TS-Warp-1.5.7

• 2024.11.08 ts-warp-1.5.7, gui-warp-1.0.26 (gui-warp-v1.0.33-mac), ns-warp-1.0.7
  • ts-warp.sh: Log-file truncating moved here
  • gui-warp.py: Minor changes about log-file size and FW-file selection under Linux
  • ts-warp.c: Null-pointer dereference in PIDS table processing fixed
  • ts-warp.c: ACT reporting [SECTIONS]
  • inifile.c: Correct usage of multiple links of a proxy-chain
  • inifile.c: Potential buffer-overflow fixed in parsing [SECTIONS]
  • ts-warp.c: Proxy server selection optimization
  • pidlist.c: Uninitialised value was created by a heap allocation fixed

TS-Warp-1.5.6

CHANGELOG

• 2024.09.07 ts-warp-1.5.6, gui-warp-1.0.25 (gui-warp-v1.0.32-mac), ns-warp-1.0.7
  • GUI-Warp.app: Better handling of starter, starter.c updated to v1.3
  • GUI-Warp.app: starter.c updated to v1.2
  • inifile.c: proxy_server variable parsing. Thanks jesussanchezvalle@gmail.com for the bug-hunting and testing
  • GUI-Warp.app: starter.c to handle environment variables
  • minmiconf: Updated to version 1.1.1.0
  • configure: Added lost paths check for macOS SDK directories
  • GUI-Warp.app: Added an internal launcher - starter.c
  • ts-warp.sh: Enable PF-firewall in ts-warp.sh start; Minor fixes for PF on macOS in GUI-Warp on stop
  • pidlist.c: ACT shows destination IP-address, when internal proxy servers are used
  • ts-warp.c: -D 0..512 DPI bypass fragment size by default 0 - disabled; To enable use a positive value, e.g., 2

TS-Warp-1.5.5

• 2024.08.23 Current

  • ts-warp.c: -D 0..512 DPI bypass fragment size by default 0 - disabled; To enable use a positive value, e.g., 2

• 2024.08.15 ts-warp-1.5.5, gui-warp-1.0.25 (gui-warp-v1.0.30-mac), ns-warp-1.0.7

  • ts-warp.c, http.c: Deep Packet Inspections bypass. Option -D to disable it.
  • ts-warp.c: Internal proxy servers allowed making direct connection to destinations

Experimental Deep Packet Inspections bypass

According to SpoofDPI project, sending the first 1 byte of a request to the server, and then sending the rest of the data can help to bypass Deep Packet Inspections of HTTPS.

To bypass DPI, start TS-Warp with -D 0..512 flag, e.g., sudo /usr/local/etc/ts-warp.sh start -D 2 to enable packet fragmentation.

For the GUI-warp, edit ~/ts-warp/etc/gui-warp.ini to add -D to daemon_options variable, e.g: daemon_options = -D 2

Then use TS-Warp/GUI-Warp normally in Transparent mode, or point your browser to TS-Warp/GUI-Warp Internal HTTP(S) proxy at 127.0.0.1:8080 or SOCKS5 proxy at 127.0.0.1:7080.

TS-Warp-1.5.4

• 2024.07.23 ts-warp-1.5.4, gui-warp-1.0.25 (gui-warp-v1.0.30-mac), ns-warp-1.0.7
  • ts-warp.c: ACT-file created as RUNAS_USER user owner
  • ts-warp.c: On macOS delayed setuid()/setgid() disabled as almost useless

TS-Warp-1.5.3

2024.07.23 ts-warp-1.5.3, gui-warp-1.0.25 (gui-warp-v1.0.30-mac), ns-warp-1.0.7

• ts-warp.c: Enable on macOS delayed setuid()/setgid() to run as non-privileged user
• ts-warp.c: SSH2 proxy connection fixed, thanks Stefan Hildebrandt for the bug-hunting
• ssh2.c: password for keyboard-interactive and password now always required
• examples\ts-warp.ini: Highlight info about accessing proxy_key (the private key) permissions/location

TS-Warp-1.5.2

• 2024.07.12 ts-warp-1.5.2, gui-warp-1.0.25 (gui-warp-v1.0.30-mac), ns-warp-1.0.7
  • GUI-Warp: About-tab displays CHANGELOG.md-file
  • Makefile: installs/deinstalls text-files files into/from <PREFIX>/share/ts-warp directory
  • GUI-Warp.app: ts-warp.sh can be run from CLI to control ts-warp daemon e.g.:
    sudo /Applications/gui-warp.app/Contents/Resources/ts-warp.sh start /Users/$USER/ts-warp
  • GUI-Warp.app: build.sh uses current openssl and libssh2 versions
  • Makefile: WITH_LIBSSH2?=0 to disable LIBSSH2 by default
  • ts-warp_autofw.sh Ignore domain names if they are not resolveable to IP-addresses
  • Typos fixed again
  • gui-warp.py: Minor cosmetic changes
  • minmiconf: v1.1.0.2 - OpenBSD support; ts-warp_auto.sh modernization; gui-warp.py: Save INI button fix
  • gui-warp.py: v1.0.30-mac, gui-warp.py.in: v1.0.25, minmiconf: v1.1.0.1
  • configure: updated to minmiconf-1.1.0.0
  • Ignore a section if proxy_server value is not specified

