Imagine that there is a PC you have physical access to, and a router you have no physical access to. Also no digital access to router. The router is for sure compromised and intercepting all packets from the PC, also is hijacking DNS requests and probably includes fake root cert to decrypt HTTPS. In such a conrfiguration and considering there's no way to change it's firmware, so only from the PC connected to this router it is possible to do something, is there any possibility to:
- Avoid DNS hijack, considering popular DNS servers like Cloudflare, Google etc. are hijacked in router too, so they reply with wrong DNS, that's checked.
- Determine whether root cert is in place or not.
- If it is, then avoid the usage of certificates, signed by it (or if I understand mechanics of connection wrong, then anyway how to encrypt my traffic in such a case).
- Become sure I entered true internet, considering router's DNS hijack is dynamic, so there's no website I can say for very sure, that it's just as it designed by it's owners, instead of deface.
May VPN help at least with hijack? May be TOR or I2P useful in such a case? Any another solutions? Are there at all the way to connect to internet without being intercepted in such a case?