yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] DenyDarko:
Hey there.

I was reading about the process blocking graph.facebook with the certificate on the original post.

I'm using the DNS servers, install the certificate, but the above-mentioned website is still normally accessible.

Is that normal behavior?
[Android Software/Hacking General [Developers Only]] MrT69:
I have seen that it is possible to block it on PC and Desktop environments within a special way. But when I lock it down the Facebook App on Mobile devices will not longer work.

In summary its possible but not when you use it on Mobile devices.
[Android Software/Hacking General [Developers Only]] methuselah:
Hey sorry for delay in sending logo. I had an accident. By the time I saw the survey there was a tie between two ... I hope to get back into action and complete it asap. I wish I could have send you stuff on the fly
[Android Software/Hacking General [Developers Only]] MrT69:
Hope you are well... Not a problem. Take all the time you need for this.
[Android Software/Hacking General [Developers Only]] akapolips:
I think Amsterdam server is down, changed to France server everything working.
[Android Software/Hacking General [Developers Only]] :
FYI: for anyone interested, it looks like Keweon with DoH works on Personal DNS Filter app. The new version will hit F-Droid soon. But the current version can be downloaded from the website.

See https://t.me/pDNSf on Telegram if interested in setup.

I'm not plugging the app as much as just showing another good way to use Keweon.

Edit: Keweon worked before, the DoH setup is new.
[Android Software/Hacking General [Developers Only]] MrT69:
I have a problem with the Blacklist Database environment.

For some reasons the Filtering will not work.

I expect it will take up to 1 hours until everything is working again.

Sorry for this.
[Android Software/Hacking General [Developers Only]] DenyDarko:
Chrome doesn't like the certificate expiring in 10 years I guess :s

(Yes, it's the keweon certificate, I've checked)
[Android Software/Hacking General [Developers Only]] MrT69:
Ohhhh... DAMN!!!

I even have a Banking account there. ;)

I will remove this immediately!!!

EDIT:

Fix in progress and in 20 Minutes it should work again. And now you can also try and see what is possible when things like this happens.

When you even confirm this error you are not able to type in an account or password. That's what I was talking about "its technically not possible".

Errors might happens. But when they happens it is important that nothing can happens in addition because of the error.

Thanks again and sorry for this!!
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update - Feature Developement

I still want to have 2 things:

No proxy and No Certificate. This is a huge challenge because killing HTTPS traffic without certificate will not work. Never.

I'm working since a long time to "re-write" all ads within a page with the own Domain name. It's some kind of rewrite, not a javascript, not a proxy and it's only working with Domains which are stored on the Blacklists database. And no worry, this kind of technology is my idea. There is no other one ;)

The big advantage for this technologie is to disable all ads on the site with the own Domain Certificate. Therefore is no additional Certificate required and it's a very easy way to terminate the HTTPS Traffic even without a Root Certificate.

I need to do a break at this dev project because I have no clue why its not propper working. It's working a few times and suddenly I have an additional string inside which will break the Certificate from the domain. (Pictures below)

At the moment its still online but after the next update this will be gone and you have the "old" termination back. It will take additional times and I'm running out of ideas.

Until this solution can be in place it will take some more time. Sorry.

Original Links:

Example 1​

Example 2​
[Android Software/Hacking General [Developers Only]] MrT69:
Off Topic - NSA Malware Analytics Tool

Today, the NSA released a free reverse engineering tool called GHIDRA which can be used to break down executable files so that they can be analyzed by humans. You can now download GHIDRA at https://www.ghidra-sre.org. You will need to install Java SE Development Kit 11 and modify the PATH environment variable (in Windows) before attempting to run GHIDRA. GHIDRA also includes a great Help guide to provide assistance with using the tool. This is what GHIDRA looks like:

Have fun with this!
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi I'm using the updated version of Dns filter from f-droid, it now supports DOH could someone give me the settings to use for keweon DOH. The app needs it in this information. IP address:: port:: URL. Thanks
[Android Software/Hacking General [Developers Only]] GamaShani:
You have to feed this URL into the application you have downloaded-

https://sec.keweon.center/keweonDNS

:)
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
195.201.229.74 is the ip address then ::443:: doh:: then https://sec.keweon.center/dns-query
[Android Software/Hacking General [Developers Only]] MrT69:
DoT Update Information

I'm running since 3 days on DoT with keweon on my mobile device. Actually I have some performance problems with higher usage but I'm working on a awesome solution.

