Domain Fronting

Tools

  • Psiphon: https://www.psiphon3.com/en/index.html
  • Meek: https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#meek

References

  • Introduction: https://www.andreafortuna.org/cybersecurity/privacy/domain-fronting-in-a-nutshell/
  • Usage in APT29: https://www.fireeye.com/blog/threat-research/2017/03/apt29_domain_frontin.html
  • Azure (Hardening Your Azure Domain Front): https://medium.com/@rvrsh3ll/hardening-your-azure-domain-front-7423b5ab4f64
  • A 101 on Domain Fronting: https://digi.ninja/blog/domain_fronting.php
  • Domain Fronting with CloudFront: https://digi.ninja/blog/cloudfront_example.php