mirror of
https://github.com/bol-van/zapret2.git
synced 2026-03-14 06:13:09 +00:00
update docs
This commit is contained in:
bol-van
@@ -59,21 +59,21 @@
|
|||||||
- [Random Data Generation](#random-data-generation)
|
- [Random Data Generation](#random-data-generation)
|
||||||
- [brandom](#brandom)
|
- [brandom](#brandom)
|
||||||
- [Parsing](#parsing)
|
- [Parsing](#parsing)
|
||||||
- [parse\_hex](#parse_hex)
|
- [parse_hex](#parse_hex)
|
||||||
- [Cryptography](#cryptography)
|
- [Cryptography](#cryptography)
|
||||||
- [bcryptorandom](#bcryptorandom)
|
- [bcryptorandom](#bcryptorandom)
|
||||||
- [bxor,bor,band](#bxorborband)
|
- [bxor,bor,band](#bxorborband)
|
||||||
- [hash](#hash)
|
- [hash](#hash)
|
||||||
- [aes](#aes)
|
- [aes](#aes)
|
||||||
- [aes\_gcm](#aes_gcm)
|
- [aes_gcm](#aes_gcm)
|
||||||
- [aes\_ctr](#aes_ctr)
|
- [aes_ctr](#aes_ctr)
|
||||||
- [hkdf](#hkdf)
|
- [hkdf](#hkdf)
|
||||||
- [Compression](#compression)
|
- [Compression](#compression)
|
||||||
- [gunzip](#gunzip)
|
- [gunzip](#gunzip)
|
||||||
- [gzip](#gzip)
|
- [gzip](#gzip)
|
||||||
- [System functions](#system-functions)
|
- [System functions](#system-functions)
|
||||||
- [uname](#uname)
|
- [uname](#uname)
|
||||||
- [clock\_gettime](#clock_gettime)
|
- [clock_gettime](#clock_gettime)
|
||||||
- [getpid](#getpid)
|
- [getpid](#getpid)
|
||||||
- [stat](#stat)
|
- [stat](#stat)
|
||||||
- [time](#time)
|
- [time](#time)
|
||||||
@@ -82,23 +82,23 @@
|
|||||||
- [standard rawsend](#standard-rawsend)
|
- [standard rawsend](#standard-rawsend)
|
||||||
- [Dissection and reconstruction](#dissection-and-reconstruction)
|
- [Dissection and reconstruction](#dissection-and-reconstruction)
|
||||||
- [dissect](#dissect)
|
- [dissect](#dissect)
|
||||||
- [reconstruct\_dissect](#reconstruct_dissect)
|
- [reconstruct_dissect](#reconstruct_dissect)
|
||||||
- [reconstruct\_hdr](#reconstruct_hdr)
|
- [reconstruct_hdr](#reconstruct_hdr)
|
||||||
- [csum\_fix](#csum_fix)
|
- [csum_fix](#csum_fix)
|
||||||
- [conntrack](#conntrack)
|
- [conntrack](#conntrack)
|
||||||
- [Obtaining IP addresses](#obtaining-ip-addresses)
|
- [Obtaining IP addresses](#obtaining-ip-addresses)
|
||||||
- [Receiving and sending Packets](#receiving-and-sending-packets)
|
- [Receiving and sending Packets](#receiving-and-sending-packets)
|
||||||
- [rawsend](#rawsend)
|
- [rawsend](#rawsend)
|
||||||
- [raw\_packet](#raw_packet)
|
- [raw_packet](#raw_packet)
|
||||||
- [Working with payloads](#working-with-payloads)
|
- [Working with payloads](#working-with-payloads)
|
||||||
- [Markers](#markers)
|
- [Markers](#markers)
|
||||||
- [resolve\_pos](#resolve_pos)
|
- [resolve_pos](#resolve_pos)
|
||||||
- [tls\_mod](#tls_mod)
|
- [tls_mod](#tls_mod)
|
||||||
- [Instance execution management](#instance-execution-management)
|
- [Instance execution management](#instance-execution-management)
|
||||||
- [instance\_cutoff](#instance_cutoff)
|
- [instance_cutoff](#instance_cutoff)
|
||||||
- [lua\_cutoff](#lua_cutoff)
|
- [lua_cutoff](#lua_cutoff)
|
||||||
- [execution\_plan](#execution_plan)
|
- [execution_plan](#execution_plan)
|
||||||
- [execution\_plan\_cancel](#execution_plan_cancel)
|
- [execution_plan_cancel](#execution_plan_cancel)
|
||||||
- [zapret-lib.lua base function library](#zapret-liblua-base-function-library)
|
- [zapret-lib.lua base function library](#zapret-liblua-base-function-library)
|
||||||
- [Base desync functions](#base-desync-functions)
|
- [Base desync functions](#base-desync-functions)
|
||||||
- [luaexec](#luaexec)
|
- [luaexec](#luaexec)
|
||||||
@@ -106,16 +106,16 @@
|
|||||||
- [pktdebug](#pktdebug)
|
- [pktdebug](#pktdebug)
|
||||||
- [argdebug](#argdebug)
|
- [argdebug](#argdebug)
|
||||||
- [posdebug](#posdebug)
|
- [posdebug](#posdebug)
|
||||||
- [detect\_payload\_str](#detect_payload_str)
|
- [detect_payload_str](#detect_payload_str)
|
||||||
- [desync\_orchestrator\_example](#desync_orchestrator_example)
|
- [desync_orchestrator_example](#desync_orchestrator_example)
|
||||||
- [Utility functions](#utility-functions)
|
- [Utility functions](#utility-functions)
|
||||||
- [var\_debug](#var_debug)