I guess I can offer this latest on Friday for public usage and when I'm doing everything right then this becomes incredible fast.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Wonderfull news
[Android Software/Hacking General [Developers Only]] MrT69:
keweon DoT - Public Beta is open

dot.asecdns.com​

​

​

​

1. Use it

2. Test it

3. Feeback please

@ ROM DEV's

If someone of you knows how to change the default Port for DoT from 853 to 443 within Android then please let me know this. I will immediatly open DoT at 443. This would be a reason to Root my S9+ device.​

It would be great if you let me know which country (and City would be also helpfull) you are from and what's about the speed.

Example:

Germany - near Munich - Awesome

Click the spoiler to see how to do the setup:
[Android Software/Hacking General [Developers Only]] :
Should Keweon somehow be added to this list?

https://dnsprivacy.org/wiki/plugins/servlet/mobile?contentId=1277971#content/view/1277971

I'm not sure if it would help Keweon or not, but it seems like a good site for DNS research.
[Android Software/Hacking General [Developers Only]] :
Is there an address that would need to be entered in addition?

The DNS app Personal DNS Filter requires for example:

1.1.1.1::853:: DOT::dot.asecdns.com

Or do we use one of the regular server addresses, certificate or non-certificate, as needed?

Like: 176.9.62.58::853:: DOT::dot.asecdns.com?
[Android Software/Hacking General [Developers Only]] MrT69:
Thats the reason why I habe added the Screenshot. You just need to enter this adress and that's all.

But it's only valid for the Android PI Client. I have no idea about any other DOT Clients. I hope I will find a IPhone User to see and Screenshot how to do it on IOS.

I don't know if this App supports DoT but you need to use this Address below based on your question. I have no clue if this will work ?

For PDNSF it's this:

159.69.48.240::853::DOT

This dot.asecdns.com is a (Micro) Cluster with 3 IP Addresses. If you nslookup it you will see all 3 Addresses.
[Android Software/Hacking General [Developers Only]] MrT69:
I'm honored about this question but at the moment this makes no sense. keweon is actually just a toy environment, its not stable or redundancy and at least the Server are too weak for a real global usage.

In addition the entire system is still a hobby and the current status needs too much time to support. If this would increase I guess I do not need just an Investor. Then I need a new wife also. ?

It would be awesome to be listed there but not with the current system and situation.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Thank you it is working on pdnsf.
[Android Software/Hacking General [Developers Only]] MrT69:
Which address you are using at PDNSF?
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
I have pm you the address in Telegram
[Android Software/Hacking General [Developers Only]] smokeyrider:
Using DoT with personal dnsfilter from f-droid . Australia near Sydney working well
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
Set this up half an hour ago, and tested it with my personal usual 'issues' that prevented me from definitly stepping over.

Phone: Oneplus One with Tugapower ROM 11.0

Location: Amsterdam, Netherlands

Tested: Instagram thumbnails and YouTube videothings in home tab on app (didn't load correctly a while back), all my daily and regularly visited sites that I could think of.

Now everything works as it should.

Speed: tested it with a speedtesting app that I ran 4 times different runs.

According to the test, PURE numbers-wise, Keweon is a bit slower then my previous setup, about 2 Mbps.

User experience differs from that, sites load and feel a bit quicker then before.

Awesome work dude, and thank you to much for finally having the Private DNS on Pie option possible :) ❤️
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot so much. I will also enable DoT on Port 443 this evening. For some reasons a lot of people want to have this.

Because of the speed I can't do it faster at the moment. That's a financial problem. Not a technical.

Thanks again.
[Android Software/Hacking General [Developers Only]] Nastrahl:
Doesn't Android forces admins to use it on port 843 for it to work with Pie's private DNS setting?
[Android Software/Hacking General [Developers Only]] MrT69:
Haven't tested it until today. But you can use pdnsf as client on mobile devices and then its easy to use it to change the DoT Port.

As long as it help prevent Censorship I support everything.
[Android Software/Hacking General [Developers Only]] methuselah:
so we have the winner. the logo number 2 is selected [MENTION=304818]MrT69[/MENTION] . what are your final words?
[Android Software/Hacking General [Developers Only]] MrT69:
If you will finalize it then I will change everything to the new logo. I only can thanks a lot to you and all the users.

:good::good::good::good:
[Android Software/Hacking General [Developers Only]] MrT69:
keweon DoT - Public Beta Update

dot.asecdns.com​

DoT DNS is now working on Port 443 and 853​
[Android Software/Hacking General [Developers Only]] methuselah:
Yeah all people voted with full love . what else you want me to add to subtract in the final output
[Android Software/Hacking General [Developers Only]] jackherer72:
works good on my s8 with android pie, thanks for your work. I am happy with it:goed::goed:
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Y r some youtube videos not working. Also do i need to use certificate alongwit update dns u mentioned..
[Android Software/Hacking General [Developers Only]] MrT69:
I know about the problem of Youtube and I'm working on it.

If you can provide me some links for this then this would help.

Thanks a lot in advance.
[Android Software/Hacking General [Developers Only]] MrT69:
DELETED
[Android Software/Hacking General [Developers Only]] MrT69:
The current DoH Server will be reinstalled for better performance and a better speed.

There will be an outage of round about 30 Minutes.

More will coming soon within the next hour.
[Android Software/Hacking General [Developers Only]] Scalpos:
That's great, finally having DoT, and enjoying it on Android Pie for 24h now, no certificate.

Thank you again MrT69 :good::highfive: !
[Android Software/Hacking General [Developers Only]] nishaddesilva:
How is Keweon DoT compared to Adguard DoT when it comes to ad blocking?
[Android Software/Hacking General [Developers Only]] methuselah:
[MENTION=304818]MrT69[/MENTION] logo is in your mailbox.
[Android Software/Hacking General [Developers Only]] MrT69:
They have a bigger team, they have more money, they are from Russia, they have a better Marketing, they have a better support.

I'm alone but I have a better technology and I have a longer experience then AdGuard.

Its hard to compare keweon vs. AdGuard but give it a try and let me know what you will think about this.
[Android Software/Hacking General [Developers Only]] nokazzz:
How about router 2wire possibly can use ur DNS server Mr t69
[Android Software/Hacking General [Developers Only]] MrT69:
Thats the advantage of DNS based solution. You can use it everywhere.
[Android Software/Hacking General [Developers Only]] nokazzz:
I will upload my router configurations photo .try out for my smarttv box so far faster and no more ads .
[Android Software/Hacking General [Developers Only]] MrT69:
The new DoH Server are online!

The new DoH Servers are online now. Please move to:

https://doh.asecdns.com/nebulo

Why "nebulo"?

With the next Version of Nebulo you only need to type "doh.asecdns.com" within the URL field and everything is done. (@Ch4t4r : Correct me if I'm wrong)

Compared to INTRA the NEBULO App has the option to set 2 DoH/DoT entries.

Daniel has also build in the option to set 2 servers. Type in both fields the same URL and you wil be always online even if there is a need to reboot one Server. You will never notice this.

Thanks a lot to Daniel for this great work and we both hope you enjoy this.
[Android Software/Hacking General [Developers Only]] GamaShani:
Does I have done it correctly? :confused:
[Android Software/Hacking General [Developers Only]] MrT69:
Yes. Why? Isn't it working??
[Android Software/Hacking General [Developers Only]] GamaShani:
It was just that I was confirming do I need to type the HTTPS and nebulo part in the URL..
[Android Software/Hacking General [Developers Only]] MrT69:
With the Nebulo App you don't need anylonger to type the sub part. Just type in the domain and it's done.
[Android Software/Hacking General [Developers Only]] DenyDarko:
Is that expected?
[Android Software/Hacking General [Developers Only]] MrT69:
https://doh.asecdns.com/nebulo?name=www.google.de

This will give a full answer.
[Android Software/Hacking General [Developers Only]] johnnycooper:
Where do I get the Nebulo app? I am assuming it's for Android right?
[Android Software/Hacking General [Developers Only]] MrT69:
The App:

https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen

The Source Code:

https://git.frostnerd.com/PublicAndroidApps/smokescreen

The APK file is attached here. Keep in mind it's still under development. Only with your feedback it becomes better.
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Just for clarity: the app never required you to use the full server configuration (https://sec.keweon.center/dns-query for the old configuration), you could always just write the host (sec.keweon.center), the rest would be added automatically. For Keweon the /nebulo suffix will be added, but right now this isn't the case. I planned on adding this with the next update.

