
||||
#
|
||||
# CRITICAL: the same `key` must be configured on the VPS obfuscator.
|
||||
@@ -14,7 +14,7 @@ source-if = 127.0.0.1
|
||||
source-lport = 41320
|
||||
|
||||
# Real remote: your VPS wg-obfuscator public endpoint
|
||||
# Example uses the previous raw WG host — after you wrap WG with obfuscator on the VPS,
|
||||
# Example uses the previous raw WG host - after you wrap WG with obfuscator on the VPS,
|
||||
# keep the public host:port here (obfuscator listens where WG used to).
|
||||
target = YOUR_VPS_IP:13232
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
| `config-trusttunnel.json` | TrustTunnel | `127.0.0.1:10800` | `sidecar-proxy` |
|
||||
| `config-olcrtc.json` | olcrtc | `127.0.0.1:10801` | `olcrtc-proxy` |
|
||||
| `config-wg-obfs.json` | wg-obfuscator | UDP `:41320` | WG peers → localhost obfuscator |
|
||||
| `config.stealth.example.json` | — | — | minimal template |
|
||||
| `config.stealth.example.json` | - | - | minimal template |
|
||||
|
||||
These files appear in **BFR Manager → Manage Profiles** (all `*.json` in `/data/adb/box/sing-box/`).
|
||||
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
# PronBox stealth.list.cfg — apps that must NOT see localhost proxy ports
|
||||
# PronBox stealth.list.cfg - apps that must NOT see localhost proxy ports
|
||||
# One package per line. Used by box.stealth (iptables UID → REJECT 127.0.0.0/8)
|
||||
|
||||
# --- checkers / anti-tamper ---
|
||||
|
||||
102
customize.sh
102
customize.sh
@@ -21,27 +21,27 @@ fi
|
||||
|
||||
service_dir="/data/adb/service.d"
|
||||
if [ "$KSU" = "true" ]; then
|
||||
ui_print "— KernelSU version: $KSU_VER ($KSU_VER_CODE)"
|
||||
ui_print "- KernelSU version: $KSU_VER ($KSU_VER_CODE)"
|
||||
[ "$KSU_VER_CODE" -lt 10683 ] && service_dir="/data/adb/ksu/service.d"
|
||||
elif [ "$APATCH" = "true" ]; then
|
||||
APATCH_VER=$(cat "/data/adb/ap/version")
|
||||
ui_print "— APatch version: $APATCH_VER"
|
||||
ui_print "- APatch version: $APATCH_VER"
|
||||
else
|
||||
ui_print "— Magisk version: $MAGISK_VER ($MAGISK_VER_CODE)"
|
||||
ui_print "- Magisk version: $MAGISK_VER ($MAGISK_VER_CODE)"
|
||||
fi
|
||||
|
||||
# Set up service directory and clean old installations
|
||||
mkdir -p "${service_dir}"
|
||||
if [ -d "/data/adb/modules/box_for_magisk" ]; then
|
||||
rm -rf "/data/adb/modules/box_for_magisk"
|
||||
ui_print "— Old module deleted."
|
||||
ui_print "- Old module deleted."
|
||||
fi
|
||||
|
||||
# Extract files and configure directories
|
||||
ui_print "— Installing PronBox (НИИ «ТехноПрон»)"
|
||||
ui_print "- Installing PronBox (НИИ «ТехноПрон»)"
|
||||
unzip -o "$ZIPFILE" -x 'META-INF/*' -x 'webroot/*' -d "$MODPATH" >&2
|
||||
if [ -d "/data/adb/box" ]; then
|
||||
ui_print "— Backup existing box data"
|
||||
ui_print "- Backup existing box data"
|
||||
temp_bak=$(mktemp -d "/data/adb/box/box.XXXXXXXXXX")
|
||||
temp_dir="${temp_bak}"
|
||||
mv /data/adb/box/* "${temp_dir}/"
|
||||
@@ -52,11 +52,11 @@ else
|
||||
fi
|
||||
|
||||
# Directory creation and file extraction
|
||||
ui_print "— Create directories..."
