Skip to content

IPv6 support and additional PNA bypasses #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jan 25, 2025
Merged

IPv6 support and additional PNA bypasses #57

merged 2 commits into from
Jan 25, 2025

Conversation

gdncc
Copy link
Collaborator

@gdncc gdncc commented Jan 25, 2025

Added Basic Experimental Support for IPv6.

This changes the DNS name and URLs format from e.g.:

  • "s-ip.ad.dr.ss-127.0.0.1-<random_number>-fs-e.dynamic.your.domain"

to:

  • "s-X.Y-<random_number>-fs-e.dynamic.your.domain"

where X and Y are either 4 bytes (IPv4), or 16 bytes (IPv6) hexstrings, or CNAMEs e.g. "localhost".

Sample (re-)tested configurations in Firefox:

  • IPv4 public to 127.0.01 (First then Second, fetch API)
  • IPv4 public to 127.0.01 (Multiple Answers, fetch API)
  • IPv4 public to "localhost" CNAME (First then Second, fetch API)
  • IPv6 public to :: (First then Second, fetch API)
  • IPv6 public to :: (Multiple Answers, fetch API)

Sample tested PNA bypasses working in Chrome:

  • IPv6 public to 127.0.0.1 in ~3 seconds (Multiple Answers, inline frame)
  • IPv6 public to :: in ~3 seconds (Multiple Answers, inline frame)
  • IPv6 public to 0.0.0.0 in ~3 seconds (Multiple Answers, inline frame)

Added -ignoreDNSRequestFrom Command Line Option

Permits to ignore spurious DNS requests from third-parties that interfere with Singularity's DNS rebinding sessions with targets.

@gdncc gdncc merged commit 3c5ee9a into master Jan 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant