gedsh / invizible

Android application for online privacy and security

InviZible Pro

Google Play stable version

Download the latest version from Github

IzzyOnDroid F-Droid beta version

F-Droid stable version

Android application for online privacy and security

Preserves privacy, prevents tracking, and provides access to restricted and hidden online content

InviZible Pro combines the strengths of Tor, DNSCrypt, and Purple I2P to provide a comprehensive solution for online privacy, security, and anonymity.

Tor

• Hides user's identity and location
• Defends against traffic analysis and censorship
• Protects online activities from surveillance
• Routes traffic through multiple servers
• Provides access to "onion" websites
• Open-source

DNSCrypt

• Secures DNS traffic with encryption
• Verifies DNS server legitimacy using cryptographic keys
• Shields against DNS-based attacks like spoofing
• Guards against eavesdropping and DNS query logging
• Can block ads *
• Can protect against dangerous and malicious sites *
• Can block "adult" sites *
• Open-source

*Depending on the selected dnscrypt server (Not available in Google Play version!)

Purple I2P

• Provides anonymous communication network
• Conceals users' identities and activities
• Defends against surveillance
• Ensures secure data transmission
• Distributed and self-organizing network
• Provides access to "i2p" websites (eepsites)
• Open-source

To start using InviZible Pro, all you need is an Android phone. Just run all three modules and enjoy safe and comfortable internet surfing. However, if you want to get full control over the application and your internet connection - no problem! There is access to a large number of both simple and professional settings. You can flexibly configure InviZible Pro itself, as well as its modules - DNSCrypt, Tor and Purple I2P, to satisfy the most non-standard requirements.

InviZible Pro is an all-in-one application. After installation, you can remove all of your VPN applications and ad blockers. In most cases, InviZible Pro works better, is more stable, and faster than free VPNs. It does not contain any ads, bloatware and does not spy upon its users.

Why InviZible Pro is better than other similar applications:

• Privacy Protection: Guards your online activities.
• Anonymous Browsing: Conceals your identity.
• Secure DNS Encryption: Protects your DNS queries.
• Anonymity Network Integration: Utilizes Tor, DNSCrypt, and Purple I2P.
• Firewall: Safeguards against unauthorized access.
• Access to Restricted Content: Unblocks blocked websites.
• Anti-Tracking Measures: Prevents tracking of your online behavior.
• Hidden Network Access: Connects to "onion" and "i2p" websites.
• Open-Source: Transparent and community-driven.
• User-Friendly Design: Simple and intuitive interface.

Compatibility

InviZible Pro can be used both with a rooted or non-rooted device.

Please visit the wiki to find out how to use it.

Depending on the rooting method and device specifics, an application may be incompatible with some android phones.

Support

For questions, feature requests and bug reports, you can use GitHub.

Official site: invizible.net

International:

Telegram channel: InviZiblePro

Telegram group: InviZiblePro_Group

Matrix group: Matrix

For Russian-speaking users:

Telegram channel: InviZiblePro

Telegram group: InviZiblePro_Group

Matrix group: Matrix

There is support for the latest version of InviZible Pro only.

There is no support for things that are not directly related to InviZible Pro.

There is no support for building and developing things by yourself.

Contributing

Building

To clone a project, use the command:

git clone --recursive https://github.com/Gedsh/InviZible

To build InviZible Pro please use Android Studio.

If you see something like this: Illegal character in opaque part at index 2: C:\KStore\keystore.properties

Please comment lines of the settings.gradle file in the project root, as shown below:

include ':tordnscrypt', ':filepicker'
project(':filepicker').projectDir = new File('android-filepicker/filepicker')
//Please comment line below if you are not the project owner
//project(':tordnscrypt').buildFileName = 'owner.gradle'

It is expected that you can solve build problems yourself, so there is no support for building. If you cannot build yourself, there are prebuilt versions of InviZible Pro available here.

Translating

Translate InviZible on POEditor.

Translate InviZible on Hosted Weblate.

