Unhelpful IP Helper: A Handle Leak Story

By | August 13, 2025

After my post about a CancelIoEx bug, I decided to cover another defect in Windows system components—this time in IP Helper (the part of the Windows API responsible for network statistics and connection tables). Among other things, this API lets you map packets intercepted at the network level to local processes. You’d think it’s a battle-tested mechanism running… Read More »

ProxiFyre v2.0: Deferred Context Resolution and System-Wide SOCKS5 Tunneling

By | July 20, 2025

In recent months, I’ve continued to encounter cases where traditional VPN connections are becoming less reliable or outright blocked. For users who rely on remote access to home infrastructure or private networks, especially from regions with increasing traffic inspection or censorship, this creates a tangible threat to continuity. My own setup — a home server behind a WireGuard… Read More »

Bypass Censorship & DPI with WireSock Secure Connect on Windows

By | April 16, 2025

In a sense, this article is a continuation of a series of materials about implementing a WireGuard client based on Cloudflare BoringTun and a custom packet filter for Windows. This approach differs from the conventional method used in most VPN clients, which typically rely on a virtual network interface. Instead, WireGuard integration here occurs entirely in userspace, with… Read More »

Bypassing Egypt’s WireGuard Ban: An Update

By | May 18, 2024

In our earlier post, we discussed bypassing Egypt’s WireGuard VPN ban by routing handshake packets through a SOCKS5 proxy. However, recent developments indicate this method is no longer sufficient. Together with Shady Nagy, we’ve researched and tested a new approach. In the preliminary WireSock VPN Client v1.2.41, a new parameter, Socks5ProxyAllTraffic, has been added. When set to true… Read More »

From Basics to Mastery: Implementing SSH VPN Tunneling on Windows with ProxiFyre

By | June 3, 2023

In conditions of constantly increasing state control over the internet, manifested, among other things, in the blocking of VPN protocols, the problem of developing alternative methods of connection is becoming increasingly relevant. This issue is not only theoretical but also quite practical. Having moved from Russia about a year ago, I continue to actively use the home infrastructure… Read More »

Setting Up WireGuard on Oracle Cloud: Overcoming NAT and Routing Challenges

By | April 29, 2023

WireGuard® is an open-source VPN solution that is known for its simplicity, speed, and security. While setting up a WireGuard instance on most cloud providers is relatively straightforward, Oracle Cloud Infrastructure presents some unique challenges. This blog post will help you navigate those challenges and guide you through configuring a WireGuard instance on Oracle Cloud. We’ll discuss a… Read More »

The Drawbacks of Using std::vector as an Output Buffer in I/O Operations

By | March 20, 2023

In this short article, we will examine some non-obvious performance issues that can arise when using std::vector<char> as an output buffer for input-output operations. Specifically, we will discuss the consequences of using the resize and reserve methods and how their improper use can lead to undesirable outcomes. As we know, std::vector is a dynamic array that provides convenient… Read More »

How to Bypass Egypt’s WireGuard Ban

By | February 9, 2022

In 2021, the popularity of the WireGuard VPN protocol in Egypt was significant enough that it was added to the block list, causing frustration for customers of commercial VPN providers such as Cloudflare Warp+ and Mullvad Wireguard, as well as some corporate VPN users. Initial research suggests that the block list is specifically targeting the Handshake Initiate packets… Read More »