##AgentDroid

be the change you wish to see in the world

AgentDroid is an Android client for GoAgent PHP.

What it does

Working with GoAgent, AgentDroid bypass network blocking through the following steps:

1.Setup a HTTP/HTTPS proxy in Android, any HTTP(S) traffic of your choice will be redirected transparently to the proxy.

2.Then the proxy will encode the HTTP(S) data, and send them to the PHP script on the server side.

2.5.In HTTPS's case, the proxy will do a MITM and act as the HTTPS server itself.

3.PHP script decodes the data and make the original HTTP(S) requests (hence the hosting service must supports CURL).

4.PHP script encodes the data and returns them to AgentDroid.

####In general:

Apps <-> [ Iptables <-> AgentDroid Java Codes ]* <-> GoAgent PHP script

*these are inside AgentDroid

How to use

Rerequisites:

Your phone must be rooted and its build version is greater than 4.0.

1. Find a php hosting site which supports CURL (just google "php hosting curl");

2. Register and login;

3. Upload the index.php file in the GoAgent project to any directory in your site; Or, since now GoAgent project is closed, you can use the agentdroid.php file in the php folder NOTE: AgentDroid must work with Goagent v3.1.2

4. The test_curl.php script in the php folder is to help you check whether your php host is capable to deliver your request: Upload test_curl.php, and in your browser access the page http://your_php_host/test_curl.php?url=http://www.handhandlab.com, if browser shows the content of handhandlab.com, then your host is good to go!

5. Open app and set the url of the index.php file, and set which apps should be proxied.

6. Start the proxied app and use it.

What may interest you

For those who doesn't need to "cross the great firewall", you may also be benefited from this project, as it provides sample Java codes of the following features:

• Programetically generating a CA and let Android trust it.

• Generating a certificate and signing it with the CA on the fly.

• Man in the middle attack(MITM) in Android.

• SSLEngine in Android

• Making a Http/Https proxy by Java NIO in Android

Although some of the implementations may be simple or even buggy, but they demostrate the basic idea, and most of all, with working codes.

中文说明

GoAgent是一个科学上网的工具，大部分人都使用它的AppEngine端的功能，而PHP端却是被忽略的一大利器。

Google AppEngine目标固定，容易被blocked，相反，提供PHP网页寄存（Hosting）服务的网站多如牛毛，而且经常有新的提供商出来，使得伟大的火墙很难把它们一网打尽。

AgentDroid即为一个与GoAgent PHP端通信的Android客户端APP。

####使用

1. 搜索支持Curl的PHP Hosting网站，注册登录。
2. 上传agentdroid.php
3. 在AgentDroid中设置agentdroid.php的url
4. 选择需要被代理的App

####原理

通过iptables将android的80和443端口流量重定向到AgentDroid监听的端口；

在80端口的情况下（HTTP明文），AgentDroid解析Http请求，根据GoAgent的协议向PHP服务端请求数据并返回。

在443端口情况下（HTTPS），AgentDroid在初始化时生成一个证书，放入Android的/etc/security/cacerts/中，Android即会将该证书作为根证书。同时证书的私钥保存在App私有目录中。

AgentDroid被代理的APP建立SSL连接（中间人攻击），证书动态生成，由之前保存的私钥进行签名，由于在连接建立之前无法知道原来的流量去往的域名，所以通过证书的Subject Alternative Name来绕过浏览器对证书域名的检查。

####Donwload

需要apk的同学可以在Handhand Lab下载。

Acknowledgment

AgentDroid is depending on the following excellent projects:

• GoAgent
• OpenSSL
• BouncyCastle
• SpongyCastle

Also, AgentDroid can not be made without many other great blogs and websites, I will list them on the corresponding WIKI pages.

Major Updates

####2015.09.30

• Use native openssl to generate CA certificate, key pairs and certificates.