Attribution

InviZible Pro uses:

• DNSCrypt
• Tor
• Purple I2P
• Chainfire/libsuperuser
• jaredrummler/AndroidShell
• NetGuard
• Angads25/android-filepicker
• meefik/busybox

This product is produced independently from the Tor®, DNSCrypt, Purple I2P software and carries no guarantee from The Above Projects about quality, suitability or anything else.

Donations

PayPal: Send to [email protected]

Patreon: https://www.patreon.com/inviziblepro

BTC: 1GfJwiHG6xKCQCpHeW6fELzFfgsvcSxVUR

BCH: qzl4w4ahh7na2z23056qawwdyuclkgty5gc4q8tw88

USDT: 0xdA1Dd53FE6501140E3Dcd5134323dfccF20aD536

XLM: GBID6I3VYR4NIFLZWI3MEQH3M2H72COC3HQDI5WMYYQGAC3TE55TSKAX

XMR 83k3FtpRhoT8QpE3M8mKunjXsktfVhGS2fVXm1X1Myj4EoH5hJ4BfuFXkYcRod61kCDP1hpcDSw2FFM622rRD6rWEJ45UjU

License

GNU General Public License version 3

Copyright (c) 2019-2024 Garmatin Oleksandr [email protected]

All rights reserved

This file is part of InviZible Pro.

InviZible Pro is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your discretion) any later version.

InviZible Pro is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with InviZible Pro. If not, see http://www.gnu.org/licenses/

invizible's Issues

No systemless/Magisk support.

Currently, installation of InviZible requires writing to /system, for some this can be seen as undesireable, because it may break dm-verity, and makes restoring device to stock longer as the entire /system partition must be rewritten, instead of just boot partition for the majority of Magisk installation in order to restore to stock.

Currently, a recently updated dnscrypt-proxy2 Magisk module is available: https://github.com/Magisk-Modules-Repo/dnscrypt-proxy2

Add Compile scripts for libs

this would make #5 mouch easyer ...

In short: create single scripts who compile lib's found in tordnscrypt/libs on demand ...

x86/x86_64 android studio emulator (avd) support

we need x86/x86_64 android emulator avd support. it cannot be installed on emulator as it is incompatible right now

Hidden Service v3 support

Is there any plans of supporting hidden service v3 host addresses?

Just to knoe ab.

Thanks for your time, support and dedication.
We really appreciate it.

Greetings

Allowed domain as request to bypass firewall.

Hello sir.
Is there a way you can add a option to add a allowed domain or website for the request ?
I explain :
ISP firewall let us visit free some websites ,
Example 1 http:
we use those websites as a http request (http injection) and we create a tunnel via shadowsocks or ssh or vpn etc to bypass the firewall.
Example 2 TLS:
For TLS tunnel we use "fake SNI " se add the allowed website for the firewall.

Is there a way to add a domain as request to bypass our firewall using your inviZible app ?
This way the firewall let the tunnel go through.

By the way , I know it is possible to bypass my Firewall using a " binary proxy (convert request to binary ) + shadowsocks" or "fragment proxy (fragment request ) + shadowsocks".

I will wait your answer.

How or where to send logs to dev?

Hi

Can you give a way to send you logs in MP?

Thanks

ARM64 apk on Huawei P10 android 9.0 stock (without root or unlock).
The phone is up to date.
The app version is beta v0.6.0.
Internet connection is Wifi, static ip and high speed without any problems.

Tor is working well. IP is really modified. Internet speed stay correct. I cannot know if encryption is ok.

Some issues with dnscrypt proxy , i've made some feedback for this.

I think it's a really good project.

I don't understand why you want to keep two ways for vpn or proxy and check Tor or dnscrypt proxy.