If you want to use the app (supports both DoT and DoH), you can join the telegram group: https://t.me/joinchat/I54nRleveRG3xwAa3StNCg

You won't find Keweon in the list of DNS-servers because of Play store restrictions. You can however add it by going to http://smokescreen.app/servers/adblockers and opening the file/site with the app ("Import servers").
[Android Software/Hacking General [Developers Only]] marvasten:
[MENTION=304818]MrT69[/MENTION] does nebula app only apply on Android Pie+?
[Android Software/Hacking General [Developers Only]] Ch4t4r:
The app supports Android 5.0 and up. Additionally it can apply DoH and DoT for cellular connections as well (I believe Android 9 can only use DoT when connected to a WIFI?)
[Android Software/Hacking General [Developers Only]] marvasten:
[MENTION=8678600]Ch4t4r[/MENTION] Great! Does I need to set up doh.asecdns.com as DoH and DoT? Per my understanding just one of them can be set as active. Or what's the best config for Oreo?
[Android Software/Hacking General [Developers Only]] Ch4t4r:
doh.asecdns.com/nebulo is for dns-over-https, dot.asecdns.com is for dns-over-tls.

To make it easier, open http://smokescreen.app/servers/adblockers on your phone and open the file with the app. You can select both DoT and DoH servers from a list there.
[Android Software/Hacking General [Developers Only]] MrT69:
DoH stands for DNS over HTTPs. DoT stands for DNS over TLS.

Thats the reason for the renaming because now its better to see the difference.

As long as there is no better separation you need to make sure for the right entry at the right location. May be on a long term we will find a solution which is able to take the right server just because of the name.
[Android Software/Hacking General [Developers Only]] marvasten:
Thank you [MENTION=304818]MrT69[/MENTION]. By using Nebulo the certificate is also recommended, right?
[Android Software/Hacking General [Developers Only]] MrT69:
It's alsays up to the users. If you like to have the web cleaner and faster, use it. A few sites even won't work without it because they are using HTTPS error detection.

Important is that the Certificate has NOTHING to do with the client (Nebulo). I only support this App because its not from Google, it has awesome features, it's fast, it doesn't drain battery and there is 100% no data collection.

Test it, compare it and then decide. ?
[Android Software/Hacking General [Developers Only]] DenyDarko:
I see many adblocks, including this one are blocking crashlytics.com and relevant sundomains.

However, crashlytics are collecting data for stability related stuff to provide information to developers so they can fix issues and not marketing.

Should it be blocked?
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Well, they transmit a lot of meta data as well (plus you can simply pass sensitive data in the exception message). There is no way to know whether they use this data for the purpose you stated above. Even this data is important for the right people (got a chinese brand noone heard of -> user might be poor). My preference is to block it.
[Android Software/Hacking General [Developers Only]] DenyDarko:
I didn't state it myself, it's what I found on their website.

It's not like I have personal knowledge over it.
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Well, I didn't claim that this is your opinion. Just gave my input.
[Android Software/Hacking General [Developers Only]] MrT69:
I just have a baseline or a basic block and its up to the users to decide what is wrong or what is right.

Example:

Its possible to block the entire Data collection by Facebook but when u use this on Mobile Devices then the Facebook App will not longer work.

Its up to you to recommend. Its not possible from my side to know all domains outside what they are doing. That's why the input from user side is mandatory.
[Android Software/Hacking General [Developers Only]] triiuzii:
I don't mean to sound like a noob, and I'm sorry if this has been asked/answered already, but which servers do I use? Do I use the 2 "main" ones or do I choose 2 "vServer" ones? And what's the different between main and vserver?
[Android Software/Hacking General [Developers Only]] MrT69:
The DNS Servers are just only a tiny system and its up to you to find out which one is the fastest for you.