|
||||
ui_print "- Create directories..."
|
||||
mkdir -p /data/adb/box/ /data/adb/box/run/ /data/adb/box/bin/xclash/
|
||||
mkdir -p $MODPATH/system/bin
|
||||
|
||||
ui_print "— Extracting..."
|
||||
ui_print "- Extracting..."
|
||||
ui_print " ↳ uninstall.sh → $MODPATH"
|
||||
ui_print " ↳ box_service.sh → ${service_dir}"
|
||||
ui_print " ↳ sbfr → $MODPATH/system/bin"
|
||||
@@ -65,7 +65,7 @@ unzip -j -o "$ZIPFILE" 'box_service.sh' -d "${service_dir}" >&2
|
||||
unzip -j -o "$ZIPFILE" 'sbfr' -d "$MODPATH/system/bin" >&2
|
||||
|
||||
# Set permissions
|
||||
ui_print "— Setting permissions..."
|
||||
ui_print "- Setting permissions..."
|
||||
set_perm_recursive $MODPATH 0 0 0755 0644
|
||||
set_perm_recursive /data/adb/box/ 0 3005 0755 0644
|
||||
set_perm_recursive /data/adb/box/scripts/ 0 3005 0755 0700
|
||||
@@ -77,25 +77,25 @@ chmod ugo+x ${service_dir}/box_service.sh $MODPATH/uninstall.sh /data/adb/box/sc
|
||||
|
||||
apply_mirror() {
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— Do you want to use the 'ghfast.top' ?"
|
||||
ui_print "- Do you want to use the 'ghfast.top' ?"
|
||||
ui_print " ↳ mirror to speed up downloads"
|
||||
ui_print "— [ Vol UP(+): Yes ]"
|
||||
ui_print "— [ Vol DOWN(-): No ]"
|
||||
ui_print "- [ Vol UP(+): Yes ]"
|
||||
ui_print "- [ Vol DOWN(-): No ]"
|
||||
START_TIME=$(date +%s)
|
||||
while true ; do
|
||||
NOW_TIME=$(date +%s)
|
||||
timeout 1 getevent -lc 1 2>&1 | grep KEY_VOLUME > "$TMPDIR/events"
|
||||
if [ $(( NOW_TIME - START_TIME )) -gt 9 ]; then
|
||||
ui_print "— No input detected after 10 seconds..."
|
||||
ui_print "— ghfast acceleration enabled."
|
||||
ui_print "- No input detected after 10 seconds..."
|
||||
ui_print "- ghfast acceleration enabled."
|
||||
sed -i 's/use_ghproxy=.*/use_ghproxy="true"/' /data/adb/box/scripts/box.tool
|
||||
break
|
||||
elif $(cat $TMPDIR/events | grep -q KEY_VOLUMEUP); then
|
||||
ui_print "— ghfast acceleration enabled."
|
||||
ui_print "- ghfast acceleration enabled."
|
||||
sed -i 's/use_ghproxy=.*/use_ghproxy="true"/' /data/adb/box/scripts/box.tool
|
||||
break
|
||||
elif $(cat $TMPDIR/events | grep -q KEY_VOLUMEDOWN); then
|
||||
ui_print "— ghfast acceleration disabled."
|
||||
ui_print "- ghfast acceleration disabled."
|
||||
sed -i 's/use_ghproxy=.*/use_ghproxy="false"/' /data/adb/box/scripts/box.tool
|
||||
break
|
||||
fi
|
||||
@@ -113,10 +113,10 @@ find_bin() {
|
||||
local path="$bin_dir/bin/$name"
|
||||
if [ -e "$path" ]; then
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— $name → ⭕ FOUND"
|
||||
ui_print "- $name → ⭕ FOUND"
|
||||
else
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— $name → ❌ NOT FOUND"
|
||||
ui_print "- $name → ❌ NOT FOUND"
|
||||
fi
|
||||
}
|
||||
|
||||
@@ -135,20 +135,20 @@ find_bin() {
|
||||
timeout 1 getevent -lc 1 2>&1 | grep KEY_VOLUME > "$TMPDIR/events"
|
||||
|
||||
if [ $(( NOW_TIME - START_TIME )) -gt 9 ]; then
|
||||
ui_print "— No input detected after 10 seconds..."