Regards

Samuel P

config backup error

got still the config backup error when trying to save backup to internal sd. gave permissions and all. latest iz 0.7.0, armv7, non-ps version. android 8.1.0, samsung

[FEATURE REQUEST] v3 Onion Service Client Authorization Support

In the latest v3 torspec a Onion service may require an authorization token.
Lack of support for this authorization method in InviZible make this feature useless if your intent is to use an authorized hidden service from a mobile device.

need write access to folder to put auth keys into
DataDirectory/ClientOnionAuth/

Define tunnels for i2pd

Hello, sorry if i'm dumb and this is an easy option and is already implemented and or available but, how we can define tunnels for i2pd in Invizible Pro? Thank you for your time and again I beg your pardon if this is stupid.

Greetings.

dnscrypt issue with leak test

Hi,

I start to use you ARM64 apk on Huawei P10 android 9.0 stock (without root or unlock).
The phone is up to date.
The app version is beta v0.6.0.
Internet connection is Wifi, static ip and high speed without any problems.

I use Wifi and, when i'm using wifi, i've to set a dns. The dns i use is cloudflare (1.1.1.1).

I use ipleak test or dns leak test on net for verify the servers i connect too.

I inform this is a curious issue.

The dnscrypt servers i select are working and i see there ip and localizations but, the cloudflare servers appear too...
If i start the test 2 or three times, there is less and less cloudlfare servers and last time, there are only dnscrypt servers.

Thanks for your app.

regards

Samuel P

ipv6 🙏🏼

will you add ipv6 support in the future? I believe I understand why ipv6 has been left aside for now.
but maybe you're able to address these security issues in the future. cause much of the traffic relies on ipv6 these days, it's faster & more secure (correct me if I'm wrong). and if I secure my hotspot on my android with iz & connect my pc to it, my pc's ipv6 traffic theoretically is still unencrypted, right? I know how to avoid this, but it seems easier for me if iz had ipv6 support, too. btw can I edit the toml config file, tor/i2p config files to use ipv6 with iz if I want?

implement DPITunnel

since some other tools are windows binary only yet , i would like to ask about implementing great 4th module of IZ,- it's DPITunnel:
github.com/zhenyolka/DPITunnel
I hope it will be kept developing and it's finaly great news for android users ;) - we was waiting it so much !!!
i hope it can work the same way as others IZ moduls - console executable + config file , am i right ?
but i'm not sure of it uses modified console proxy code , does it ?

Allow natively and by default non-Tor and IANA environments

Non-tor and IANA reserved IP blocks are being routed by default from apps and another system connections through Tor when they shouldn't. I didn't checked the source code but i can guess by the behaviour that you're applying different filters to handle apps and hostnames differently, even if some of the blocks are already being treated by your default iptables ruleset.

Those filters seems to take higher priority than iptables ruleset as when you add them manually to Invizible IP/app whitelist config they start working as they should.

In my Ansible playbook for deploying Tor to any Linux i have these blocks, taken from Tor Trac Wiki:

non_tor_env:

• "127.0.0.0/8"
• "10.0.0.0/8"
• "172.16.0.0/12"
• "192.168.0.0/16"

IANA_reserved_blocks:

• "0.0.0.0/8"
• "100.64.0.0/10"
• "169.254.0.0/16"
• "192.0.0.0/24"
• "192.0.2.0/24"
• "192.88.99.0/24"
• "198.18.0.0/15"
• "198.51.100.0/24"
• "203.0.113.0/24"
• "224.0.0.0/3"

Also commands/orders to apply them:

• name: Disabling NAT for loopback and for local network
  become: true
  become_user: root
  iptables:
  chain: OUTPUT
  out_interface: "lo"
  table: nat
  jump: RETURN

• name: Allow access TO non tor environments
  become: true
  become_user: root
  iptables:
  chain: OUTPUT
  destination: "{{item}}"
  table: nat
  jump: RETURN
  with_items:
  - "{{non_tor_env}}"
  - "{{IANA_reserved_blocks}}"

Reference: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy

DNSCrypt - Download and update blacklists

Hello, just suggestion for new feature. Can you add feature to manage and update blacklists?