Germany / Nuernberg

k1-de-143-nbg.keweon.center

213.239.207.143

2a01:4f8:a0:8487::143

USA / Dallas - Texas

k1-ns2-us02.keweon.center (vServer)

107.191.55.215

2001:19f0:6401:175d::215

This both Servers have extended blacklists and it might be that some sites might cause problems within the browser when you don't use the Certificate.

All other servers are just the same. That's why you need to find the fastest DNS Server for you by you own. ;)

As soon as the entire Infrastructure is hosted within a real Data Center this problem is definitly solved.
[Android Software/Hacking General [Developers Only]] evaz88x:
Legit Website being blocked

Hello,

The website Sitesell.com & all it's related pages are being blocked through KeWeon. This is a legit site & service! The site is a service which helps people build online businesses.

I would like to request this site to be whitelisted. Should I send a txt file with the site url via email?
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly. That's all. At the moment I remove this on the test server and then I will upload the update.

If you see something wrong then copy this url into a TXT file and just mail this to the "Whitelist Mailbox". At the next day it's almost working.

Anyway, thanks a lot for your support!!!
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Info & Update

Please take note the DoH Server:

secdns.keweon.center

will get offline at the end of the week.

2019-03-22 at 00:00 GMT +1

Please change your settings to the DoH Server:

doh.asecdns.com/nebulo

NOTE:

For high availability please set the DoH Server on both lines at the NEBULO App. You can use INTRA for DoH usage but this App offers no high availability on the keweon DoH Servers.
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi, I am using Stubby for DoT in Windows 10. What con fig do I need to enter so I can use Keweon DoT in Stubby.

Here is the information needed

The information for an upstream can include the following:

# - address_data: IPv4 or IPv6 address of the upstream

# port: Port for UDP/TCP (default is 53)

# tls_auth_name: Authentication domain name checked against the server

# certificate

# tls_pubkey_pinset: An SPKI pinset verified against the keys in the server

# certificate

# - digest: Only "sha256" is currently supported

# value: Base64 encoded value of the sha256 fingerprint of the public

# key

# tls_port: Port for TLS (default is 853)

Thanks
[Android Software/Hacking General [Developers Only]] MrT69:
I have absolutely no experience with stubby. I hope a other user can help. If not then we need to do this by "try & error" process. ;)
[Android Software/Hacking General [Developers Only]] irgendwer2:
Smart TV: HbbTV on ProSiebenSat.1 Group channels not working. Possible to fix?
[Android Software/Hacking General [Developers Only]] smokeyrider:
This is an example from Blahdns

https://blahdns.com
[Android Software/Hacking General [Developers Only]] MrT69:
Sure. PM or Whatsapp me please.

https://whatsapp.keweon.center
[Android Software/Hacking General [Developers Only]] GamaShani:
Can someone please tell me why this application needs my clipboard access?
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
To copy/past domain names i think
[Android Software/Hacking General [Developers Only]] Jaruamana:
About doh setting in firefox

I tried the new Doh url " doh.asecdns.com" in Firefox.

But it is not working.

What should be the DoH setting in Firefox taking account of the new address ?

Should it be "doh.asecdns.com" ?

I tried different ip address "195.201.229.74", 176.9.62.62 , 213.239.207.143 107.191.55.215 in bootstrap address . Nothing working.

Anyway thank you for your service.

---------- Post added at 02:08 PM ---------- Previous post was at 02:06 PM ----------

Anyone using Keweon dns in firefox as Doh ? Can anyone confirm if keweon dns is working in Firefox? I tried various setting setting trr to 2 ,3 , setting different bootstrap address , nothing works. Not even the old address .
[Android Software/Hacking General [Developers Only]] MrT69:
Try it with exactly this address. Also don't forget to type "https://" at the beginning within this line:

https://doh.asecdns.com/nebulo

then it's working ;) Set trr to 3 (that means force DoH Server) and you are fine.
[Android Software/Hacking General [Developers Only]] GamaShani:
But isn't that business is of Keyboard application not the Nebulo? :confused:
[Android Software/Hacking General [Developers Only]] MrT69:
[MENTION=8678600]Ch4t4r[/MENTION]

Can you explain this please?
[Android Software/Hacking General [Developers Only]] Cookie Ninja:
And, possibly your text / username/s, email@ddress/es & passwords, cc numbers usw....