TS-Warp-1.5.1

• 2024.04.09 ts-warp-1.5.1, gui-warp-1.0.24 (gui-warp-v1.0.29-mac), ns-warp-1.0.7
  • ts-warp_autofw.sh: Support for domains in response to the issue
  • configure: Better PREFIX handling
  • README.md: Rewritten for configure
  • configure: Configure script introduced
  • GUI-Warp application window title caption update
  • ts-warp.c: WITH_TCP_NODELAY proper processing

TS-Warp-1.5.0

2024.03.12 ts-warp-1.5.0, gui-warp-1.0.23 (gui-warp-v1.0.28-mac), ns-warp-1.0.7

• gui-warp.app, gui-warp.py: Correcting paths in gui-warp.ini
• gui-warp.app: Symlink to /Applications in DMG
• gui-warp.py, gui-warp.app: gui-warp.ini back to macOS; daemon_options var controls ts-warp startup options
• ssh2.c: Deny SSH2-proxy connections with no username
• ssh2.c: Do not try manual authentication is agent-authentication was successful
• ssh2.c: Variable proxy_ssh_force_auth in ts-warp.ini to force or negotiate SSH2 authenticaton methods
• ts-warp.c: CLI options to disable TS-Warp port listeners: -T 0:0, -S 0:0 and -H 0:0
• ssh2.c: SSH-agent support added
• ts-warp.c, ssh2.c: Fix SSH2 related memory leaks, proper SSH session closure
• inifile.c: Hide SSH privatekey key passphrase in logs
• ssh2.c: Authentication methods reworked. proxy_key_passphrase INI-entry appeared
• inifile.c: Allow proxy_key to be specified in the INI-file
• build.sh: MacOS application build fix for LIBSSH2
• ts-warp.c, Makefile: LIBSSH2 compilation issues under Linux
• inifile.c: Enable default proxy port-numbers based on proxy_type: Socks4/5: 1080, HTTPS: 3128, SSH2: 22
• examples\ts-warp.ini: Ports specified for HTTPS and SSH2 proxies
• ts-warp.c: Prevent HTTP-port overwriting TRANSPARENT-port
• build.sh when makind gui-warp.app downloads/builds static SSL and SSH2 libraries WITH_LIBSSH2=1 sh ./build.sh
• SSH2 proxy supported in any position of a CHAIN
• gui-warp.app: on macOS deiconify from Dock; LICENSE file added to the application
• http.c: http_client_request() tolerate fail on send() and recv()
• ts-warp.c: NIT lookup lifted up the code to work for all proxies
• ts-warp.c: minor logging bugfix, README.md updates
• SSH2 proxy-client introduction
• ts-warp.c: Be silent on LIBSSH2_ERROR_EAGAIN in libssh2_channel_read()
• gui-warp.app: Makefile and build.sh prepred for static LIBSSH2
• SSH2 proxy first successful run
• Added SSH2 to the main loop
• ssh2.c: libssh2_channel_direct_tcpip() added
• ssh2.c: libssh2_userauth_*() added
• gui-warp.app: build.sh Stage clean removes correct dmg at right time

TS-Warp-1.4.8

ts-warp-1.4.8, gui-warp-1.0.22 (gui-warp-v1.0.27-mac), ns-warp-1.0.7

• gui-warp.app: update link points to GUI-Warp.dmg image
• gui-warp.app: build.sh creates DMG image
• Makefile: ts-warp-ssh2 special target (for development) with LIBSSH2
• ssh2.c: Started ssh2_client_request()
• Makefile: Install manpages
• LIBSSH2 init/deinit
• SSH2 proxy preparation
• ts-warp.c: Cleaner code
• ts-warp.ini: Examples are commented
• ts-warp.sh.in: on stop flush only TS-Warp related anchors
• Minor cosmetic changes

ts-warp-1.4.7

ts-warp-1.4.7, gui-warp-1.0.22 (gui-warp-v1.0.26-mac), ns-warp-1.0.7

• ts-warp.sh.in: remove unused variables
• ts-warp.c: Drop direct requests to Transparent port
• Makefile: examples-* target user-name check fix
• ts-warp.sh.in, ts-warp_autofw.sh.in: On Linux try Iptables firts, then Nftables; fix execution.
• socks.c: Typo fix
• gui-warp.py, gui-warp.app: Links to releases; better PID-file checking
• Makefile, README.md: Better custom installation PREFIX
• gui/Makefile: images go to share/ts-warp directory
• gui-warp.py: Better parsing of gui-warp.ini - key error fix