|
- [var_debug](#var_debug)
|
||||||
- [deepcopy](#deepcopy)
|
- [deepcopy](#deepcopy)
|
||||||
- [logical\_xor](#logical_xor)
|
- [logical_xor](#logical_xor)
|
||||||
- [array\_search](#array_search)
|
- [array_search](#array_search)
|
||||||
- [String operations](#string-operations)
|
- [String operations](#string-operations)
|
||||||
- [in\_list](#in_list)
|
- [in_list](#in_list)
|
||||||
- [find\_next\_line](#find_next_line)
|
- [find_next_line](#find_next_line)
|
||||||
- [Raw string handling](#raw-string-handling)
|
- [Raw string handling](#raw-string-handling)
|
||||||
- [hex](#hex)
|
- [hex](#hex)
|
||||||
- [pattern](#pattern)
|
- [pattern](#pattern)
|
||||||
@@ -123,18 +123,18 @@
|
|||||||
- [TCP sequence number handling](#tcp-sequence-number-handling)
|
- [TCP sequence number handling](#tcp-sequence-number-handling)
|
||||||
- [Position handling](#position-handling)
|
- [Position handling](#position-handling)
|
||||||
- [Dissection](#dissection)
|
- [Dissection](#dissection)
|
||||||
- [dissect\_url](#dissect_url)
|
- [dissect_url](#dissect_url)
|
||||||
- [dissect\_nld](#dissect_nld)
|
- [dissect_nld](#dissect_nld)
|
||||||
- [dissect\_http](#dissect_http)
|
- [dissect_http](#dissect_http)
|
||||||
- [dissect\_tls](#dissect_tls)
|
- [dissect_tls](#dissect_tls)
|
||||||
- [Working with L3 and L4 protocol elements](#working-with-l3-and-l4-protocol-elements)
|
- [Working with L3 and L4 protocol elements](#working-with-l3-and-l4-protocol-elements)
|
||||||
- [find\_tcp\_options](#find_tcp_options)
|
- [find_tcp_options](#find_tcp_options)
|
||||||
- [ip6hdr](#ip6hdr)
|
- [ip6hdr](#ip6hdr)
|
||||||
- [ip protocol](#ip-protocol)
|
- [ip protocol](#ip-protocol)
|
||||||
- [packet\_len](#packet_len)
|
- [packet_len](#packet_len)
|
||||||
- [Working with hostnames](#working-with-hostnames)
|
- [Working with hostnames](#working-with-hostnames)
|
||||||
- [genhost](#genhost)
|
- [genhost](#genhost)
|
||||||
- [host\_ip](#host_ip)
|
- [host_ip](#host_ip)
|
||||||
- [File name and path operations](#file-name-and-path-operations)
|
- [File name and path operations](#file-name-and-path-operations)
|
||||||
- [Reading and writing Files](#reading-and-writing-files)
|
- [Reading and writing Files](#reading-and-writing-files)
|
||||||
- [Data compression](#data-compression)
|
- [Data compression](#data-compression)
|
||||||
@@ -143,29 +143,29 @@
|
|||||||
- [standard ipid](#standard-ipid)
|
- [standard ipid](#standard-ipid)
|
||||||
- [standard fooling](#standard-fooling)
|
- [standard fooling](#standard-fooling)
|
||||||
- [standard ipfrag](#standard-ipfrag)
|
- [standard ipfrag](#standard-ipfrag)
|
||||||
- [apply\_ip\_id](#apply_ip_id)
|
- [apply_ip_id](#apply_ip_id)
|
||||||
- [apply\_fooling](#apply_fooling)
|
- [apply_fooling](#apply_fooling)
|
||||||
- [ipfrag2](#ipfrag2)
|
- [ipfrag2](#ipfrag2)
|
||||||
- [wssize\_rewrite](#wssize_rewrite)
|
- [wssize_rewrite](#wssize_rewrite)
|
||||||
- [dis\_reverse](#dis_reverse)
|
- [dis_reverse](#dis_reverse)
|
||||||
- [IP addresses and interfaces](#ip-addresses-and-interfaces)
|
- [IP addresses and interfaces](#ip-addresses-and-interfaces)
|
||||||
- [Sending](#sending)
|
- [Sending](#sending)
|
||||||
- [rawsend\_dissect\_ipfrag](#rawsend_dissect_ipfrag)
|
- [rawsend_dissect_ipfrag](#rawsend_dissect_ipfrag)
|
||||||
- [rawsend\_dissect\_segmented](#rawsend_dissect_segmented)
|
- [rawsend_dissect_segmented](#rawsend_dissect_segmented)
|
||||||
- [rawsend\_payload\_segmented](#rawsend_payload_segmented)
|
- [rawsend_payload_segmented](#rawsend_payload_segmented)
|
||||||
- [Standard direction and payload filters](#standard-direction-and-payload-filters)
|
- [Standard direction and payload filters](#standard-direction-and-payload-filters)
|
||||||
- [Working with multi-packet payloads](#working-with-multi-packet-payloads)
|
- [Working with multi-packet payloads](#working-with-multi-packet-payloads)
|
||||||
- [Orchestration](#orchestration)
|
- [Orchestration](#orchestration)
|
||||||
- [instance\_cutoff\_shim](#instance_cutoff_shim)
|
- [instance_cutoff_shim](#instance_cutoff_shim)
|
||||||
- [cutoff\_shim\_check](#cutoff_shim_check)
