Flowdriver Covert Transport

If you're behind a firewall that blocks VPNs or inspects SNI headers, this tunnels SOCKS5 traffic through Google Drive API calls. The client uploads request packets as files to a shared folder, the server polls that folder, makes the actual TCP connections, and writes responses back as more files. It's slow (150-300ms polling intervals) and burns through Drive API quota, but the traffic looks like legitimate googleapis.com activity. You'll need OAuth2 credentials and a published Google Cloud app to avoid token expiry. Best for situations where nothing else works and you can tolerate high latency. Not subtle if someone checks your Drive folder, but effective against network-level DPI.