BHAYSTACKG: BASH Haystack Generator

BASH Haystack Generator was initially created purely as an intellectual exercise aimed at analysis of masking 'genuine' traffic across an encrypted tunnel by generating additional traffic

The overall aim being to see whether it's feasibly possible (i.e. without wasting exorbitant amounts of bandwidth) to negate the risk of traffic level analysis by an adversary (on the assumption they're unable to decrypt the traffic).

The project itself simply generates traffic, it's up to the administrator to ensure that the traffic is routed over the relevant tunnel (whether that's a VPN, Tor, an SSH tunnel or anything else).

One thing the project doesn't try to address is the issue of an adversary who's also able to monitor traffic at your endpoint (i.e. if you're using a VPN, is 'public' traffic then emanating from the endpoint). In theory, at least, this would be less of an issue with Tor.

Codebase: Hosted on GitHub


KeyTypePtySummaryStatusResolutionCreatedAssigned To
BHAYSTACKG-1 Informational Major Current Feature Set Closed Informational Only 2014-12-08 10:54:47
Ben Tasker
BHAYSTACKG-2 Bug Major Current Test configuration exhausted File Descriptors on remote Web Server Closed Fixed 2014-12-08 11:02:23
Ben Tasker
BHAYSTACKG-3 Task Major Analyse desirable traffic behaviour Open 2014-12-08 13:49:06
Ben Tasker
BHAYSTACKG-4 New Feature Major Support for traffic profiles Open 2014-12-11 15:32:42
Ben Tasker


Client Script
Server Side Script


0.1 Un-released
0.2 Un-released