WhitelistBypass

Tunnels internet traffic through VK call DataChannels to bypass government whitelist censorship.

VK calls use WebRTC with an SFU (Selective Forwarding Unit). The SFU forwards all SCTP data channels between participants without inspecting them. This tool creates a custom DataChannel (id:2) alongside VK's built-in animoji channel (id:1) and uses it as a bidirectional data pipe.

How it works VK calls use WebRTC with an SFU (Selective Forwarding Unit). The SFU forwards all SCTP data channels between participants without inspecting them. This tool creates a custom DataChannel (id:2) alongside VK's built-in animoji channel (id:1) and uses it as a bidirectional data pipe.

Joiner (censored) Creator (free internet)

All apps | VpnService (captures all traffic) | tun2socks (IP -> TCP) | SOCKS5 proxy (Go, :1080) | WebSocket (:9000) | WebView (VK call) Browser (VK call) | | DataChannel id:2 <--- VK SFU ---> DataChannel id:2 | WebSocket (:9000) | Go relay | Internet Traffic goes through VK's TURN servers (155.212.x.x:19302) which are whitelisted. To the network firewall it looks like a normal VK call

Components hook.js - Injected into VK call page on both sides. Hooks RTCPeerConnection, creates tunnel DataChannel, bridges to local WebSocket. relay/ - Go binary and gomobile library. SOCKS5 proxy + WebSocket server + tun2socks. app/ - Android app. WebView + VpnService + Go relay (.aar).