Initial release: ghost_protocol privacy toolkit

2026-03-04 09:13:16 -05:00
commit 973cede31f
99 changed files with 12158 additions and 0 deletions
@@ -0,0 +1,69 @@
+# Double-Hop OpenVPN Configuration Template
+# Chain two VPN servers for additional anonymity layer
+# Replace %%VARIABLES%% with actual values before use
+#
+# Usage: Copy and fill in variables, then:
+#   sudo openvpn --config double-hop.ovpn
+
+# ─── First Hop (Entry Server) ─────────────────────────────────────────────────
+# This is the server your ISP sees you connecting to
+
+client
+dev tun
+proto %%PROTO_1%%
+remote %%SERVER_1%% %%PORT_1%%
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+
+# Authentication
+auth-user-pass %%AUTH_FILE_1%%
+ca %%CA_FILE_1%%
+
+# Security
+cipher AES-256-GCM
+auth SHA512
+tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
+tls-version-min 1.2
+remote-cert-tls server
+
+# Routing — send all traffic through VPN
+redirect-gateway def1
+dhcp-option DNS 10.8.0.1
+
+# Keepalive
+keepalive 10 60
+ping-timer-rem
+
+# Logging
+verb 3
+mute 10
+
+# ─── Second Hop Configuration ─────────────────────────────────────────────────
+# After first VPN is established, launch second hop:
+#
+#   sudo openvpn --config hop2.ovpn --route-nopull \
+#       --route %%SERVER_2%% 255.255.255.255 net_gateway
+#
+# Where hop2.ovpn contains:
+#   client
+#   dev tun1
+#   proto %%PROTO_2%%
+#   remote %%SERVER_2%% %%PORT_2%%
+#   auth-user-pass %%AUTH_FILE_2%%
+#   ca %%CA_FILE_2%%
+#   cipher AES-256-GCM
+#   redirect-gateway def1
+
+# ─── Variables Reference ───────────────────────────────────────────────────────
+# %%SERVER_1%%    — First hop IP/hostname
+# %%PORT_1%%      — First hop port (e.g. 1194, 443)
+# %%PROTO_1%%     — First hop protocol (udp/tcp)
+# %%AUTH_FILE_1%% — First hop credentials file
+# %%CA_FILE_1%%   — First hop CA certificate
+# %%SERVER_2%%    — Second hop IP/hostname
+# %%PORT_2%%      — Second hop port
+# %%PROTO_2%%     — Second hop protocol
+# %%AUTH_FILE_2%% — Second hop credentials file
+# %%CA_FILE_2%%   — Second hop CA certificate
@@ -0,0 +1,72 @@
+# WireGuard Multi-Hop Configuration Template
+# Chain WireGuard tunnels for additional anonymity
+# Replace %%VARIABLES%% with actual values
+#
+# Architecture:
+#   You → wg0 (Hop 1) → wg1 (Hop 2) → Internet
+#
+# Usage:
+#   sudo cp this-file /etc/wireguard/wg0.conf  (fill in variables)
+#   sudo wg-quick up wg0
+#   sudo wg-quick up wg1
+
+# ═══════════════════════════════════════════════════════════════════════════════
+# HOP 1: /etc/wireguard/wg0.conf — Entry tunnel (your ISP sees this)
+# ═══════════════════════════════════════════════════════════════════════════════
+
+[Interface]
+PrivateKey = %%PRIVATE_KEY_1%%
+Address = %%TUNNEL_IP_1%%/32
+DNS = %%DNS_1%%
+# MTU adjustment for encapsulation overhead
+MTU = 1380
+
+# Post-routing to allow hop 2 through hop 1
+PostUp = ip rule add from %%TUNNEL_IP_2%% table 200; ip route add default via %%GATEWAY_1%% table 200
+PostDown = ip rule del from %%TUNNEL_IP_2%% table 200; ip route del default via %%GATEWAY_1%% table 200
+
+[Peer]
+PublicKey = %%PUBLIC_KEY_1%%
+PresharedKey = %%PSK_1%%
+Endpoint = %%ENDPOINT_1%%:%%PORT_1%%
+AllowedIPs = 0.0.0.0/0, ::/0
+PersistentKeepalive = 25
+
+# ═══════════════════════════════════════════════════════════════════════════════
+# HOP 2: /etc/wireguard/wg1.conf — Exit tunnel (internet sees this)
+# ═══════════════════════════════════════════════════════════════════════════════
+#
+# [Interface]
+# PrivateKey = %%PRIVATE_KEY_2%%
+# Address = %%TUNNEL_IP_2%%/32
+# DNS = %%DNS_2%%
+# MTU = 1340
+# # Route this tunnel's traffic through wg0
+# Table = off
+# PostUp = ip rule add from %%TUNNEL_IP_2%% table 200
+# PostDown = ip rule del from %%TUNNEL_IP_2%% table 200
+#
+# [Peer]
+# PublicKey = %%PUBLIC_KEY_2%%
+# PresharedKey = %%PSK_2%%
+# Endpoint = %%ENDPOINT_2%%:%%PORT_2%%
+# AllowedIPs = 0.0.0.0/0, ::/0
+# PersistentKeepalive = 25
+
+# ─── Variables Reference ───────────────────────────────────────────────────────
+# %%PRIVATE_KEY_1%%  — Your private key for hop 1 (wg genkey)
+# %%PUBLIC_KEY_1%%   — Hop 1 server's public key
+# %%PSK_1%%          — Preshared key for hop 1 (wg genpsk)
+# %%ENDPOINT_1%%     — Hop 1 server IP/hostname
+# %%PORT_1%%         — Hop 1 server port (default: 51820)
+# %%TUNNEL_IP_1%%    — Your assigned tunnel IP on hop 1
+# %%GATEWAY_1%%      — Hop 1 internal gateway IP
+# %%DNS_1%%          — DNS server for hop 1
+#
+# %%PRIVATE_KEY_2%%  — Your private key for hop 2
+# %%PUBLIC_KEY_2%%   — Hop 2 server's public key
+# %%PSK_2%%          — Preshared key for hop 2
+# %%ENDPOINT_2%%     — Hop 2 server IP/hostname (reachable via hop 1)
+# %%PORT_2%%         — Hop 2 server port
+# %%TUNNEL_IP_2%%    — Your assigned tunnel IP on hop 2
+# %%DNS_2%%          — DNS server for hop 2