Minewire

Cross-platform VPN client that masquerades as a Minecraft client to establish encrypted tunnels and bypass network restrictions.

Features AES-GCM Encryption - All traffic encrypted and disguised as Minecraft packets Deep Packet Inspection Evasion - Indistinguishable from genuine Minecraft client traffic Stream Multiplexing - Multiple connections through single tunnel (yamux)

How It Works Connection: Client initiates Minecraft protocol handshake with server Authentication: Username derived from SHA256(password), matching server's validation logic Tunnel Establishment: Encrypted yamux multiplexed session over Minecraft connection Traffic Encapsulation: Data encrypted with AES-GCM, embedded in Minecraft Plugin Message packets (0x0D) Uses minecraft:brand or minewire:tunnel channels Each write: random nonce + AEAD encrypted payload Proxying: Android: tun2socks intercepts all device traffic, routes through tunnel Windows: Local SOCKS5/HTTP proxy redirects application traffic The protocol leverages Minecraft's plugin messaging system: Plugin Message packets can contain arbitrary data and are expected during gameplay, making them ideal carriers for encrypted tunnel traffic.