affected?

[whoizit]

shadowsocks/shadowsocks-rust#292
txthinking/brook#708

[DuckSoft]

@nadoo It's AFFECTED.

PoC

open terminal one and run:

glider -listen ss://AEAD_CHACHA20_POLY1305:1@:11451 -verbose

then, open terminal two and run:

nc 127.0.0.1 11451

once connected, hold your Enter key on the keyboard, until the connection is automatically closed.

go back terminal one and check the output. it's something like this:

2020/12/15 03:45:28 server.go:58: [ss] failed to get target address: cipher: message authentication failed

boom.

references

• https://gfw.report/blog/gfw_shadowsocks/
• https://censorbib.nymity.ch/pdf/Frolov2020a.pdf

related issues

• Brook 服务端实现缺陷可能导致主动探测 txthinking/brook#708
• shadowsocks-rust 服务端实现缺陷可能导致主动探测 shadowsocks/shadowsocks-rust#292
• gost 的 Shadowsocks 服务端实现缺陷可能导致主动探测 ginuerzh/gost#683