You can use DNSCrypts utility https://github.com/DNSCrypt/dnscrypt-proxy/tree/master/utils/generate-domains-blacklists and make GUI and scheduled task for it.

High traffic in idle state

Made a test with only tor module running via a single obfs4 default bridge in proxy mode. No app was using the proxy, so no traffic from external sources.
However the invizible pro notification shows around 75 MiB download and 20 MiB upload in one hour interval. Average traffic speed is 15kb* 2 (up+down)/s

Is this the normal behavior?

Tor identity change

Allow fast tor identity change like in orbot

Dnscrypt resolvers list update issue

Hi,

I start to use you ARM64 apk on Huawei P10 android 9.0 stock (without root or unlock).
The phone is up to date.
The app version is beta v0.6.0.
Internet connection is WIFI, static ip and high speed without any problems.

I inform, if i select servers on the original list without using first time app (without list update),
after run the app first time, some servers have disapeared from list.
But if before update i have choosen a server not allow in new list, the server stay used, but not appear in list. So i can't uncheck or made any modification for relay.

I inform after first run and update, all the criptostorm servers arent allow anymore and some other ones.

Thanks

regards

Samuel P

• Sorry i don't speak well English, i'm French.

Possible to implement GoodbyeDPI?

I have found this project which can bypass Deep Packet Inspection systems found in many Internet Service Providers used for blocking access to certain websites. Is it possible to implement it in this app?

Wrong text below START TOR button

Signing commits via GPG

Hi!

Why you dont sign your commits?

InviZible without Tor and I2P

Hi!

Do you have any plan to release a "lighter version" of InviZible without Tor and I2P? That would be perfect for users who want to encrypt their DNS requests and nothing else.

Thanks!

incompatibility with firefox

The application causes many sites not to be opened in the firefox application for the new android. Firefox always gives a security warning
http://yenisafak.com/

[crash] RejectedExecutionException on Beta v0.3.1

When I clicked over "I2P Setting"

2019-11-07 21:40:45.480 17970-17970/? E/AndroidRuntime: FATAL EXCEPTION: main
    Process: pan.alexander.tordnscrypt, PID: 17970
    java.lang.RuntimeException: Unable to start activity ComponentInfo{pan.alexander.tordnscrypt/pan.alexander.tordnscrypt.SettingsActivity}: java.util.concurrent.RejectedExecutionException: Task e.a.a.j.v.a$d@3d74985 rejected from java.util.concurrent.ThreadPoolExecutor@cef03da[Terminated, pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 12]
        at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2951)
        at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:3086)
        at android.app.servertransaction.LaunchActivityItem.execute(LaunchActivityItem.java:78)
        at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:108)
        at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:68)
        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1816)
        at android.os.Handler.dispatchMessage(Handler.java:106)
        at android.os.Looper.loop(Looper.java:193)
        at android.app.ActivityThread.main(ActivityThread.java:6718)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)
     Caused by: java.util.concurrent.RejectedExecutionException: Task e.a.a.j.v.a$d@3d74985 rejected from java.util.concurrent.ThreadPoolExecutor@cef03da[Terminated, pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 12]
        at java.util.concurrent.ThreadPoolExecutor$AbortPolicy.rejectedExecution(ThreadPoolExecutor.java:2085)
        at java.util.concurrent.ThreadPoolExecutor.reject(ThreadPoolExecutor.java:848)
        at java.util.concurrent.ThreadPoolExecutor.execute(ThreadPoolExecutor.java:1394)
        at java.util.concurrent.Executors$DelegatedExecutorService.execute(Executors.java:624)
        at e.a.a.j.v.a.b(Unknown Source:7)
        at pan.alexander.tordnscrypt.SettingsActivity.onCreate(:20)
        at android.app.Activity.performCreate(Activity.java:7144)
        at android.app.Activity.performCreate(Activity.java:7135)
        at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1271)
        at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2931)
        at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:3086) 
        at android.app.servertransaction.LaunchActivityItem.execute(LaunchActivityItem.java:78) 
        at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:108) 
        at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:68) 
        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1816) 
        at android.os.Handler.dispatchMessage(Handler.java:106) 
        at android.os.Looper.loop(Looper.java:193) 
        at android.app.ActivityThread.main(ActivityThread.java:6718) 
        at java.lang.reflect.Method.invoke(Native Method) 
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493) 
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858) 

dnscrypt time not correct

dnscrypt doesn't sync the time with the system's. tor does correctly.
dnscrypt is always 1h back.
have the issue since weeks.
don't know if it affects functionality or not.

