Free Download Psiphon 3.exe For Pc

0 views
Skip to first unread message

Charlotta Menchaca

unread,
Aug 5, 2024, 4:14:29 AM8/5/24
to alprerchimta
Iwork with a High School and some of the students are using Psiphon to get around our web filter. So I believe we were having a similar issue. We found that A third party managed firewall and web filter filled our needs better than closing so many ports that have important services running on them. We used iboss for our web filter and firewall and we were able to curtail the problem with Psiphon.

Psiphon can mount proxy HTTP/SOCKS via tunnels. All the traffic of this application will bypass the port TCP 80 by default. So you must to have a firewall capable to inspect your packets to see which packets are real HTTP packets and HTTP proxy packets.


To be Honest, with my experience using and testing Psiphon, As long as the user has any kind of internet, no matter the block (even if though), Psiphon seems to manage it's way in anyway. It's lightweight setup make you able to use on a flashdrive (so it doesn't need to be installed on the PC at all, just need to plug in thumbdrive) and versatility makes it very hard to block, even temporally. not to mention that if it even get a ping from any open sever, it automatically updates itself, makes a backup copy, and gets new sever list. The reason why it's like this is because, it's designed to allow you access even in a another country where blocks are really strict... Basically, you're trying to march though the jungle but, up against an army that specializes in guerrilla warfare...


Ok folks, so here it is. After fighting this monster for about 9 months, I finally figured out how to stop PSiphon from running on my computers. PSiphon is a standalone program, because it does not install itself to the computer, there are no hash's or certificates to manipulate. I finally google'd how to stop .exe files from running and low and behold there it was. You have to set up a GPO to prevent psiphon3.exe from running. You will create this rule under the user configuration\administrative templates\system\Don't run specified windows application. From here you can figure out the rest. Now I have tried to run it on the computer, from the website and from a drive stick and they all failed to run. Can't wait for morning to get here so I can implement this on the computers at work. Hope this helps.


I have managed to do this by blocking the file path of the temp exe it creates when connecting. This removes the ability to rename the original exe and it works again (or having duplicates in downloads, i.e. "Psiphon3 (1).exe").


Purpose:

I'm using a script (written in perl) that uses curl by calling CMD command lines to perform web requests. I am looking for using Psiphon also via CMD command line, this way the script could call CMD command lines to connect to a server and use curl through Psiphon proxy.


I just like to add something from above. Since you need Psiphon proxy to be working for curl only, the easiest way is start Psiphon3 main application (whichever command you want), then use proxifier/proxycap/freecap/widecap...to control which application uses your local proxy, or just use curl' --proxy flag (i.e. --proxy 127.0.0.1:8080). Be sure you followed the SkipProxySettings registry instructions here:


For the cmd query, in -Labs/psiphon-tunnel-core, there's a simple script to run the consoleclient (psiphon-tunnel-core). Try placing the "consoleclient" in the Psiphon3 "Roaming" folder and run it from there. Be sure that your http proxy port is the same as in the config file. Configuration infos are found here in case you need it: -Labs/psiphon-tunnel-core/psiphon#Config. The rest is all up to the user, but it's not recommended. (And even if this works, you still need to control the proxy for curl "only".)


Here I used -dataRootDirectory because without this argument psiphon would create a folder named ca.psiphon.PsiphonTunnel.tunnel-core at current working directory every time it starts, this argument prevents it.


psiphon3.exe is an executable file associated with the software Psiphon. Psiphon is a free and open-source Internet censorship circumvention tool that uses a combination of secure communication and obfuscation technologies (VPN, SSH, and HTTP Proxy).


Psiphon is designed to provide you with open access to online content. It can bypass censorship and allows users to access blocked websites in their region. It is useful for those who live in regions where there is heavy internet censorship or for those who want to access region-restricted content.


Psiphon is needed if you want to bypass internet censorship or access blocked content. It should be noted that while Psiphon is a legitimate tool, it can also be used for malicious purposes if it falls into the wrong hands. If you find psiphon3.exe on your computer and you did not install it or do not need it, it is recommended to remove it to prevent potential security risks.


If you find the psiphon3.exe file in a location other than "C:\Users\USERNAME\Desktop" (or the location where you installed Psiphon), it could be a sign of a malicious program. In such cases, it is highly recommended to run a full system scan with a reputable antivirus program.


If psiphon3.exe is located in a subfolder of C:\Windows, the security rating is 20% dangerous. The file size is 6,266,992 bytes.The program has a visible window. The file is not a Windows system file. The software has no file description. The file has a digital signature.Psiphon3.exe is able to record keyboard and mouse inputs and monitor applications.


Important: Some malware camouflages itself as psiphon3.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the psiphon3.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


A clean and tidy computer is the key requirement for avoiding problems with psiphon3. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.


Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.


To help you analyze the psiphon3.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.


Wanted to ask if someone has been able to block psiphon on 2023. I have read all posts related to psiphon, provided solutions worked a couple of years ago. But now, i guess the app was updated and firewalls are not able to block Psiphon anymore. Tried to block on 3 different enviroments with same results, also have a rule meeting the last requirements i found:


We already opened a case with TAC and provided debug and packet captures that were already sent to RnD. My experience with RnD is that it will take some time to get a solution. Just wanted to ask meanwhile if someone already was able to do this.


Just an update to tell that RnD updated the signature and TAC provided this as an offline package to update the Psiphon signature which allows to block this app properly. Previous recommendations are still needed, block quic, https inspection, etc... But finally it works. TAC does not have an ETA to get this update released yet.


Here is something important to remember, IF you use content wareness blade, which appears you do...I had call with escalation guy once and customer and he showed us in the lab perfect example why that blade did not function as intended. So, you literally have to remove all bypass objects in https inspection policy, allow them in say urlf layer and only then will content awareness blade block traffic as expected.


Now, since this strictly appears to be appc blade related, if blocking built in app does not do anything, then I believe the only way to make this work is find out ranges/IP addresses/fqdns related to Psiphon and block it that way.


So, you say that this connection to netball.net is an actual tunnel for the Psiphon application ? Or the netball.net is accessed through the tunnel that was done against 196.245.172.67 ?

Because according to " " I don't see those two having anything in common,


Yes, these two logs were generated from a connection that psiphon app used to stablish the tunnel. At the beginning, logs show application psiphon and another IP address with action block, but the app keeps "thinking" and at the end it is able to stablish the tunnel with the sites/IP's you can see in the logs. I confirmed the logs are rigth checking "TCP connections" inside "Rosurce Monitor" tool on windows. The service is "psiphon-tunnel-core.exe" and that service stablished the tunnel with the IP's showed in the logs. Also doing a tcpdump for the internal IP address, all web traffic is directed to that IP's, so 100% sure.


Yes, looking for them on internet shows nothing related to psiphon, that makes it very hard to block psiphon. Sometimes psiphon connects to sites categorized as education, religion, web browsing, etc. Things that we can't block.

3a8082e126
Reply all
Reply to author
Forward
0 new messages