Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add risk flag about suspicious ESNI usage | Nardi Ivan | 2020-08-05 |
| | | | | | | | | | | | | | | | In a Client Hello, the presence of both SNI and ESNI may obfuscate the real domain of an HTTPS connection, fooling DPI engines and firewalls, similarly to Domain Fronting. Such technique is reported in a presentation at DEF CON 28: "Domain Fronting is Dead, Long Live Domain Fronting: Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise" Full credit for the idea must go the original author At the moment, the only way to get the pdf presention and related video is via https://forum.defcon.org/node/234492 Hopefully a direct link (and an example pcap) will be available soon | ||
* | Sync TLS definitions. | aouinizied | 2020-08-01 |
| | |||
* | Update CFFI definitions. | aouinizied | 2020-07-29 |
| | |||
* | added modified risks | MrRadix | 2020-07-22 |
| | |||
* | added new risks to ndpi_risk_enum | MrRadix | 2020-07-22 |
| | |||
* | Add ssl_version_str to flow structure. | aouinizied | 2020-07-13 |
| | |||
* | Add NDPI_MALFORMED_PACKET risk. | aouinizied | 2020-07-09 |
| | |||
* | Synchronize type definitions. | aouinizied | 2020-06-12 |
| | |||
* | Update APIs and structures. | aouinizied | 2020-05-22 |
| | |||
* | Update Python cffi bindings. | Zied Aouini | 2020-02-21 |
| | |||
* | nDPI now detect RCE in HTTP GET requests | MrTiz9 | 2020-01-24 |
| | |||
* | Update ndpi_flow_struct definition. | Zied Aouini | 2019-12-23 |
| | |||
* | Implement cffi bindings. | aouinizied | 2019-11-28 |