Naveax
b6ed976346
fix(app): harden Hivemind control-plane trust boundaries ( #8 )
...
Bound and nonce-bind control responses, reject redirects, and pin session tunnel coordinates so control-plane compromise cannot redirect VPN traffic.
2026-09-06 11:34:06 +03:00
Naveax
8ead3ff249
feat(app): add secure routing and runtime resilience
...
Add explicit TUN and SOCKS5 connection modes, app routing controls, authenticated per-session local SOCKS5, Android network monitoring, persistent haptics, resilient session recovery, notification hardening and client-side Hivemind cleanup.
Keep the hosted flutter_vless_android 1.1.5 runtime as the base and apply the Android compatibility/security patches at build time instead of restoring the unstable vendored runtime.
2026-08-31 19:31:12 +03:00
esefxdz
71468f7594
frontend polish and security review changes
2026-08-22 11:34:17 +03:00
esefxdz
54f949ca8e
v3.2.0 — DPI hardening, notification consolidation, disconnect refactor
...
User-Agent spoofed to Chrome on Android (was Dart/3.x). Domain renamed to userevolt.app. Branding to Revolt VPN. Removed duplicate notification, patched flutter_vless for custom icon + dark background. Merged 5 disconnect paths into single idempotent gate, fixed stopVless timeout silently lying about state. Removed kDebugMode guard from AdMob bypass.
2026-08-08 13:06:19 +03:00
esefxdz
4fde4a9217
v3.0.0: domain-free client, bootstrap tunnel, tunnel-internal API
2026-08-02 14:00:38 +03:00
esefxdz
75cf59f22c
cleaning up
2026-08-02 00:56:55 +03:00
esefxdz
c1ec77a075
http conversion through guides
2026-08-01 23:55:54 +03:00
esefxdz
1b8a67cecb
less client things removal
2026-08-01 22:10:48 +03:00
esefxdz
4555911ee8
fix compilation: revert AppConfig.enableAdBypass to kDebugMode, fix const Padding with dynamic version
2026-07-31 22:47:51 +03:00
esefxdz
54609a3119
audit #13 : notification fix, sync guard, bypass gate, responsive layout, dynamic version, dart format, clock_display to backups, stats race fix, new locks, nginx swarm block
2026-07-31 22:41:29 +03:00
esefxdz
f8abda9323
v2.0.7: security hardening, config sync, cleanup
...
- 6 new security audits (technical_debt_8 through 12)
- SNI rotation pool per session (5 sites)
- vless_ip pinned to hardcoded server IP
- TLS cert validation restored (domain-based)
- Swarm monitoring removed from public domain
- Xray routing blocks abuse ports (SMTP, NetBIOS, SSDP)
- flow: xtls-rprx-vision in add_vless_client
- TimerBox shows Connecting/Syncing spinner
- Outbound port blocking in Xray config
- Cleaned up comments, synced config templates
2026-07-29 23:43:47 +03:00
esefxdz
2086f9ded2
reality configured
2026-07-27 23:10:11 +03:00
esefxdz
efcfe6e706
Two-box throttle system + support top-up
...
- Server: two Xray inbounds (vless-normal / vless-throttled), 4GB threshold,
management loop moves users between boxes instead of hard-killing.
/session/status returns dynamic vless_path + is_throttled.
Support ad callback (ad_type: support) extends session +30min +2GB.
No hard quota kill — only 60-min expiry removes sessions.
- App: session_timer detects vless_path change in 5s poll, triggers
silent reconnect (skipCleanup, skipAdBypass, quickReconnect).
New support_button.dart for top-up rewarded ads.
hivemind_service uses server vless_path instead of hardcoded constant.
vpn_connection: skipAdBypass, quickReconnect, skipCleanup params.
- Config: Xray two-inbound template, nginx /tunnel-throttled with
limit_rate 187k (1.5 Mbps). Updated AGENTS.md + SERVER_SETUP.md.
2026-07-27 20:15:25 +03:00
esefxdz
a32252c56d
deleting old safety checks and connect polish
2026-07-26 10:41:30 +03:00
esefxdz
d106356ca6
v2.0.0: VLESS cleanup — remove bonus ads, throttling, fix Xray compliance, rebrand colors
2026-07-25 00:34:14 +03:00
esefxdz
3531671d3d
Rebrand: PaladinVPN -> ReVoltVPN — all references, package names, Android namespace
2026-07-24 21:03:18 +03:00
esefxdz
aaf9887f49
v1.0.0: AWG -> VLESS migration — ReVoltVPN debut
2026-07-24 20:56:13 +03:00
esefxdz
0943506404
fix: session nonce to prevent stale session reuse, reorganize hivemind, clean AdMob bypass toggle
2026-07-18 13:02:04 +03:00
esefxdz
259db2f386
v1.0.5: dual-stack IPv6, pure AmneziaWG, scrub leaks, verifySession fix
2026-07-16 20:02:37 +03:00
esefxdz
a84474a586
bugfixes: switch fallthrough, SSV debug-gate, session verify, speed math, auto-reconnect, permission recovery, health indicator, lifecycle-safety, GDPR consent, progress feedback
2026-07-16 13:40:09 +03:00
esefxdz
128a3b1320
general small bugfixes
2026-06-13 14:32:57 +03:00
esefxdz
41a2648c6e
ser
2026-06-13 13:37:57 +03:00
esefxdz
bec138fbad
Fix awg0 key fetch, fix data counter, update timeouts, update gitignore
2026-05-29 18:39:51 +03:00
esefxdz
688c5c7107
Fix subnet mask causing no internet data on Android client
2026-05-29 16:33:59 +03:00
esefxdz
157f60aad2
Initial commit (Security Hardened Slate)
2026-05-29 14:42:24 +03:00
Naveax