|
- [cutoff_shim_check](#cutoff_shim_check)
|
||||||
- [apply\_arg\_prefix](#apply_arg_prefix)
|
- [apply_arg_prefix](#apply_arg_prefix)
|
||||||
- [apply\_execution\_plan](#apply_execution_plan)
|
- [apply_execution_plan](#apply_execution_plan)
|
||||||
- [verdict\_aggregate](#verdict_aggregate)
|
- [verdict_aggregate](#verdict_aggregate)
|
||||||
- [plan\_instance\_execute](#plan_instance_execute)
|
- [plan_instance_execute](#plan_instance_execute)
|
||||||
- [plan\_instance\_pop](#plan_instance_pop)
|
- [plan_instance_pop](#plan_instance_pop)
|
||||||
- [plan\_clear](#plan_clear)
|
- [plan_clear](#plan_clear)
|
||||||
- [orchestrate](#orchestrate)
|
- [orchestrate](#orchestrate)
|
||||||
- [replay\_execution\_plan](#replay_execution_plan)
|
- [replay_execution_plan](#replay_execution_plan)
|
||||||
- [zapret-antidpi.lua DPI attack program library](#zapret-antidpilua-dpi-attack-program-library)
|
- [zapret-antidpi.lua DPI attack program library](#zapret-antidpilua-dpi-attack-program-library)
|
||||||
- [Standard parameter sets](#standard-parameter-sets)
|
- [Standard parameter sets](#standard-parameter-sets)
|
||||||
- [standard direction](#standard-direction)
|
- [standard direction](#standard-direction)
|
||||||
@@ -175,22 +175,22 @@
|
|||||||
- [send](#send)
|
- [send](#send)
|
||||||
- [pktmod](#pktmod)
|
- [pktmod](#pktmod)
|
||||||
- [HTTP fooling](#http-fooling)
|
- [HTTP fooling](#http-fooling)
|
||||||
- [http\_hostcase](#http_hostcase)
|
- [http_hostcase](#http_hostcase)
|
||||||
- [http\_domcase](#http_domcase)
|
- [http_domcase](#http_domcase)
|
||||||
- [http\_methodeol](#http_methodeol)
|
- [http_methodeol](#http_methodeol)
|
||||||
- [http\_unixeol](#http_unixeol)
|
- [http_unixeol](#http_unixeol)
|
||||||
- [Window size replacement](#window-size-replacement)
|
- [Window size replacement](#window-size-replacement)
|
||||||
- [wsize](#wsize)
|
- [wsize](#wsize)
|
||||||
- [wssize](#wssize)
|
- [wssize](#wssize)
|
||||||
- [Fakes](#fakes)
|
- [Fakes](#fakes)
|
||||||
- [syndata](#syndata)
|
- [syndata](#syndata)
|
||||||
- [tls\_client\_hello\_clone](#tls_client_hello_clone)
|
- [tls_client_hello_clone](#tls_client_hello_clone)
|
||||||
- [fake](#fake)
|
- [fake](#fake)
|
||||||
- [rst](#rst)
|
- [rst](#rst)
|
||||||
- [TCP segmentation](#tcp-segmentation)
|
- [TCP segmentation](#tcp-segmentation)
|
||||||
- [multisplit](#multisplit)
|
- [multisplit](#multisplit)
|
||||||
- [multidisorder](#multidisorder)
|
- [multidisorder](#multidisorder)
|
||||||
- [multidisorder\_legacy](#multidisorder_legacy)
|
- [multidisorder_legacy](#multidisorder_legacy)
|
||||||
- [fakedsplit](#fakedsplit)
|
- [fakedsplit](#fakedsplit)
|
||||||
- [fakeddisorder](#fakeddisorder)
|
- [fakeddisorder](#fakeddisorder)
|
||||||
- [hostfakesplit](#hostfakesplit)
|
- [hostfakesplit](#hostfakesplit)
|
||||||
@@ -198,22 +198,22 @@
|
|||||||
- [oob](#oob)
|
- [oob](#oob)
|
||||||
- [UDP Fooling](#udp-fooling)
|
- [UDP Fooling](#udp-fooling)
|
||||||
- [udplen](#udplen)
|
- [udplen](#udplen)
|
||||||
- [dht\_dn](#dht_dn)
|
- [dht_dn](#dht_dn)
|
||||||
- [Other Functions](#other-functions)
|
- [Other Functions](#other-functions)
|
||||||
- [synack](#synack)
|
- [synack](#synack)
|
||||||
- [synack\_split](#synack_split)
|
- [synack_split](#synack_split)
|
||||||
- [zapret-auto.lua automation and orchestration library](#zapret-autolua-automation-and-orchestration-library)
|
- [zapret-auto.lua automation and orchestration library](#zapret-autolua-automation-and-orchestration-library)
|
||||||
- [State storage](#state-storage)
|
- [State storage](#state-storage)
|
||||||
- [automate\_conn\_record](#automate_conn_record)
|
- [automate_conn_record](#automate_conn_record)
|
||||||
- [standard\_hostkey](#standard_hostkey)
|
- [standard_hostkey](#standard_hostkey)
|
||||||
- [automate\_host\_record](#automate_host_record)
|
- [automate_host_record](#automate_host_record)
|
||||||
- [Handling successes and failures](#handling-successes-and-failures)
|
- [Handling successes and failures](#handling-successes-and-failures)
|
||||||
- [automate\_failure\_counter](#automate_failure_counter)