|
||||
ui_print "- No input detected after 10 seconds..."
|
||||
if [ "$bin" = "clash" ]; then
|
||||
ui_print "— Download enabled for clash."
|
||||
ui_print "- Download enabled for clash."
|
||||
/data/adb/box/scripts/box.tool $action
|
||||
else
|
||||
ui_print "— Download disabled for $bin."
|
||||
ui_print "- Download disabled for $bin."
|
||||
fi
|
||||
break
|
||||
elif grep -q KEY_VOLUMEUP "$TMPDIR/events"; then
|
||||
ui_print "— Download enabled."
|
||||
ui_print "- Download enabled."
|
||||
/data/adb/box/scripts/box.tool $action
|
||||
break
|
||||
elif grep -q KEY_VOLUMEDOWN "$TMPDIR/events"; then
|
||||
ui_print "— Download disabled."
|
||||
ui_print "- Download disabled."
|
||||
break
|
||||
fi
|
||||
done
|
||||
@@ -159,9 +159,9 @@ find_bin() {
|
||||
timeout 1 getevent -cl >/dev/null
|
||||
|
||||
check_bin "$bin"
|
||||
ui_print "— Do you want to download or update it?"
|
||||
ui_print "— [ Vol UP(+): Yes ]"
|
||||
ui_print "— [ Vol DOWN(-): No ]"
|
||||
ui_print "- Do you want to download or update it?"
|
||||
ui_print "- [ Vol UP(+): Yes ]"
|
||||
ui_print "- [ Vol DOWN(-): No ]"
|
||||
handle_download "$bin"
|
||||
sleep 1
|
||||
done
|
||||
@@ -169,17 +169,17 @@ find_bin() {
|
||||
# Special case for clash
|
||||
if [ -e "$bin_dir/bin/xclash/mihomo" ]; then
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— mihomo → ⭕ FOUND"
|
||||
ui_print "- mihomo → ⭕ FOUND"
|
||||
ui_print "-- Do you want to download or update clash?"
|
||||
ui_print "— [ Vol UP(+): Yes ]"
|
||||
ui_print "— [ Vol DOWN(-): No ]"
|
||||
ui_print "- [ Vol UP(+): Yes ]"
|
||||
ui_print "- [ Vol DOWN(-): No ]"
|
||||
handle_download "clash"
|
||||
else
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— mihomo → ❌ NOT FOUND "
|
||||
ui_print "— Do you want to download or update mihomo?"
|
||||
ui_print "— [ Vol UP(+): Yes ]"
|
||||
ui_print "— [ Vol DOWN(-): No ]"
|
||||
ui_print "- mihomo → ❌ NOT FOUND "
|
||||
ui_print "- Do you want to download or update mihomo?"
|
||||
ui_print "- [ Vol UP(+): Yes ]"
|
||||
ui_print "- [ Vol DOWN(-): No ]"
|
||||
handle_download "clash"
|
||||
fi
|
||||
}
|
||||
@@ -208,30 +208,30 @@ restore_ini() {
|
||||
# Append at the end of the file
|
||||
echo "$value" >> "$target_ini"
|
||||
fi
|
||||
ui_print "— Restored: $key"
|
||||
ui_print "- Restored: $key"
|
||||
else
|
||||
ui_print "— Skipped: $key not found in backup"
|
||||
ui_print "- Skipped: $key not found in backup"
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
apply_ini() {
|
||||
ui_print "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
||||
ui_print "— Would you like to restore settings.ini?"
|
||||
ui_print "— [ Vol UP(+): Yes ]"
|
||||
ui_print "— [ Vol DOWN(-): No ]"
|
||||
ui_print "- Would you like to restore settings.ini?"
