System-wide VPN tunneling over ICMP using pingtunnel + tun2socks + Wintun, wrapped in a modern WPF client.
- ICMP-based tunneling via pingtunnel
- Wintun TUN adapter with system-wide routing
- Real-time tunnel + physical traffic speed display
- DNS leak protection with built-in DNS forwarder + cache
- UDP blocking on TUN interface to prevent QUIC/UDP failures
- Health monitoring + auto-restart on high latency
- Split-tunnel support (bypass subnets)
- Crash recovery and orphaned firewall cleanup
- Config import/export + live logs
Grab the latest release from GitHub:
- Installer (recommended): installs the app, creates uninstaller, optional desktop shortcut
- Portable (self-contained): folder with EXE +
Resources+ support files, no install required - Portable (framework-dependent): smaller multi-file folder, requires .NET Desktop Runtime
- Download the installer
.exe - Run as Administrator
- Choose optional desktop shortcut during setup
- Download the portable
.zip - Extract anywhere
- Keep all files (including the
Resourcesfolder) together - Run the EXE as Administrator
- Windows 10/11 (x64)
- Administrator privileges (required for routes/DNS/firewall)
- .NET 8 Desktop Runtime for framework-dependent builds
- Add or import a server config
- Set Server Address and Server Key
- Click Connect
cd "PingTunnel-VPN-Client"
.\scripts\build.ps1 -ReleaseOutput:
dist\(self-contained publish output + Resources)dist-framework\(framework-dependent publish output)
This repo includes a GitHub Actions workflow that builds:
- Portable self-contained folder + ZIP
- Portable framework-dependent folder + ZIP
- Installer EXE (Inno Setup, optional desktop shortcut)
Tag a release like v1.2.3 to publish.
Use only on networks and systems you own or have explicit permission to administer.
Unauthorized use may violate laws or policies.
- Not elevated: Right‑click → Run as Administrator
- Binaries missing: Ensure
Resourcescontainspingtunnel.exe,tun2socks.exe,wintun.dll - ICMP blocked: Your network may block ping; try another network
- DNS leaks: Ensure “Tunnel DNS” mode is selected
Some antivirus products may flag tunneling tools like pingtunnel.exe and tun2socks.exe. To reduce false positives:
- Prefer the installer or portable multi‑file build (resources kept next to the app, not self‑extracted to temp).
- Ship a code‑signed installer/executable for releases.
- If you believe a detection is a false positive, submit the binaries to Microsoft Defender for review.
MIT for this client. Third‑party components have their own licenses; see THIRD_PARTY_NOTICES.md.