|
- [automate_failure_counter](#automate_failure_counter)
|
||||||
- [automate\_failure\_counter\_reset](#automate_failure_counter_reset)
|
- [automate_failure_counter_reset](#automate_failure_counter_reset)
|
||||||
- [Success and failure detection](#success-and-failure-detection)
|
- [Success and failure detection](#success-and-failure-detection)
|
||||||
- [automate\_failure\_check](#automate_failure_check)
|
- [automate_failure_check](#automate_failure_check)
|
||||||
- [standard\_success\_detector](#standard_success_detector)
|
- [standard_success_detector](#standard_success_detector)
|
||||||
- [standard\_failure\_detector](#standard_failure_detector)
|
- [standard_failure_detector](#standard_failure_detector)
|
||||||
- [Orchestrators](#orchestrators)
|
- [Orchestrators](#orchestrators)
|
||||||
- [circular](#circular)
|
- [circular](#circular)
|
||||||
- [repeater](#repeater)
|
- [repeater](#repeater)
|
||||||
@@ -221,10 +221,11 @@
|
|||||||
- [per_instance_condition](#per_instance_condition)
|
- [per_instance_condition](#per_instance_condition)
|
||||||
- [stopif](#stopif)
|
- [stopif](#stopif)
|
||||||
- [iff functions](#iff-functions)
|
- [iff functions](#iff-functions)
|
||||||
- [cond\_true](#cond_true)
|
- [cond_true](#cond_true)
|
||||||
- [cond\_false](#cond_false)
|
- [cond_false](#cond_false)
|
||||||
- [cond\_random](#cond_random)
|
- [cond_random](#cond_random)
|
||||||
- [cond\_payload\_str](#cond_payload_str)
|
- [cond_payload_str](#cond_payload_str)
|
||||||
|
- [cond_tcp_has_ts](#cond_tcp_has_ts)
|
||||||
- [Auxiliary programs](#auxiliary-programs)
|
- [Auxiliary programs](#auxiliary-programs)
|
||||||
- [ip2net](#ip2net)
|
- [ip2net](#ip2net)
|
||||||
- [mdig](#mdig)
|
- [mdig](#mdig)
|
||||||
@@ -248,16 +249,16 @@
|
|||||||
- [List management system](#list-management-system)
|
- [List management system](#list-management-system)
|
||||||
- [Standard list files](#standard-list-files)
|
- [Standard list files](#standard-list-files)
|
||||||
- [ipset scripts](#ipset-scripts)
|
- [ipset scripts](#ipset-scripts)
|
||||||
- [clear\_lists.sh](#clear_listssh)
|
- [clear_lists.sh](#clear_listssh)
|
||||||
- [create\_ipset.sh](#create_ipsetsh)
|
- [create_ipset.sh](#create_ipsetsh)
|
||||||
- [get\_config.sh](#get_configsh)
|
- [get_config.sh](#get_configsh)
|
||||||
- [get\_user.sh](#get_usersh)
|
- [get_user.sh](#get_usersh)
|
||||||
- [get\_ipban.sh](#get_ipbansh)
|
- [get_ipban.sh](#get_ipbansh)
|
||||||
- [get\_exclude.sh](#get_excludesh)
|
- [get_exclude.sh](#get_excludesh)
|
||||||
- [get\_antifilter\_\*.sh](#get_antifilter_sh)
|
- [get_antifilter_*.sh](#get_antifilter_sh)
|
||||||
- [get\_antizapret\_domains.sh](#get_antizapret_domainssh)
|
- [get_antizapret_domains.sh](#get_antizapret_domainssh)
|
||||||
- [get\_refilter\_\*.sh](#get_refilter_sh)
|
- [get_refilter_*.sh](#get_refilter_sh)
|
||||||
- [get\_reestr\_\*.sh](#get_reestr_sh)
|
- [get_reestr_*.sh](#get_reestr_sh)
|
||||||
- [ipban system](#ipban-system)
|
- [ipban system](#ipban-system)
|
||||||
- [Init scripts](#init-scripts)
|
- [Init scripts](#init-scripts)
|
||||||
- [Firewall integration](#firewall-integration)
|
- [Firewall integration](#firewall-integration)
|
||||||
@@ -4453,6 +4454,14 @@ function cond_payload_str(desync)
|
|||||||
Returns `true` if the substring `pattern` is present in `desync.dis.payload`.
|
Returns `true` if the substring `pattern` is present in `desync.dis.payload`.
|
||||||
This is a basic signature detector. If the C code does not recognize the protocol you need, you can write your own signature detector and run subsequent instances under a `condition` orchestrator using your detector as the `iff` function.
|
This is a basic signature detector. If the C code does not recognize the protocol you need, you can write your own signature detector and run subsequent instances under a `condition` orchestrator using your detector as the `iff` function.
|
||||||
|
|
||||||
|
#### cond_tcp_ts
|
||||||
|
|
||||||
|
```
|
||||||
|
function cond_tcp_ts(desync)
|
||||||
|
```
|
||||||
|
|
||||||
|
Returns `true` if the dissect is tcp and has tcp timestamp option.
