whatisgithub

What is spoofgui?

zethrise/spoofgui — explained in plain English

Analysis updated 2026-05-18

111C#Audience · generalComplexity · 3/5LicenseSetup · easy

In one sentence

SpoofGUI is a Windows app with a graphical interface for SNI spoofing, bundling proxy tools so users can bypass certain connection filtering without command line setup.

Mindmap

mindmap
  root((SpoofGUI))
    What it does
      SNI spoofing GUI
      Bundled proxy tools
    Tech stack
      C#
      Xray
      sing-box
    Use cases
      Bypass connection filtering
      Domain scanning
    Audience
      General users

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Set up SNI spoofing profiles with a fake server name for the TLS handshake

USE CASE 2

Paste proxy connection strings and switch between saved configurations

USE CASE 3

Bulk scan domain names to find ones hosted on Cloudflare for spoofing setups

USE CASE 4

Choose between standard proxy, full tunnel, or system proxy modes depending on need

What is it built with?

C#Xraysing-box

How does it compare?

zethrise/spoofguityrrrz/osuhelpertobitege/flowery.net
Stars111108100
LanguageC#C#C#
Last pushed2023-07-16
MaintenanceDormant
Setup difficultyeasyeasyeasy
Complexity3/52/52/5
Audiencegeneralgeneraldeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · easy Time to first run · 5min

Requires administrator privileges, ARM64 Windows is not supported.

GPL-3.0 requires that any modified or distributed version stays open source under the same license.

So what is it?

SpoofGUI is a Windows desktop application that provides a graphical interface for SNI spoofing, a network technique used to bypass certain types of connection filtering. It is a fork of an existing command-line tool called SNI-Spoofing, and its purpose is to make that tool accessible through a proper Windows UI without requiring manual command-line setup. The application is not a VPN. It works by running a local listener that intercepts outbound connections and substitutes a different server name in the initial TLS handshake, which is the part of a secure connection where the client announces which website it wants to reach. It bundles two other network tools: Xray, which handles proxy connections for protocols like VLESS, VMess, Trojan, and Shadowsocks, and sing-box, which can route all operating system traffic through a network tunnel. The three modes available are a standard proxy mode that only routes traffic from apps you configure manually, a tunnel mode that routes everything, and a system proxy mode that sets Windows-level proxy settings. The interface includes several sections. One manages SNI spoofing profiles, where you define which IP and port to connect to and what fake server name to send. Another handles proxy server configurations, where you can paste connection strings in standard formats and switch between them. A scanner section can bulk-test domain names and flag which ones are hosted on Cloudflare, since those domains are commonly used as the fake server name in SNI spoofing setups. The app is self-contained: the release installer downloads the required third-party binaries automatically and does not require Python.NET, or the proxy tools to be pre-installed. It requires administrator privileges because packet manipulation at the network level needs elevated access. Builds are available for 64-bit and 32-bit Windows. ARM64 is not supported because one of the underlying drivers has no ARM64 version. The project is licensed under GPL-3.0, inherited from the upstream tool it is based on.

Copy-paste prompts

Prompt 1
Explain the difference between the standard proxy, tunnel, and system proxy modes
Prompt 2
Help me set up an SNI spoofing profile with the right IP, port, and fake server name
Prompt 3
Walk me through why this app requires administrator privileges to run
Prompt 4
What is the domain scanner checking for when it flags Cloudflare hosted domains?

Frequently asked questions

What is spoofgui?

SpoofGUI is a Windows app with a graphical interface for SNI spoofing, bundling proxy tools so users can bypass certain connection filtering without command line setup.

What language is spoofgui written in?

Mainly C#. The stack also includes C#, Xray, sing-box.

What license does spoofgui use?

GPL-3.0 requires that any modified or distributed version stays open source under the same license.

How hard is spoofgui to set up?

Setup difficulty is rated easy, with roughly 5min to a first successful run.

Who is spoofgui for?

Mainly general.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.