ProxHub is a powerful, self-contained LAN proxy manager for Windows. It combines a SOCKS5/HTTP proxy engine, a system-wide transparent interception layer, a Proxifier-style per-app force routing engine, and an embedded web control panel — all in a single portable executable with no external dependencies.
Features
Proxy Engine
- SOCKS5 and HTTP listeners with custom bind address, port, egress LAN IP, and optional authentication
- Upstream proxy chaining per listener — forward through any external SOCKS5 or HTTP proxy (NordVPN, commercial SOCKS, etc.)
- Global master switch to enable/disable all proxies instantly
- Up to 4096 simultaneous connections per listener with configurable DNS caching and timeout controls
System-Wide Transparent Interception
- Custom signed kernel driver (WFP) intercepts all outbound TCP from every process — no app configuration needed
- Passive DNS sniffer captures DNS responses at the kernel level for domain-based rule matching on any app
- TLS SNI and HTTP Host header extraction without breaking connections
- DoH/DoT/DoQ guard — blocks encrypted DNS resolvers so the sniffer always sees hostname traffic
- QUIC/HTTP3 suppression — forces browsers to TCP so all rules apply
- Auto-kills existing connections on intercept start to force reconnection through the proxy
Force Mode (Per-App, Proxifier-style)
- IAT-patch DLL injection makes any app proxy-aware without native proxy support
- IFEO integration — automatically intercepts any launch of a target exe, system-wide, by any means
- No-UAC launcher so target apps start with hooks already applied
Advanced Rule & Command Engine
- Rule-based routing: match by EXE pattern, host/IP/CIDR/wildcard domain, and port range —
proxy,direct, orblock - AND-group / OR-group rule logic with per-condition enable/disable chips
- Multi-proxy per rule with
random,round-robin, orchainload balancing modes - Advanced Command Engine (ACE): richer match fields including
exe_signed,exe_size,country, regex operators, and a dynamicadd_to_ruleaction - Direct egress pinning to a specific NIC — blocks if that adapter goes offline instead of leaking
- Block action can also terminate the process and its children
- Live connection tracker and per-rule traffic statistics persisted across restarts
Public IP & GeoIP
- Check exit IP through any listener via a bundled helper that speaks SOCKS5/HTTP natively
- Dual-provider fallback: ipinfo.io + ip-api.com
- Auto IP check on startup and/or on a timer; Telegram alert on IP change
- Built-in speed test through any proxy (download + upload Mbps, averaged over multiple runs)
VirusTotal Integration
- Hash-only process scanning — never uploads files
- Auto-check mode for all processes or unsigned executables only
- Authenticode and catalog signature verification with per-path cache
Telegram Notifications
- Full event coverage: startup, shutdown, engine errors, TLS errors, failed login attempts, IP changes, proxy failures, new processes, VirusTotal hits, blocked processes, and more — all individually toggled
Web Control Panel
- Embedded HTTP/HTTPS server with session auth and PBKDF2-hashed password
- Single-page app served from assets compiled into the binary — no external files
- Server-Sent Events live traffic stream to the dashboard
- Light/dark theme, optional LAN exposure
Windows-Native Integration
Inno Setup installer; legacy PoxLAN profile import
System tray icon, balloon notifications, Win32 log and settings windows
Windows service mode with optional auto-start
WPF desktop wrapper with WebView2 (Chromium) for a native-feeling window
Launch at startup via registry; singleton enforcement; UAC elevation for driver and hosts-file management