|
||||||
|
|
||||||
|
|
||||||
# Auxiliary programs
|
# Auxiliary programs
|
||||||
|
|
||||||
|
|||||||
157
docs/manual.md
157
docs/manual.md
@@ -56,21 +56,21 @@
|
|||||||
- [Генерация случайных данных](#генерация-случайных-данных)
|
- [Генерация случайных данных](#генерация-случайных-данных)
|
||||||
- [brandom](#brandom)
|
- [brandom](#brandom)
|
||||||
- [Парсинг](#парсинг)
|
- [Парсинг](#парсинг)
|
||||||
- [parse\_hex](#parse_hex)
|
- [parse_hex](#parse_hex)
|
||||||
- [Криптография](#криптография)
|
- [Криптография](#криптография)
|
||||||
- [bcryptorandom](#bcryptorandom)
|
- [bcryptorandom](#bcryptorandom)
|
||||||
- [bxor,bor,band](#bxorborband)
|
- [bxor,bor,band](#bxorborband)
|
||||||
- [hash](#hash)
|
- [hash](#hash)
|
||||||
- [aes](#aes)
|
- [aes](#aes)
|
||||||
- [aes\_gcm](#aes_gcm)
|
- [aes_gcm](#aes_gcm)
|
||||||
- [aes\_ctr](#aes_ctr)
|
- [aes_ctr](#aes_ctr)
|
||||||
- [hkdf](#hkdf)
|
- [hkdf](#hkdf)
|
||||||
- [Компрессия](#компрессия)
|
- [Компрессия](#компрессия)
|
||||||
- [gunzip](#gunzip)
|
- [gunzip](#gunzip)
|
||||||
- [gzip](#gzip)
|
- [gzip](#gzip)
|
||||||
- [Системные функции](#системные-функции)
|
- [Системные функции](#системные-функции)
|
||||||
- [uname](#uname)
|
- [uname](#uname)
|
||||||
- [clock\_gettime](#clock_gettime)
|
- [clock_gettime](#clock_gettime)
|
||||||
- [getpid](#getpid)
|
- [getpid](#getpid)
|
||||||
- [stat](#stat)
|
- [stat](#stat)
|
||||||
- [time](#time)
|
- [time](#time)
|
||||||
@@ -79,23 +79,23 @@
|
|||||||
- [standard rawsend](#standard-rawsend)
|
- [standard rawsend](#standard-rawsend)
|
||||||
- [Диссекция и реконструкция](#диссекция-и-реконструкция)
|
- [Диссекция и реконструкция](#диссекция-и-реконструкция)
|
||||||
- [dissect](#dissect)
|
- [dissect](#dissect)
|
||||||
- [reconstruct\_dissect](#reconstruct_dissect)
|
- [reconstruct_dissect](#reconstruct_dissect)
|
||||||
- [reconstruct\_hdr](#reconstruct_hdr)
|
- [reconstruct_hdr](#reconstruct_hdr)
|
||||||
- [csum\_fix](#csum_fix)
|
- [csum_fix](#csum_fix)
|
||||||
- [conntrack](#conntrack)
|
- [conntrack](#conntrack)
|
||||||
- [Получение ip адресов](#получение-ip-адресов)
|
- [Получение ip адресов](#получение-ip-адресов)
|
||||||
- [Прием и отсылка пакетов](#прием-и-отсылка-пакетов)
|
- [Прием и отсылка пакетов](#прием-и-отсылка-пакетов)
|
||||||
- [rawsend](#rawsend)
|
- [rawsend](#rawsend)
|
||||||
- [raw\_packet](#raw_packet)
|
- [raw_packet](#raw_packet)
|
||||||
- [Работа с пейлоадами](#работа-с-пейлоадами)
|
- [Работа с пейлоадами](#работа-с-пейлоадами)
|
||||||
- [маркеры](#маркеры)
|
- [маркеры](#маркеры)
|
||||||
- [resolve\_pos](#resolve_pos)
|
- [resolve_pos](#resolve_pos)
|
||||||
- [tls\_mod](#tls_mod)
|
- [tls_mod](#tls_mod)
|
||||||
- [Управление выполнением инстансов](#управление-выполнением-инстансов)
|
- [Управление выполнением инстансов](#управление-выполнением-инстансов)
|
||||||
- [instance\_cutoff](#instance_cutoff)
|
- [instance_cutoff](#instance_cutoff)
|
||||||
- [lua\_cutoff](#lua_cutoff)
|
- [lua_cutoff](#lua_cutoff)
|
||||||
- [execution\_plan](#execution_plan)
|
- [execution_plan](#execution_plan)
|
||||||
- [execution\_plan\_cancel](#execution_plan_cancel)
|
- [execution_plan_cancel](#execution_plan_cancel)
|
||||||
- [Библиотека базовых функций zapret-lib.lua](#библиотека-базовых-функций-zapret-liblua)
|
- [Библиотека базовых функций zapret-lib.lua](#библиотека-базовых-функций-zapret-liblua)
|
||||||
- [Базовые desync функции](#базовые-desync-функции)
|
- [Базовые desync функции](#базовые-desync-функции)
|
||||||
- [luaexec](#luaexec)
|
- [luaexec](#luaexec)
|
||||||
@@ -103,16 +103,16 @@
|
|||||||
- [pktdebug](#pktdebug)
|
- [pktdebug](#pktdebug)
|
||||||
- [argdebug](#argdebug)
|
- [argdebug](#argdebug)
|
||||||
- [posdebug](#posdebug)
|
- [posdebug](#posdebug)
|
||||||
- [detect\_payload\_str](#detect_payload_str)
|
- [detect_payload_str](#detect_payload_str)
|
||||||
- [desync\_orchestrator\_example](#desync_orchestrator_example)
|
- [desync_orchestrator_example](#desync_orchestrator_example)
|
||||||
- [Служебные функции](#служебные-функции)
|
- [Служебные функции](#служебные-функции)
|
||||||
- [var\_debug](#var_debug)
|
- [var_debug](#var_debug)
|
||||||
- [deepcopy](#deepcopy)