|
||||
ui_print "- [ Vol UP(+): Yes ]"
|
||||
ui_print "- [ Vol DOWN(-): No ]"
|
||||
START_TIME=$(date +%s)
|
||||
while true ; do
|
||||
NOW_TIME=$(date +%s)
|
||||
timeout 1 getevent -lc 1 2>&1 | grep KEY_VOLUME > "$TMPDIR/events"
|
||||
if [ $(( NOW_TIME - START_TIME )) -gt 9 ]; then
|
||||
ui_print "— Skipped restoring settings.ini"
|
||||
ui_print "- Skipped restoring settings.ini"
|
||||
break
|
||||
elif $(cat $TMPDIR/events | grep -q KEY_VOLUMEUP); then
|
||||
restore_ini
|
||||
break
|
||||
elif $(cat $TMPDIR/events | grep -q KEY_VOLUMEDOWN); then
|
||||
ui_print "— Skipped restoring settings.ini"
|
||||
ui_print "- Skipped restoring settings.ini"
|
||||
break
|
||||
fi
|
||||
done
|
||||
@@ -242,7 +242,7 @@ timeout 1 getevent -cl >/dev/null
|
||||
|
||||
# Restore backup configurations if present
|
||||
if [ "${backup_box}" = "true" ]; then
|
||||
ui_print "— Restoring configurations..."
|
||||
ui_print "- Restoring configurations..."
|
||||
ui_print " ↳ xray"
|
||||
ui_print " ↳ hysteria"
|
||||
ui_print " ↳ clash"
|
||||
@@ -259,7 +259,7 @@ if [ "${backup_box}" = "true" ]; then
|
||||
restore_kernel() {
|
||||
kernel_name="$1"
|
||||
if [ ! -f "/data/adb/box/bin/$kernel_name" ] && [ -f "${temp_dir}/bin/${kernel_name}" ]; then
|
||||
ui_print "— Restoring kernel ${kernel_name}..."
|
||||
ui_print "- Restoring kernel ${kernel_name}..."
|
||||
cp -rf "${temp_dir}/bin/${kernel_name}" "/data/adb/box/bin/${kernel_name}"
|
||||
fi
|
||||
}
|
||||
@@ -268,21 +268,21 @@ if [ "${backup_box}" = "true" ]; then
|
||||
restore_kernel "$kernel"
|
||||
done
|
||||
|
||||
# Sidecar configs (TrustTunnel / olcrtc) — not shipped with secrets in ZIP
|
||||
# Sidecar configs (TrustTunnel / olcrtc) - not shipped with secrets in ZIP
|
||||
if [ -d "${temp_dir}/sidecar" ]; then
|
||||
ui_print "— Restoring sidecar configs..."
|
||||
ui_print "- Restoring sidecar configs..."
|
||||
mkdir -p /data/adb/box/sidecar
|
||||
cp -rf "${temp_dir}/sidecar/"* "/data/adb/box/sidecar/" 2>/dev/null
|
||||
fi
|
||||
[ -f "${temp_dir}/stealth.list.cfg" ] && cp -f "${temp_dir}/stealth.list.cfg" "/data/adb/box/stealth.list.cfg"
|
||||
|
||||
ui_print "— Restoring..."
|
||||
ui_print "- Restoring..."
|
||||
ui_print " ↳ *.logs"
|
||||
ui_print " ↳ box.pid"
|
||||
ui_print " ↳ uid.list"
|
||||
cp -rf "${temp_dir}/run/"* "/data/adb/box/run/"
|
||||
|
||||
ui_print "— Restoring..."
|
||||
ui_print "- Restoring..."