I'm not sure that DNSCrypt works

As the title mentions, I am not sure that DNSCrypt works, no resolved dns address is shown, should we do any additional configuration to android? Maybe you need to redirect DNS requests to localhost?

What about adding autobuilding of tor, i2p, dnscrypt bins?

I suggest use gitlab cd + gitlab pages (github dont has integration between its services)

misprint "Испоьзовать"

Missing letter "л" - "Использовать".

InviZible/tordnscrypt/src/main/res/values-ru-rRU/strings.xml

Lines 426 to 427 in 3bdcb40

	<string name="pref_dnscrypt_ipv4_servers_summ">Испоьзовать IPv4 сервера</string>
	<string name="pref_dnscrypt_ipv6_servers_summ">Испоьзовать IPv6 сервера</string>

InviZible/tordnscrypt/src/main/res/values-ru-rUA/strings.xml

Lines 427 to 428 in 3bdcb40

	<string name="pref_dnscrypt_ipv4_servers_summ">Испоьзовать IPv4 сервера</string>
	<string name="pref_dnscrypt_ipv6_servers_summ">Испоьзовать IPv6 сервера</string>

[FEATURE REQUEST] Import blacklist file

so, i have list of porn domain, it's 9MB, i'd like to have option to import it

move dnscrypt fallback_resolver to tor dnsport

you bypass tor for first request. of resolvers sources fetching and resolver address resolution.

solution is change
dnscrypt.toml
fallback_resolver = '9.9.9.9:53'
to
fallback_resolver = '127.0.0.1:5400'

and

ignore_system_dns = false
to

## Never let dnscrypt-proxy try to use the system DNS settings;
## unconditionally use the fallback resolver.

ignore_system_dns = true

Quick toggle switch (and optionally captive portal detection)

• implement a quick toggle switch to stop and start service
• optionally disable service when connecting to a network with captive portal or handling it gracefully allowing authentication without disabling service

[Feature Request]Lokinet and Firewall feature like Netguard

Hi.Thank you so much for make this great app.
Can you implement per app firewall like Netguard?

https://github.com/M66B/NetGuard
Here is app and source code.

And lokinet is anonymizing and anticensorship tool that similar to tor.
It available only for Desktop at now.
https://lokinet.org/

Tor bridge error

Hi im using Xiaomi mi9 and Snapdragon 855
After enable tor bridge :

Build version 0.6.8 ARM64

implement OpenVPN. feature.

please, forgive me ;) , but due to inconvinience with local_vpn only one instance and great kind of IZ to rule of console apps with its config files , - i'd like to ask about very useful feature -
it's OpenVPN implementation ! (OpenVPN for now, but may be lately it could be a better VPN app wich will support more VPN protocols)
it's easier, i'd like to suggest to fork this project:
github.com/MaxSmile/EasyVPN-Free
it's sources, sadly, was not updated for couple years, but project is alive:
play.google.com/store/apps/details?id=com.vasilkoff.easyvpnfree

[Feature Request] Tiles & Widgets

Hello,

Would you consider adding tiles in notification bar as well as widgets for quickly starting/stopping service, for the 3 modules?

Snowflake PT support

Is it factible to deploy/enable some option for using an alpha/dev version of Tor in order to support/provide Snowflake's PT (as client, of course)?

