Articles by tag: xray

VLESS Vulnerability: bypassing split tunneling in clients

Critical hole in VLESS clients (xray/sing-box) allows spyware to bypass VpnService and leak IP. Tested 8 clients, Happ dumps configs. Protection measures and recommendations for developers. Study the risks.

XRay in Google Cloud Run: bypassing subnet blocks

Setting up XRay in Google Cloud Run to bypass /16–/8 subnet bans via domain fronting. Configs, deployment steps, XHTTP. Ideal for middle/senior dev. Deploy in 5 min and test.