|
||||
ui_print " ↳ ap.list.cfg"
|
||||
ui_print " ↳ crontab.cfg"
|
||||
ui_print " ↳ package.list.cfg"
|
||||
@@ -303,7 +303,7 @@ fi
|
||||
# # nameserver 114.114.114.114
|
||||
# EOF
|
||||
# fi
|
||||
# ui_print "— create $MODPATH/system/etc/resolv.conf"
|
||||
# ui_print "- create $MODPATH/system/etc/resolv.conf"
|
||||
# }
|
||||
# create_resolv
|
||||
|
||||
@@ -323,15 +323,15 @@ sed -i "s/^author=.*/author=команда НИИ «ТехноПрон»/g" $MOD
|
||||
unzip -o "$ZIPFILE" 'webroot/*' -d "$MODPATH" >&2
|
||||
|
||||
# Clean up temporary files
|
||||
ui_print "— Cleaning up leftover files"
|
||||
ui_print "- Cleaning up leftover files"
|
||||
rm -rf /data/adb/box/bin/.bin $MODPATH/box $MODPATH/sbfr $MODPATH/box_service.sh
|
||||
|
||||
ui_print ""
|
||||
# Create a symbolic link to run /dev/sbfr as a shortcut to sbfr
|
||||
ln -sf "$MODPATH/system/bin/sbfr" /dev/sbfr
|
||||
ui_print "— Shortcut '/dev/sbfr' created."
|
||||
ui_print "- Shortcut '/dev/sbfr' created."
|
||||
ui_print " ↳ You can now run: su -c /dev/sbfr"
|
||||
ui_print ""
|
||||
# Complete installation
|
||||
ui_print "— Installation complete. Please reboot your device."
|
||||
ui_print "— Report issues to t.me.taamarin"
|
||||
ui_print "- Installation complete. Please reboot your device."
|
||||
ui_print "- Report issues to t.me.taamarin"
|
||||
|
||||
@@ -3,4 +3,4 @@ name=PronBox
|
||||
version=v1.13.0
|
||||
versionCode=2026081302
|
||||
author=команда НИИ «ТехноПрон»
|
||||
description=PronBox — прозрачный TPROXY-прокси из стен НИИ «ТехноПрон». Stealth без LSPosed, TrustTunnel/olcrtc/wg-obfuscator, sing-box. Magisk id: box_for_root.
|
||||
description=PronBox - прозрачный TPROXY-прокси из стен НИИ «ТехноПрон». Stealth без LSPosed, TrustTunnel/olcrtc/wg-obfuscator, sing-box. Magisk id: box_for_root.
|
||||
|
||||
2
sbfr
2
sbfr
@@ -20,7 +20,7 @@ help() {
|
||||
echo -e " ${YELLOW}stop${RESET} : Stop PronBox (iptables and service)"
|
||||
echo -e " ${YELLOW}s <args>${RESET} : Run command to box.service with extra arguments"
|
||||
echo -e " ${YELLOW}i <args>${RESET} : Run command to box.iptables with extra arguments"
|
||||
echo -e " ${YELLOW}p <args>${RESET} : Profile switch — list | status | use trusttunnel | use olcrtc"
|
||||
echo -e " ${YELLOW}p <args>${RESET} : Profile switch - list | status | use trusttunnel | use olcrtc"
|
||||
echo -e " ${YELLOW}t <args>${RESET} : Run tools from box.tool with extra arguments"
|
||||
echo -e " ${YELLOW}u${RESET} : API to upgrade core[clash] (POST to /upgrade)"
|
||||
echo -e " ${YELLOW}x${RESET} : API to upgrade Dashboard UI [clash/sing] (POST to /upgrade/ui)"
|
||||
|
||||
@@ -3,7 +3,7 @@ export PATH="/data/adb/magisk:/data/adb/box/bin:/system/bin:$PATH"
|
||||
CFG=/data/adb/box/sing-box/config.json
|
||||
YQ=/data/adb/box/bin/yq
|
||||
|
||||
# Use HTTPS DoH via sidecar (port 443 — TT allows this; TCP/53 often blocked by SOCKS policy)
|
||||
# Use HTTPS DoH via sidecar (port 443 - TT allows this; TCP/53 often blocked by SOCKS policy)
|
||||
# Also try DoH via legacy hysteria outbound as fallback dns-hy2
|
||||
"$YQ" -i -o=json '
|
||||
.dns.servers = [
|
||||
|
||||
