Obfuscate all your TCP connections into HTTP protocol.

Advanced HTTP(S) Rewriting Proxy

📦 The fastest and simplest packet manipulation lib for Python

Go bindings for iptables, ebtables and arptables, which provide numerous features, extensions and more.

c-binding free API for golang to communicate with the queue subsystem of netfilter

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.

Meds — Hybrid firewall using public blocklists

DNS-based selective routing for DPI bypass on Linux & routers

Using nfqueue to accept or drop flows destined for SNI domainnames

Rewrite OpenGFW in Rust, with web-ui.

Cross-platform identity spoofing toolkit — MAC randomization + wire-level Windows TCP/IP persona via NFQUEUE packet rewriting. For authorized pentesting.

A load-balancer based on the NFQUEUE iptables target

HTTP authenticator plugin for Certbot which is compatible with any web server!

A libnetfilter_queue wrapper for Go

User-space WireGuard traffic obfuscator for DPI/ML evasion, using NFQUEUE + ChaCha. Fast, lightweight, and container-ready.

Графический пользовательский интерфейс (GUI) для программы [zapret](https://github.com/bol-van/zapret)

libnetfilter_queue wrapper for Nim

A small SBC based MITM tool using SCAPY & NFQUEUE with a web socket based communications channel (C2)

Open-source DPI bypass for YouTube and Discord. Cross-platform (Windows / Linux / macOS), Rust. Zapret / GoodbyeDPI / byedpi alternative. Works against TSPU, GFW and other carrier-grade DPI.