Unlike HTTP Injector (which only works for specific apps/packages), this tunnel routes YOUR ENTIRE WINDOWS INTERNET TRAFFIC through a secure proxy - every browser, every app, every program!
Created by Ishan Oshada | GitHub
- Only works for specific app packages
- Requires manual configuration per app
- Limited to HTTP/HTTPS traffic
- No system-wide integration
- WHOLE INTERNET - Every Windows application uses the proxy
- SYSTEM-WIDE - No app-specific configuration needed
- ALL TRAFFIC - HTTP, HTTPS, TCP, UDP, games, browsers, downloads
- AUTO CONFIG - Windows system proxy automatically enabled/disabled
- REAL-TIME STATS - Live bandwidth monitoring for all connections
Think of it as a VPN, but faster and more efficient!
- ๐ Full Windows System Proxy - Routes ALL internet traffic
- ๐ Real-time Traffic Monitor - Live speed display in console title bar
- ๐ Per-Connection Tracking - See bandwidth usage per destination
- ๐ฏ Smart SNI Detection - Automatically captures domain names
- ๐พ Low Resource Usage - Minimal CPU and memory footprint
- ๐ Graceful Shutdown - Automatically restores proxy settings
- ๐ Configurable - Easy JSON configuration file
- ๐ SOCKS5 Proxy - Compatible with all Windows apps
- ๐ค GitHub Actions CI/CD - Automatic builds on every push
- Windows 10/11 (64-bit required)
- Windows 8/8.1 (64-bit, may work)
Xray is the core engine that creates the encrypted tunnel. Download the latest Windows version:
Method 1: Direct Download (Recommended)
# Visit official releases
https://github.com/XTLS/Xray-core/releases/latest
# Download for Windows 64-bit:
Xray-windows-64.zip
# For 32-bit Windows:
Xray-windows-32.zipMethod 2: Using PowerShell (Automated)
# Create directory
New-Item -ItemType Directory -Force -Path "E:\softwares\v2ray"
# Download latest Xray for Windows 64-bit
Invoke-WebRequest -Uri "https://github.com/XTLS/Xray-core/releases/latest/download/Xray-windows-64.zip" -OutFile "E:\softwares\v2ray\xray.zip"
# Extract
Expand-Archive -Path "E:\softwares\v2ray\xray.zip" -DestinationPath "E:\softwares\v2ray\" -Force
# Remove zip
Remove-Item "E:\softwares\v2ray\xray.zip"
# Test installation
E:\softwares\v2ray\xray.exe -versionMethod 3: Manual Download
- Go to: https://github.com/XTLS/Xray-core/releases
- Download
Xray-windows-64.zip - Extract to
E:\softwares\v2ray\orC:\xray\ - Verify
xray.exeexists in that folder
# Download from
https://git-scm.com/download/win# Download Go from
https://golang.org/dl/
# Download Windows .msi installer (e.g., go1.21.0.windows-amd64.msi)
# Run installer and follow instructionsFrom GitHub Main Branch:
- Download secure-tunnel.exe (Click to download latest build)
- Place the file in any folder (e.g.,
C:\tunnel\) - Ensure you also have your
config.jsonin the same folder. - Note: Some browsers may flag the
.exeas "unrecognized"โclick "Keep" or "Run anyway" as this is a custom-built tool.
# Step 1: Clone the repository
git clone https://github.com/ishanoshada/Secure-Tunnel-Windows.git
cd Secure-Tunnel-Windows
# Step 2: Initialize Go module
go mod init secure-tunnel
# Step 3: Download dependencies
go mod tidy
# Step 4: Build the executable
# For console version (shows window - good for debugging)
go build -o secure-tunnel.exe main.go
# Step 5: (Optional) Move to bin folder
mkdir bin\windows_x64
move secure-tunnel.exe bin\windows_x64\Build Commands Explained:
go mod init secure-tunnel- Creates go.mod file for dependency managementgo mod tidy- Downloads required dependencies (golang.org/x/sys/windows)go build -o secure-tunnel.exe main.go- Compiles to executable
Create config.json in the same folder as secure-tunnel.exe:
{
"exePath": "E:\\softwares\\v2ray\\xray.exe",
"localPort": 10808,
"sniHost": "m.facebook.com",
"serverAddress": "your-server.com",
"serverPort": 443,
"userID": "your-uuid-here",
"path": "/your-path",
"tunnelName": "My Secure Tunnel"
}You can use these SNI hosts in your config.json depending on your active internet package. This allows the tunnel to bypass billing or use dedicated data packages.
