Show HN: HCDrill – Telegram bot to decrypt tunneling apps configuration files

Greetings!

There are some apps in Android which fit into the category of "SSH Tunneling" apps. Through an HTTP payload, V2Ray, or other methods, they are able to create a tunnel to an SSH server to establish a secure SSH tunneling experience.

One feature of those apps is that the user is able to export their current configuration as a file and share it with others. There is, however, a caveat. The config author can choose to "lock it", which roughly means to allow its import in the app, but not the revealing of its actual values. Other restrictions can also apply such as expiration dates or the blocking of rooted devices.

We have made it a mission to give the config USERS control over their own connections, so we made a Telegram bot that takes the file and decrypts it. We support many apps (config file types), each with its own obfuscation and encryption scheme. This takes a ton of reverse engineering work, so I would appreciate any feedback :)