What is psiphonovermitm?

PsiphonOverMITM is a Windows helper script that makes it easier to run the Psiphon circumvention tool through a local proxy built on a technique called MITM domain fronting. Psiphon can already use an external upstream proxy, but setting one up by hand for this specific technique takes several steps. This project bundles those steps into a single launcher so a user just has to run a batch file and pick an option from a menu. The underlying MITM domain fronting method is not this project's own work. Credit belongs to a separate project called MITM-DomainFronting by a developer named Patterniha, and this repository is described as only a helper and launcher for using that technique specifically with Psiphon. When started, the script runs a proxy engine called Xray using a configuration file made for Psiphon, generates a personal security certificate if one is not already present, and installs that certificate into Windows so the local machine trusts it. Xray then intercepts the connection, matches it against a list of routes tied to services like Akamai and Fastly, and forwards traffic through whichever route can reach the network successfully. In simple terms, Psiphon first connects to this local proxy, and the local proxy helps Psiphon reach its own network. The main files are Run-PsiphonOverMITM.bat, which is the file a user runs, and PsiphonOverMITM.ps1, the underlying script offering Start, Stop, and Status commands. Other files include the Psiphon helper configuration, the Xray program itself, the certificate files, and log files that record what happened during each run. To use it, a person extracts the project, runs the batch file as Administrator, and chooses Start from the menu. Once it finishes, it displays a local address and port that must then be entered manually into Psiphon's own upstream proxy settings. Administrator rights are required because installing the certificate and managing the underlying process both need elevated permissions. The tool does not change Windows' system wide proxy settings, it only affects Psiphon once that address is entered there.