GhostDPI - L7 Discord Native DPI Bypass

This tool intercepts and fragments TLS Client Hello packets specifically for Discord to bypass Deep Packet Inspection (DPI) filters.

It comes with a stealthy graphical user interface (GUI), system tray support, and a built-in domain management system to seamlessly work in the background.

Features

• GUI Dashboard: Modern dark-themed dashboard to monitor status and manage bypass rules.
• Domain Management: Easily add or remove domains from the intercept list directly from the application.
• Stealth Mode: Minimizes to the system tray for unobtrusive background operation.
• Auto-Start: Optionally run the application at logon with elevated privileges (UAC Bypass via Task Scheduler).
• DNS Blocking: Prevents DNS leaks for intercepted traffic by routing queries to alternative DNS servers.

Prerequisites

• Windows OS
• CMake installed and added to PATH.
• C++ Compiler (e.g., Visual Studio / MSVC C++ Build Tools).

Quick Start

1. Install Dependencies

Run the scripts\setup.bat script to automatically download the required dependencies (WinDivert v2.2.2-A) and configure the CMake project.

scripts\setup.bat

2. Build the Project

Run the scripts\build.bat script to compile the executable. You can optionally specify the build configuration (Release or Debug). If no parameter is provided, it defaults to Release.

scripts\build.bat Release

or

scripts\build.bat Debug

3. Run the Application

The executable and its required dependencies (WinDivert.dll, WinDivert64.sys) will automatically be copied to the target output directory (e.g., build\Release\).

You must run the executable as an Administrator for it to intercept network packets.

cd build\Release
GhostDPI.exe

How to Use

1. Launch GhostDPI.exe as Administrator.
2. Click GHOST_DPI::ACTIVE() to start the WinDivert engine. The UI will show realtime statistics of bypassed packets and blocked DNS queries.
3. Manage the domains you want to bypass DPI for in the DOMAIN DATABASE list.
4. Check Auto-Start (Hidden) to automatically start the bypass engine in the background when you log into Windows without UAC prompts.
5. You can safely minimize the application to the system tray. Double-click the tray icon to restore the dashboard, or right-click for quick actions.