|
- [deepcopy](#deepcopy)
|
||||||
- [logical\_xor](#logical_xor)
|
- [logical_xor](#logical_xor)
|
||||||
- [array\_search](#array_search)
|
- [array_search](#array_search)
|
||||||
- [Работа со строками](#работа-со-строками)
|
- [Работа со строками](#работа-со-строками)
|
||||||
- [in\_list](#in_list)
|
- [in_list](#in_list)
|
||||||
- [find\_next\_line](#find_next_line)
|
- [find_next_line](#find_next_line)
|
||||||
- [Обслуживание raw string](#обслуживание-raw-string)
|
- [Обслуживание raw string](#обслуживание-raw-string)
|
||||||
- [hex](#hex)
|
- [hex](#hex)
|
||||||
- [pattern](#pattern)
|
- [pattern](#pattern)
|
||||||
@@ -120,18 +120,18 @@
|
|||||||
- [Обслуживание tcp sequence numbers](#обслуживание-tcp-sequence-numbers)
|
- [Обслуживание tcp sequence numbers](#обслуживание-tcp-sequence-numbers)
|
||||||
- [Обслуживание позиций](#обслуживание-позиций)
|
- [Обслуживание позиций](#обслуживание-позиций)
|
||||||
- [Диссекция](#диссекция)
|
- [Диссекция](#диссекция)
|
||||||
- [dissect\_url](#dissect_url)
|
- [dissect_url](#dissect_url)
|
||||||
- [dissect\_nld](#dissect_nld)
|
- [dissect_nld](#dissect_nld)
|
||||||
- [dissect\_http](#dissect_http)
|
- [dissect_http](#dissect_http)
|
||||||
- [dissect\_tls](#dissect_tls)
|
- [dissect_tls](#dissect_tls)
|
||||||
- [Работа с элементами L3 и L4 протоколов](#работа-с-элементами-l3-и-l4-протоколов)
|
- [Работа с элементами L3 и L4 протоколов](#работа-с-элементами-l3-и-l4-протоколов)
|
||||||
- [find\_tcp\_options](#find_tcp_options)
|
- [find_tcp_options](#find_tcp_options)
|
||||||
- [ip6hdr](#ip6hdr)
|
- [ip6hdr](#ip6hdr)
|
||||||
- [ip protocol](#ip-protocol)
|
- [ip protocol](#ip-protocol)
|
||||||
- [packet\_len](#packet_len)
|
- [packet_len](#packet_len)
|
||||||
- [Работа с именами хостов](#работа-с-именами-хостов)
|
- [Работа с именами хостов](#работа-с-именами-хостов)
|
||||||
- [genhost](#genhost)
|
- [genhost](#genhost)
|
||||||
- [host\_ip](#host_ip)
|
- [host_ip](#host_ip)
|
||||||
- [Операции с именами файлов и путями](#операции-с-именами-файлов-и-путями)
|
- [Операции с именами файлов и путями](#операции-с-именами-файлов-и-путями)
|
||||||
- [Чтение и запись файлов](#чтение-и-запись-файлов)
|
- [Чтение и запись файлов](#чтение-и-запись-файлов)
|
||||||
- [Компрессия данных](#компрессия-данных)
|
- [Компрессия данных](#компрессия-данных)
|
||||||
@@ -140,29 +140,29 @@
|
|||||||
- [standard ipid](#standard-ipid)
|
- [standard ipid](#standard-ipid)
|
||||||
- [standard fooling](#standard-fooling)
|
- [standard fooling](#standard-fooling)
|
||||||
- [standard ipfrag](#standard-ipfrag)
|
- [standard ipfrag](#standard-ipfrag)
|
||||||
- [apply\_ip\_id](#apply_ip_id)
|
- [apply_ip_id](#apply_ip_id)
|
||||||
- [apply\_fooling](#apply_fooling)
|
- [apply_fooling](#apply_fooling)
|
||||||
- [ipfrag2](#ipfrag2)
|
- [ipfrag2](#ipfrag2)
|
||||||
- [wssize\_rewrite](#wssize_rewrite)
|
- [wssize_rewrite](#wssize_rewrite)
|
||||||
- [dis\_reverse](#dis_reverse)
|
- [dis_reverse](#dis_reverse)
|
||||||
- [IP адреса и интерфейсы](#ip-адреса-и-интерфейсы)
|
- [IP адреса и интерфейсы](#ip-адреса-и-интерфейсы)
|
||||||
- [Отсылка](#отсылка)
|
- [Отсылка](#отсылка)
|
||||||
- [rawsend\_dissect\_ipfrag](#rawsend_dissect_ipfrag)
|
- [rawsend_dissect_ipfrag](#rawsend_dissect_ipfrag)
|
||||||
- [rawsend\_dissect\_segmented](#rawsend_dissect_segmented)
|
- [rawsend_dissect_segmented](#rawsend_dissect_segmented)
|
||||||
- [rawsend\_payload\_segmented](#rawsend_payload_segmented)
|
- [rawsend_payload_segmented](#rawsend_payload_segmented)
|
||||||
- [Стандартные фильтры direction и payload](#стандартные-фильтры-direction-и-payload)
|
- [Стандартные фильтры direction и payload](#стандартные-фильтры-direction-и-payload)
|
||||||
- [Работа с многопакетными пейлоадам](#работа-с-многопакетными-пейлоадам)
|
- [Работа с многопакетными пейлоадам](#работа-с-многопакетными-пейлоадам)
|
||||||
- [Оркестрация](#оркестрация)
|
- [Оркестрация](#оркестрация)
|
||||||
- [instance\_cutoff\_shim](#instance_cutoff_shim)
|
- [instance_cutoff_shim](#instance_cutoff_shim)
|
||||||
- [cutoff\_shim\_check](#cutoff_shim_check)
|
- [cutoff_shim_check](#cutoff_shim_check)
|
||||||
- [apply\_arg\_prefix](#apply_arg_prefix)