@@ -35,7 +35,7 @@ CFG=/data/adb/box/sing-box/config-hy2-wg.json
|
||||
# Restart sing-box briefly to apply route, keep TT
|
||||
kill -HUP "$(pidof sing-box)" 2>/dev/null || true
|
||||
sleep 1
|
||||
# soft reload may not reload route; restart service is safer but heavy — kill/start sing-box only
|
||||
# soft reload may not reload route; restart service is safer but heavy - kill/start sing-box only
|
||||
# Use full renew
|
||||
sh /data/adb/box/scripts/box.service restart
|
||||
sleep 6
|
||||
|
||||
@@ -3,7 +3,7 @@ export PATH="/data/adb/magisk:/data/adb/box/bin:/system/bin:$PATH"
|
||||
YQ=/data/adb/box/bin/yq
|
||||
CFG=/data/adb/box/sing-box/config.json
|
||||
|
||||
# RU DNS also via sidecar DoH — route rules still send .ru traffic direct after resolve
|
||||
# RU DNS also via sidecar DoH - route rules still send .ru traffic direct after resolve
|
||||
# (old dns-direct to 77.88.8.8 was timing out under tproxy)
|
||||
$YQ '(.dns.rules[] | .server) = "dns-remote"' -i --output-format=json "$CFG"
|
||||
$YQ '.dns.final = "dns-remote"' -i --output-format=json "$CFG"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Build BFR Manager–visible profiles (hyphen names) from live config."""
|
||||
"""Build BFR Manager-visible profiles (hyphen names) from live config."""
|
||||
from __future__ import annotations
|
||||
|
||||
import copy
|
||||
|
||||
@@ -28,7 +28,7 @@ if ! grep -q '^stealth_mode=' /data/adb/box/settings.ini; then
|
||||
cat >> /data/adb/box/settings.ini <<'EOF'
|
||||
|
||||
# -----------------------------------------------------------------
|
||||
# BFR Stealth — anti-detection without LSPosed (iptables port-hide)
|
||||
# BFR Stealth - anti-detection without LSPosed (iptables port-hide)
|
||||
# -----------------------------------------------------------------
|
||||
stealth_mode="true"
|
||||
stealth_hide_loopback="true"
|
||||
|
||||
@@ -34,7 +34,7 @@ key = CHANGE_ME_WG_OBFS_KEY
|
||||
masking = STUN
|
||||
verbose = INFO
|
||||
EOF
|
||||
echo "CREATED $SC/wg-obfuscator.conf — set key= to match VPS"
|
||||
echo "CREATED $SC/wg-obfuscator.conf - set key= to match VPS"
|
||||
else
|
||||
echo "keep existing $SC/wg-obfuscator.conf"
|
||||
fi
|
||||
|
||||
@@ -13,6 +13,6 @@ elif [ -x /data/adb/box/bin/curl ]; then
|
||||
/data/adb/box/bin/curl -x socks5h://127.0.0.1:10800 -m 20 -sS https://1.1.1.1/cdn-cgi/trace | head -5
|
||||
else
|
||||
# minimal SOCKS5 handshake via toybox/dd? skip
|
||||
echo "NO_CURL — checking CONNECTED in log"
|
||||
echo "NO_CURL - checking CONNECTED in log"
|
||||
grep 'Successfully connected' /data/adb/box/run/sidecar.log | tail -3
|
||||
fi
|
||||
|
||||
@@ -78,7 +78,7 @@ def to_toml(fields: dict, socks_port: int = 10800) -> str:
|
||||
proto = fields.get("upstream_protocol", "http2")
|
||||
anti = str(fields.get("anti_dpi", False)).lower()
|
||||
name = fields.get("name", "trusttunnel")
|
||||
return f'''# Generated from tt:// deep link — {name}
|
||||
return f'''# Generated from tt:// deep link - {name}
|
||||
loglevel = "info"
|
||||
vpn_mode = "general"
|
||||
killswitch_enabled = false
|
||||
|
||||
Reference in New Issue
Block a user