One-click DPI bypass tool for Windows. Unblock restricted websites and services without a VPN. PunchThrough defeats Deep Packet Inspection (DPI) used by ISPs and network providers to block or throttle your traffic.
Works like a local VPN alternative — no remote servers, no subscriptions, no speed loss. No proxy — works at the packet level so games, streaming, and all apps work normally.
PunchThrough uses two techniques to bypass internet censorship:
-
DNS over HTTPS (DoH) — ISPs poison DNS responses for blocked domains. PunchThrough switches your DNS to Cloudflare's encrypted DoH, so your ISP can't tamper with DNS queries.
-
TLS Fragmentation — Uses zapret (winws) to fragment TLS ClientHello packets at the network driver level via WinDivert. DPI systems can't inspect fragmented handshakes, so blocks are bypassed.
No proxy. No tunnel. No speed penalty. Just unblocked internet.
- One-click connect/disconnect from the system tray
- Three bypass modes:
- Full Bypass — all HTTPS traffic is protected
- Discord Only — only Discord is unblocked, other apps unaffected
- Custom — choose which sites to unblock with preset lists
- Auto-connect on startup — set it once, forget about it
- Built-in installer — everything is bundled, no downloads needed
- No system proxy — works at packet level, games and streaming unaffected
- DNS over HTTPS — automatic encrypted DNS via Cloudflare
- Preset domain lists — Discord, Twitter/X, Instagram, Reddit, TikTok, YouTube, and more
- Multi-language — English, Turkish, French
- Lightweight — runs silently in the system tray
- Clean uninstall — "Reset & Quit" removes all traces
- Download
PunchThrough.exefrom Releases - Run it as Administrator — the setup screen will handle everything
- Choose your bypass mode (Full, Discord Only, or Custom)
- Click Install, then Launch PunchThrough
That's it. Your internet is now unblocked.
Note: Administrator rights are required for the WinDivert network driver and DNS configuration.
| Mode | What it does | Best for |
|---|---|---|
| Full Bypass | DPI bypass on all HTTPS + system DoH DNS | Unblocking everything |
| Discord Only | DPI bypass only for Discord domains | Minimal impact, just Discord |
| Custom | DPI bypass for selected domains | Fine-grained control |
In Custom mode, you can add domains manually or use preset buttons: Discord, Twitter/X, Instagram, Reddit, TikTok, YouTube, Wikipedia, Patreon, Adult Sites.
| What | Where |
|---|---|
| Application | %LocalAppData%\Programs\PunchThrough\PunchThrough.exe |
| Zapret engine | %LocalAppData%\PunchThrough\zapret\ |
| Settings | %LocalAppData%\PunchThrough\settings.json |
| Desktop shortcut | Desktop\PunchThrough.lnk |
| Startup entry | HKCU\Software\Microsoft\Windows\CurrentVersion\Run |
From the app: Right-click the tray icon > Reset & Quit. This stops the bypass, restores DNS, removes the startup entry, and you can delete the files manually.
Manual removal:
- Close PunchThrough from the tray
- Delete
%LocalAppData%\Programs\PunchThrough\ - Delete
%LocalAppData%\PunchThrough\ - Delete the desktop shortcut
- Remove the startup entry: open
regedit, go toHKCU\Software\Microsoft\Windows\CurrentVersion\Run, deletePunchThrough
Is this a VPN? No. PunchThrough doesn't encrypt or tunnel your traffic. It fragments TLS handshake packets to prevent DPI systems from identifying and blocking them, and uses encrypted DNS to bypass DNS poisoning.
Will this slow down my internet? No. There's no proxy or tunnel. Zapret works at the packet level — it only touches TLS handshakes, not your actual data.
Why does it need Administrator? The WinDivert driver requires admin to load, and DNS configuration requires admin to change system settings.
Will this break my games? No. Unlike proxy-based solutions, PunchThrough works at the packet level. Games, streaming, and all apps work normally. In Discord Only or Custom mode, only selected domains are affected.
My internet breaks after closing PunchThrough?
Use the Quit button in the tray menu — it restores DNS automatically. If you killed the process directly, your DNS might still be set to Cloudflare (1.1.1.1). Change it back in Windows Settings > Network > DNS, or run: netsh interface ip set dns "YOUR_ADAPTER" dhcp
dotnet publish PunchThrough\PunchThrough.csproj -c Release -r win-x64 --self-contained -p:PublishSingleFile=trueRequires .NET 9 SDK. Zapret (winws.exe) binaries must be placed in PunchThrough\Assets\.
- zapret by bol-van — packet-level DPI bypass engine
- WinDivert — Windows network packet capture/divert driver
DPI bypass, internet censorship, website unblock, local proxy, VPN alternative, Windows proxy tool, network freedom, anti-censorship, deep packet inspection bypass, free VPN alternative, unblock websites Windows, ISP bypass tool, TLS fragmentation, internet freedom tool, zapret, WinDivert, DNS over HTTPS, DoH
Windows icin tek tikla DPI bypass araci. VPN olmadan engellenmis sitelere ve servislere erisin. PunchThrough, ISP'lerin trafigi engellemek icin kullandigi Derin Paket Incelemesini (DPI) paket seviyesinde alt eder.
