aripath/arimando

AriMando is a Windows desktop application, written in Python, that provides a graphical interface for bypassing internet censorship. It targets regions where internet traffic is filtered through a technology called Deep Packet Inspection (DPI), which inspects network requests and blocks access to certain websites or services. The tool uses a technique called SNI-Spoofing combined with TCP/IP header manipulation to slip past that filtering layer. The application is not a standalone VPN. It works alongside a separate proxy client called V2rayN, which users are expected to already have running with Cloudflare configuration files. AriMando sits between that proxy client and the actual network, manipulating packet headers so the filtering system cannot correctly identify the destination. The README walks through the exact steps: run AriMando, click Connect, then adjust the V2rayN config to point at a local port AriMando opens. Beyond basic bypass functionality, the tool supports two additional scenarios. First, it handles Tun Mode, which tunnels all Windows traffic rather than just browser requests, and includes an automatic anti-loop system to prevent the network from getting into a routing cycle. Second, it supports hotspot sharing, meaning a laptop running AriMando can share an unrestricted connection with a phone or TV over Wi-Fi without requiring manual proxy settings on those devices. The interface includes live upload and download charts and is built to be used without touching the terminal. The core SNI-Spoofing engine was written by a separate developer called Patterniha, AriMando provides the graphical wrapper. The README states the project is for educational purposes only and puts responsibility for any use squarely on the person running it.