title: How an HTTP Injection bypass a firewall
body: <p>For a while now many apps/application in almost all platforms (example <a href="https://play.google.com/store/apps/details?id=com.evozi.injector" rel="nofollow">this</a> on android) that can be used to "inject a certain url or text" (usually of that one allowed address) to an blocked outgoing connection and magically bypass a firewall.</p>
  
  <p>I have intercepted one of these connections with fiddler but cant seem to see the difference between an injected an non injected connection especially HTTPS. how to they fool ISPs? what does it take to forge connection like those?</p>