Yerel VPN alternatifi — uzak sunucu yok, abonelik yok, hiz kaybi yok. Proxy yok — paket seviyesinde calistigi icin oyunlar, streaming ve tum uygulamalar normal calisir.
- DNS over HTTPS (DoH) — ISP'ler engelli sitelerin DNS yanitlarini zehirler. PunchThrough DNS'inizi Cloudflare'in sifreli DoH'una cevirir.
- TLS Parcalama — zapret (winws) kullanarak TLS ClientHello paketlerini WinDivert ile parcalar. DPI sistemleri parcalanmis el sikismalari inceleyemez.
Proxy yok. Tunel yok. Hiz kaybi yok. Sadece engelsiz internet.
- Tek tikla baglan/kes — sistem tepsisinden
- Uc bypass modu:
- Tam Bypass — tum HTTPS trafigi korunur
- Sadece Discord — sadece Discord engeli kaldirilir
- Ozel — hangi sitelerin engelini kaldirmak istedigini sec
- Baslangicta otomatik baglanma
- Dahili kurulum — her sey gomulu, indirme gerekmez
- Sistem proxy'si yok — paket seviyesinde calisir, oyunlar etkilenmez
- DNS over HTTPS — otomatik sifreli DNS
- Hazir domain listeleri — Discord, Twitter/X, Instagram, Reddit, TikTok, YouTube ve dahasi
- Cok dilli — Ingilizce, Turkce, Fransizca
- Temiz kaldirma — "Sifirla & Cik" ile tum izleri siler
- Releases sayfasindan
PunchThrough.exeindirin - Yonetici olarak calistirin — kurulum ekrani her seyi halleder
- Bypass modunuzu secin (Tam, Sadece Discord veya Ozel)
- Install ve ardindan Launch PunchThrough tiklayin
Bu kadar. Internetiniz artik engelsiz.
| Ne | Nerede |
|---|---|
| Uygulama | %LocalAppData%\Programs\PunchThrough\PunchThrough.exe |
| Zapret motoru | %LocalAppData%\PunchThrough\zapret\ |
| Ayarlar | %LocalAppData%\PunchThrough\settings.json |
| Masaustu kisayolu | Masaustu\PunchThrough.lnk |
Uygulamadan: Tepsi simgesine sag tikla > Sifirla & Cik. Bypass'i durdurur, DNS'i geri yukler, baslangic kaydini siler.
Manuel kaldirma:
- PunchThrough'u tepsiden kapatin
%LocalAppData%\Programs\PunchThrough\silin%LocalAppData%\PunchThrough\silin- Masaustu kisayolunu silin
Bu bir VPN mi? Hayir. Sadece TLS el sikisma paketlerini parcalar ve sifreli DNS kullanir. Trafiginiz sifrelenmez veya tunellenmez.
Oyunlarimi bozar mi? Hayir. Proxy tabanli cozumlerden farkli olarak paket seviyesinde calisir. Oyunlar, streaming ve tum uygulamalar normal calisir.
Neden Yonetici izni gerekiyor? WinDivert ag surucusu ve DNS yapilandirmasi icin yonetici hakki gereklidir.
Outil de contournement DPI en un clic pour Windows. Debloquez les sites et services restreints sans VPN. PunchThrough contourne l'Inspection Approfondie des Paquets (DPI) au niveau des paquets reseau.
Alternative VPN locale — pas de serveur distant, pas d'abonnement, pas de perte de vitesse. Pas de proxy — fonctionne au niveau des paquets, les jeux et le streaming ne sont pas affectes.
- DNS over HTTPS (DoH) — Les FAI empoisonnent les reponses DNS. PunchThrough bascule vers le DoH chiffre de Cloudflare.
- Fragmentation TLS — Utilise zapret (winws) pour fragmenter les paquets TLS ClientHello via WinDivert.
Pas de proxy. Pas de tunnel. Pas de ralentissement. Juste un internet debloque.
- Connexion/deconnexion en un clic
- Trois modes de bypass :
- Bypass complet — tout le trafic HTTPS est protege
- Discord uniquement — seul Discord est debloque
- Personnalise — choisissez quels sites debloquer
- Connexion automatique au demarrage
- Installateur integre — tout est inclus
- Pas de proxy systeme — fonctionne au niveau des paquets
- DNS over HTTPS — DNS chiffre automatique
- Multilingue — anglais, turc, francais
- Desinstallation propre — "Reinitialiser & Quitter"
- Telechargez
PunchThrough.exedepuis Releases - Executez en tant qu'administrateur
- Choisissez votre mode de bypass
- Cliquez sur Install, puis Launch PunchThrough
Clic droit sur l'icone > Reinitialiser & Quitter. Arrete le bypass, restaure le DNS, supprime l'entree de demarrage.
MIT