| Package / App | SNI Host (Use in sniHost field) |
|---|---|
| Facebook & WhatsApp | m.facebook.com |
| Zoom (Learn from Home) | zoom.us or vln02.zoom.us |
| Microsoft Teams | teams.microsoft.com |
| Google Services | [www.google.com](https://www.google.com) |
| Dialog Unlimited (Social) | free.facebook.com |
| Mobitel (Social) | m.facebook.com |
| SLT Learn from Home | zoom.us |
| Generic/Cloudflare | cdn.cloudflare.com |
| Parameter | Description | Example |
|---|---|---|
exePath |
Full path to xray.exe |
E:\\softwares\\v2ray\\xray.exe |
localPort |
Local SOCKS5 proxy port | 10808 |
sniHost |
SNI host for TLS fingerprint (can be any domain) | m.facebook.com, www.google.com, cdn.cloudflare.com |
serverAddress |
Your VLESS server address | seaseus.pp.ua |
serverPort |
VLESS server port | 443 |
userID |
VLESS user UUID | ab73296c-6f34-4684-.......... |
path |
WebSocket path | /seaseus |
tunnelName |
Custom tunnel name (optional) | My Tunnel |
You need a VLESS+WebSocket+TLS server. Get from:
- Your own VPS with Xray installed (DigitalOcean, Vultr, AWS - $3-10/month)
- Service providers offering VLESS configs
- Generate using Xray on your server
Server Requirements:
- Protocol: VLESS
- Transport: WebSocket (WS)
- Security: TLS
- Encryption: none
- Network: TCP (port 443 usually)
# Navigate to tool directory
cd C:\tunnel\
# Run the tunnel
secure-tunnel.exe
#secure-tunnel.exe --config path
# The console will show:
# - Your real IP before connection
# - Your tunnel IP after connection
# - Live speed in the title bar
# - Every connection with bandwidth usage- Tool starts and reads config.json
- Enables Windows system proxy (settings applied)
- Starts Xray core (establishes encrypted tunnel)
- ALL your internet traffic now goes through the tunnel:
- Microsoft Edge / Chrome / Firefox
- WhatsApp Desktop / Telegram / Discord
- Steam / Epic Games / Minecraft
- Windows Update / Microsoft Store
- Any app that uses the internet!
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ Secure Tunnel Manager - by Ishan Oshada โ
โ github.com/ishanoshada โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
[*] Tunnel: My Secure Tunnel
[*] Server: your-server.com:443
[*] SNI: m.facebook.com
[DEBUG] Stats OK โ recv: 15690109 KB, sent: 524288 KB
[*] Checking current IP...
[BEFORE] IP: 192.168.1.100 (Your real IP)
[!] Starting tunnel...
[*] Waiting for tunnel to come up...
[AFTER] IP: 203.0.113.50 (Tunnel IP - different country/region)
------------------------------------------------------------
[CONN] google.com:443 0.15 mb [โ 1.23 mb]
[CONN] github.com:443 0.42 mb [โ 1.65 mb]
[CONN] cdn.discordapp.com:443 0.08 mb [โ 1.73 mb]
[CONN] api.telegram.org:443 0.23 mb [โ 1.96 mb]
[CONN] windows.update.com:80 0.01 mb [โ 1.97 mb]
The window title shows your current speed and total usage:
My Secure Tunnel | โ 1.23 MB/s | โ 0.45 MB/s | Session: 125.67 MB
Check your IP:
# Before tunnel - your real IP
curl ifconfig.me
# After tunnel starts - your tunnel IP (should be different)
curl --proxy socks5h://127.0.0.1:10808 ifconfig.meTest in Browser:
- Open Chrome/Edge
- Visit
https://whatismyip.com - Should show your tunnel IP, not your real IP
Test in Apps:
- Open WhatsApp Desktop - works through tunnel
- Open Telegram - works through tunnel
- Download a file - goes through tunnel
Press Ctrl+C in the console window - system proxy automatically disabled, internet reverts to normal.
IMPORTANT: Always stop with Ctrl+C, not by closing the window!
| Feature | HTTP Injector (Android/PC) | This Windows Tool |
|---|---|---|
| Scope | Specific app packages only | ENTIRE WINDOWS SYSTEM |
| Configuration | Per-app setup required | AUTO - Set once |
| Browser Support | Manual proxy setup | AUTOMATIC |
| Game Traffic | Usually not supported | YES - Full support |
| Windows Updates | No | YES |
| UDP Traffic | Limited | YES |
| Background Apps | No | YES |
| Real-time Stats | Basic | Advanced with per-connection |
| Resource Usage | High (Java/Android emulation) |
Q: Is this a VPN? A: No, it's a SOCKS5 proxy tunnel. It works similarly but only for applications that support SOCKS5 proxies.
Q: Can I use this with any browser? A: Yes! All major browsers respect Windows system proxy settings.
Q: Does it work with games? A: Most games work, but some use UDP which requires additional configuration.
Q: How much does it cost? A: The tool is free and open-source. You need your own VLESS server (VPS costs $3-10/month).
Q: Can I use multiple tunnels? A: Run multiple instances with different local ports and config files.
Q: Why does it show "Stats OK" but no traffic? A: The stats show total system traffic. If no tunnel traffic, check your server configuration.
Q: How to auto-start with Windows?
A: Create a shortcut in shell:startup pointing to your executable.
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Email: [ic31908@gmail.com]
MIT License - Free for personal and commercial use.
If you find this tool useful, please star the repository on GitHub!
Made with โค๏ธ by Ishan Oshada
Windows โข Secure โข Fast โข Free
