gosu is a minimal Go CLI tool designed to drop privileges inside Docker containers by switching to a specified user and group before executing a command. It directly uses the same user/group parsing code from Docker's libcontainer (via github.com/moby/sys/user) and performs setuid/setgid/setgroups syscalls, then exec's the target command. The binary is statically compiled with CGO disabled, making it portable across Linux architectures. The repository includes comprehensive test suites (Alpine and Debian Dockerfiles), CI workflows that build and test multiple architectures, and a govulncheck wrapper for vulnerability scanning. The codebase is small, focused, and well-maintained, with active development and weekly CI runs.
This repository is a DPI bypass toolkit that intercepts and manipulates network packets to evade Deep Packet Inspection systems. It uses a modular architecture with a core daemon (nfqws2/dvtws2/winws2) that processes packets via NFQUEUE (Linux), divert sockets (*BSD), or WinDivert (Windows/Cygwin). Packet manipulation logic is implemented in Lua scripts, allowing flexible obfuscation strategies like packet splitting, reordering, and fake packet generation. The system includes automatic IP/host list management from external sources (antizapret, reestr), connection tracking for flow state, and cross-platform service integration. Key entry points are the main daemon, installation scripts, and list management utilities. Data flow involves packet interception → dissection → profile-based Lua processing → verdict (PASS/MODIFY/DROP) → reinjection. External dependencies include kernel interfaces (netfilter/WinDivert), Lua, zlib, and shell utilities for list updates.