|
- [apply_arg_prefix](#apply_arg_prefix)
|
||||||
- [apply\_execution\_plan](#apply_execution_plan)
|
- [apply_execution_plan](#apply_execution_plan)
|
||||||
- [verdict\_aggregate](#verdict_aggregate)
|
- [verdict_aggregate](#verdict_aggregate)
|
||||||
- [plan\_instance\_execute](#plan_instance_execute)
|
- [plan_instance_execute](#plan_instance_execute)
|
||||||
- [plan\_instance\_pop](#plan_instance_pop)
|
- [plan_instance_pop](#plan_instance_pop)
|
||||||
- [plan\_clear](#plan_clear)
|
- [plan_clear](#plan_clear)
|
||||||
- [orchestrate](#orchestrate)
|
- [orchestrate](#orchestrate)
|
||||||
- [replay\_execution\_plan](#replay_execution_plan)
|
- [replay_execution_plan](#replay_execution_plan)
|
||||||
- [Библиотека программ атаки на DPI zapret-antidpi.lua](#библиотека-программ-атаки-на-dpi-zapret-antidpilua)
|
- [Библиотека программ атаки на DPI zapret-antidpi.lua](#библиотека-программ-атаки-на-dpi-zapret-antidpilua)
|
||||||
- [Стандартные наборы параметров](#стандартные-наборы-параметров)
|
- [Стандартные наборы параметров](#стандартные-наборы-параметров)
|
||||||
- [standard direction](#standard-direction)
|
- [standard direction](#standard-direction)
|
||||||
@@ -172,22 +172,22 @@
|
|||||||
- [send](#send)
|
- [send](#send)
|
||||||
- [pktmod](#pktmod)
|
- [pktmod](#pktmod)
|
||||||
- [Дурение http](#дурение-http)
|
- [Дурение http](#дурение-http)
|
||||||
- [http\_hostcase](#http_hostcase)
|
- [http_hostcase](#http_hostcase)
|
||||||
- [http\_domcase](#http_domcase)
|
- [http_domcase](#http_domcase)
|
||||||
- [http\_methodeol](#http_methodeol)
|
- [http_methodeol](#http_methodeol)
|
||||||
- [http\_unixeol](#http_unixeol)
|
- [http_unixeol](#http_unixeol)
|
||||||
- [Замена window size](#замена-window-size)
|
- [Замена window size](#замена-window-size)
|
||||||
- [wsize](#wsize)
|
- [wsize](#wsize)
|
||||||
- [wssize](#wssize)
|
- [wssize](#wssize)
|
||||||
- [Фейки](#фейки)
|
- [Фейки](#фейки)
|
||||||
- [syndata](#syndata)
|
- [syndata](#syndata)
|
||||||
- [tls\_client\_hello\_clone](#tls_client_hello_clone)
|
- [tls_client_hello_clone](#tls_client_hello_clone)
|
||||||
- [fake](#fake)
|
- [fake](#fake)
|
||||||
- [rst](#rst)
|
- [rst](#rst)
|
||||||
- [TCP сегментация](#tcp-сегментация)
|
- [TCP сегментация](#tcp-сегментация)
|
||||||
- [multisplit](#multisplit)
|
- [multisplit](#multisplit)
|
||||||
- [multidisorder](#multidisorder)
|
- [multidisorder](#multidisorder)
|
||||||
- [multidisorder\_legacy](#multidisorder_legacy)
|
- [multidisorder_legacy](#multidisorder_legacy)
|
||||||
- [fakedsplit](#fakedsplit)
|
- [fakedsplit](#fakedsplit)
|
||||||
- [fakeddisorder](#fakeddisorder)
|
- [fakeddisorder](#fakeddisorder)
|
||||||
- [hostfakesplit](#hostfakesplit)
|
- [hostfakesplit](#hostfakesplit)
|
||||||
@@ -195,22 +195,22 @@
|
|||||||
- [oob](#oob)
|
- [oob](#oob)
|
||||||
- [Дурение udp](#дурение-udp)
|
- [Дурение udp](#дурение-udp)
|
||||||
- [udplen](#udplen)
|
- [udplen](#udplen)
|
||||||
- [dht\_dn](#dht_dn)
|
- [dht_dn](#dht_dn)
|
||||||
- [Другие функции](#другие-функции)
|
- [Другие функции](#другие-функции)
|
||||||
- [synack](#synack)
|
- [synack](#synack)
|
||||||
- [synack\_split](#synack_split)
|
- [synack_split](#synack_split)
|
||||||
- [Библиотека программ автоматизации и оркестрации zapret-auto.lua](#библиотека-программ-автоматизации-и-оркестрации-zapret-autolua)
|
- [Библиотека программ автоматизации и оркестрации zapret-auto.lua](#библиотека-программ-автоматизации-и-оркестрации-zapret-autolua)
|
||||||
- [Хранилище состояний](#хранилище-состояний)
|
- [Хранилище состояний](#хранилище-состояний)
|
||||||
- [automate\_conn\_record](#automate_conn_record)
|
- [automate_conn_record](#automate_conn_record)
|
||||||
- [standard\_hostkey](#standard_hostkey)
|
- [standard_hostkey](#standard_hostkey)
|
||||||
- [automate\_host\_record](#automate_host_record)
|
- [automate_host_record](#automate_host_record)
|
||||||
- [Обслуживание удач и неудач](#обслуживание-удач-и-неудач)
|
- [Обслуживание удач и неудач](#обслуживание-удач-и-неудач)
|
||||||
- [automate\_failure\_counter](#automate_failure_counter)
|
- [automate_failure_counter](#automate_failure_counter)
|
||||||
- [automate\_failure\_counter\_reset](#automate_failure_counter_reset)
