Domain Fronting

Tools

• Psiphon: https://www.psiphon3.com/en/index.html
• Meek: https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#meek

References

• Introduction: https://www.andreafortuna.org/cybersecurity/privacy/domain-fronting-in-a-nutshell/
• Usage in APT29: https://www.fireeye.com/blog/threat-research/2017/03/apt29_domain_frontin.html
• Azure (Hardening Your Azure Domain Front): https://medium.com/@rvrsh3ll/hardening-your-azure-domain-front-7423b5ab4f64
• A 101 on Domain Fronting: https://digi.ninja/blog/domain_fronting.php
• Domain Fronting with CloudFront: https://digi.ninja/blog/cloudfront_example.php