Some related links:
https://snowflake.torproject.org/
https://trac.torproject.org/projects/tor/wiki/doc/Snowflake
https://gitweb.torproject.org/pluggable-transports/snowflake.git/tree/client/README.md

Greetings.

F-Droid

Would you please to publish this great app in F-Droid? This will help this app arrive more users caring about privacy and safety. Thanks!

DOT

hi,Is it possible to add the DNS over TLS feature as well?

all dnscrypt config options. one by one.

i want to thank the dev about IZ, this is really Great!
and pls pardon me for not posted just one little config option in the issue, let this issue be global about config options.
So let the writers post options here one by one.
And many thanks to the dev for keeping in IZ the sort order of config options according to dnscrypt's sample config file:
github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml

Build problems

tordnscrypt/build.gradle contains path to your own keystore

While anybody try build it, gradle returns
Illegal character in opaque part at index 2: C:\KStore\keystore.properties on linux; on windows, I think, will be "not found" error.

I suggest add bash script, that will remove some strings from build.gradle or remove strings from config directly

Not executable: 64 bit ELF

Hello,

When i try to connect with any module, i get this error message.

dnscrypt server cert issue

Hi,

I start to use you ARM64 apk on Huawei P10 android 9.0 stock (without root or unlock).
The phone is up to date.
The app version is beta v0.6.0.
Internet connection is WIFI, static ip and high speed without any problems.

I inform some dnscrypt servers i use on other platforms cause cert issue with your app.

If needed i can send logs.

Thanks

regards

Samuel P

Can't access to onion sites

Hello,

Torifying the whole system seems to work fine, except that onion sites remain unreachable.

donations thru playstore

will you add a donation app to the playstore for people who'd like to donate this way?

Replace Stericson busybox with meefik

Stericson busybox is outdated afaik. it would be better to replace in-app busybox with meefik's!

dnscrypt proxy port issue

Hi,

I start to use you ARM64 apk on Huawei P10 android 9.0 stock (without root or unlock).
The phone is up to date.
The app version is beta v0.6.0.
Internet connection is WIFI, static ip and high speed without any problems.

I inform when trying to edit the dnscrypt port, it gives a "dnscrypt module failed" and app force close.
I'd to set back to default 5354.

Regards

Samuel P

Does InviZible Pro support Host filter list ?

Hi,

Thanks for the nice Application

How to add Ad host filter lists like...
adaway.org
energized.pro
github.com/StevenBlack or StevenBlack Unified
DuckDuckGo Tracker Radar
MVPS
Dan Pollock’s hosts file
Peter Lowe’s hosts file
Phishing Army Blocklist
Goodbye Ads by Jerryn70
YouTube ad blocker by Jerryn70

I can check all of the three options but can't uncheck

obfs4proxy fails for some AOSP Q 10/Lineage OS 17/17.1 builds

Reports a warning and tor don't get pass bootstrapped more than of 0%:

Managed proxy at '/data/app/pan.alexander.tordnscrypt-a_n6lXtuoQDHhtNwim5iaA==/lib/arm64/libobfs4proxy.so' reported: error: executable's TLS segment is underaligned: alignement is 4, needs to be at least 32 for ARM Bionic

Now i'm pretty sure this is an issue of early developments of LOS/AOSP Q builds as it talks about ARM Bionic library but i'm not certain and i'm just reporting for you to know.

Greetings.

x86 and x86_64 support

Hello, I have noticed that libdnscrypt-proxy.so is present only for arm and arm64 (according to lib directories).
Do you have any plans to extend architectures support and include x86 and x86_64 too?
If no, can you please suggest how to build dnscrypt-proxy *.so libs for this architectures?
I'm searching for non-Root DNSCrypt support and it will be nice to have all architectures covered

autonome socks5 proxy

hi @Gedsh,
what about implementing a socks5 proxy service, that doesn't route through tor? I'd like to see that, cause it'd be great to encrypt my dns requests with dnscrypt-proxy & route my traffic then to a socks5 proxy server of my choice... . any chance?

greetings 🐱‍🚀