|
- [automate_failure_counter_reset](#automate_failure_counter_reset)
|
||||||
- [Детекция удач и неудач](#детекция-удач-и-неудач)
|
- [Детекция удач и неудач](#детекция-удач-и-неудач)
|
||||||
- [automate\_failure\_check](#automate_failure_check)
|
- [automate_failure_check](#automate_failure_check)
|
||||||
- [standard\_success\_detector](#standard_success_detector)
|
- [standard_success_detector](#standard_success_detector)
|
||||||
- [standard\_failure\_detector](#standard_failure_detector)
|
- [standard_failure_detector](#standard_failure_detector)
|
||||||
- [Оркестраторы](#оркестраторы)
|
- [Оркестраторы](#оркестраторы)
|
||||||
- [circular](#circular)
|
- [circular](#circular)
|
||||||
- [repeater](#repeater)
|
- [repeater](#repeater)
|
||||||
@@ -218,10 +218,11 @@
|
|||||||
- [per_instance_condition](#per_instance_condition)
|
- [per_instance_condition](#per_instance_condition)
|
||||||
- [stopif](#stopif)
|
- [stopif](#stopif)
|
||||||
- [iff функции](#iff-функции)
|
- [iff функции](#iff-функции)
|
||||||
- [cond\_true](#cond_true)
|
- [cond_true](#cond_true)
|
||||||
- [cond\_false](#cond_false)
|
- [cond_false](#cond_false)
|
||||||
- [cond\_random](#cond_random)
|
- [cond_random](#cond_random)
|
||||||
- [cond\_payload\_str](#cond_payload_str)
|
- [cond_payload_str](#cond_payload_str)
|
||||||
|
- [cond_tcp_has_ts](#cond_tcp_has_ts)
|
||||||
- [Вспомогательные программы](#вспомогательные-программы)
|
- [Вспомогательные программы](#вспомогательные-программы)
|
||||||
- [ip2net](#ip2net)
|
- [ip2net](#ip2net)
|
||||||
- [mdig](#mdig)
|
- [mdig](#mdig)
|
||||||
@@ -245,16 +246,16 @@
|
|||||||
- [Система ведения листов](#система-ведения-листов)
|
- [Система ведения листов](#система-ведения-листов)
|
||||||
- [Стандартные файлы листов](#стандартные-файлы-листов)
|
- [Стандартные файлы листов](#стандартные-файлы-листов)
|
||||||
- [Скрипты ipset](#скрипты-ipset)
|
- [Скрипты ipset](#скрипты-ipset)
|
||||||
- [clear\_lists.sh](#clear_listssh)
|
- [clear_lists.sh](#clear_listssh)
|
||||||
- [create\_ipset.sh](#create_ipsetsh)
|
- [create_ipset.sh](#create_ipsetsh)
|
||||||
- [get\_config.sh](#get_configsh)
|
- [get_config.sh](#get_configsh)
|
||||||
- [get\_user.sh](#get_usersh)
|
- [get_user.sh](#get_usersh)
|
||||||
- [get\_ipban.sh](#get_ipbansh)
|
- [get_ipban.sh](#get_ipbansh)
|
||||||
- [get\_exclude.sh](#get_excludesh)
|
- [get_exclude.sh](#get_excludesh)
|
||||||
- [get\_antifilter\_\*.sh](#get_antifilter_sh)
|
- [get_antifilter_*.sh](#get_antifilter_sh)
|
||||||
- [get\_antizapret\_domains.sh](#get_antizapret_domainssh)
|
- [get_antizapret_domains.sh](#get_antizapret_domainssh)
|
||||||
- [get\_refilter\_\*.sh](#get_refilter_sh)
|
- [get_refilter_*.sh](#get_refilter_sh)
|
||||||
- [get\_reestr\_\*.sh](#get_reestr_sh)
|
- [get_reestr_*.sh](#get_reestr_sh)
|
||||||
- [Система ipban](#система-ipban)
|
- [Система ipban](#система-ipban)
|
||||||
- [Стартовые скрипты](#стартовые-скрипты)
|
- [Стартовые скрипты](#стартовые-скрипты)
|
||||||
- [Интеграция с firewall](#интеграция-с-firewall)
|
- [Интеграция с firewall](#интеграция-с-firewall)
|
||||||
@@ -4632,6 +4633,14 @@ function cond_payload_str(desync)
|
|||||||
Возвращает true, если в desync.dis.payload присутствует подстрока pattern.
|
Возвращает true, если в desync.dis.payload присутствует подстрока pattern.
|
||||||
Это простейший сигнатурый детектор. Если C код не распознает нужный вам протокол, вы можете написать свой сигнатурный детектор и запускать последующие инстансы под оркестратором condition с вашим детектором в качестве iff.
|
Это простейший сигнатурый детектор. Если C код не распознает нужный вам протокол, вы можете написать свой сигнатурный детектор и запускать последующие инстансы под оркестратором condition с вашим детектором в качестве iff.
|
||||||
|
|
||||||
|
#### cond_tcp_ts
|
||||||
|
|
||||||
|
```
|
||||||
|
function cond_tcp_ts(desync)
|
||||||
|
```
|
||||||
|
|
||||||
|
Возвращает true, если диссект является tcp и присутствует timestamp tcp option.
|
||||||
|
|
||||||
# Вспомогательные программы
|
# Вспомогательные программы
|
||||||
|
|
||||||
## ip2net
|
## ip2net
|
||||||
|
|||||||
Reference in New Issue
Block a user