EN
v2.1.7
WPE_TUTORIAL_V2 // 07_TOOLS

Tools & Settings

Tutorial Rev · 2.1.8 beta

Everything outside the main screen: five auxiliary tools, the WPC Config that publishes nodes to the accelerator, the System Log, five groups of global settings, the remote management console, and a performance checklist.

01 · Statistical Data

AreaWhat it shows
Filter executionsa bar: filter executions divided by total proxy packets
Filter actionsfive bars: Replace, Change, Intercept, NoModify Display and NoModify NoDisplay as a share of all executions
Detailsa table: no., filter name, status, action, executions
Refreshrecalculates asynchronously

The status column has three values: Processing (enabled and has matched), Enabled (enabled but not matched yet) and Stopped (not enabled). It is the fastest way to tell whether a filter is actually running.

02 · Text Comparison

Two tabs, and the main tool for pinning down a field's offset.

01Text Comparison · load two captures of the same packet into A and B and see at a glance which bytes moved.
Text ComparisonDuplicate Finder Text A ( length 48 ) 01 00 0A 00 30 00 00 00 64 4A 5B C3 7F 00 11 22 33 44 55 66 77 88 99 AA BB CC DD EE FF 00 01 02 Text B ( length 48 ) 01 00 0A 00 30 00 00 00 5A 4A 5B C3 7F 00 11 22 33 44 55 66 77 88 99 AA BB CC DD EE FF 00 01 02 1 regular expression Filter Text Comparison Clear Stash Restore 2 3 PositionText AText BDifference 8645AModified the restUnchanged 4
  1. Text A / Text B: paste by hand, or fill them from the packet list's Add to Text A / Add to Text B. The headings show the current length
  2. Regex filter and compare: filter both sides with a regular expression before comparing; the diff itself comes from DiffPlex
  3. Stash / Restore: park the current contents, then bring them back
  4. Difference table: position, the value on each side, and the kind of difference — inserted, deleted, modified or unchanged

The Duplicate Finder tab is laid out the same way, with one extra numeric box — 2 by default — as the threshold for calling something a repeat. Use it to find recurring fragments in long data.

03 · XOR

ControlWhat it does
the upper hex editorthe source data
XOR value (repeating keys supported)space-separated hex. More than one byte and the key is applied cyclically
Calculate / Clearthe result lands in the lower hex editor

Both hex boxes offer cut, copy, paste and select-all from the context menu, so data moves easily between here and the packet editor.

04 · Transcoding

A text to convert box at the top with Encode and Decode; every result appears below at once:

encoding — output
Bytes UTF7 UTF8 UTF16 UTF32 Unicode base64ANSI-GBK ANSI-UTF7 ANSI-UTF8 ANSI-UTF16 ANSI-UTF32 ANSI-Unicode ANSI-base64

05 · Extraction

Pick the kind of extraction from the drop-down, drop a file on the area in the middle (click or drag a file here to extract), read the result below, and export it with Generate file.

ExtractionInputOutput
Charles XML session → hex.chlsxdecodes the Base64 inside <response><body> and shows it as hex
FILT filter file → WPE64 filter.filt from the old WPEconverted to WPE x64 filter XML
WPE account file → CCProxy account file.paa CCProxy-format .ini

On-screen hint: once extraction succeeds the contents appear below, and the generate button exports them in the matching format.

06 · WPC Config (feeding the accelerator)

Proxy Mode only. What you set here is published through WPE's built-in web service to the WPEProxyCap accelerator client.

// Prerequisite: a subscription ID

Clients reach what you configure here by way of a subscription ID: WPC exchanges the ID with the subscription server for this machine's address before it requests either endpoint below. Only the subscription server issues IDs, and you have to apply for one — see Proxy Cap · where a subscription ID comes from.

02The delivery path · the client pulls two unauthenticated endpoints for nodes and notices.
WPEProxyCapAccelerator client WPE x64Remote MGT web :88 WPC Configservers, rules, notices GET /ProxyCap/GetServerList node list + rules reads SOCKS5 proxy servicewhere a node actually exits once connected, traffic goes over SOCKS5 /ProxyCap/* skips HTTP Basic auth
endpoints
GET http://{this machine's IP}:{remote MGT port}/ProxyCap/GetServerListGET http://{this machine's IP}:{remote MGT port}/ProxyCap/GetNoticeList

The server list

Menu: add a server, clear all servers. Columns: Enable / Server name / Server IP / Server port / Password-recovery URL / Registration URL / Verification URL / Actions (edit · rules · delete).

FieldDefaultNotes
Enabletickedonly enabled servers are published
Server namethe node name the client displays
IP address / Port— / 1080the node's SOCKS5 address
Password-recovery URLwhere the client's recover-password button goes
Registration URLwhere the client's register button goes
Verification URLthe endpoint the client verifies accounts against

Rules (one set per server)

Reached from the rules button on a server row. WPEProxyCap splices these into mihomo's rules: section.

FieldNotes
Type24 Clash / mihomo rule types, listed below
Parameterseveral at once, separated by ; — entering a.com;b.com creates two rules
ActionPROXY, REJECT or DIRECT
rule types — 24
DOMAIN DOMAIN-SUFFIX DOMAIN-KEYWORD DOMAIN-REGEXGEOIP GEOSITE IP-CIDR IP-CIDR6SRC-IP-CIDR SRC-PORT DST-PORT PROCESS-NAMEPROCESS-PATH NETWORK RULE-SET MATCHAND OR NOT SUB-RULEIN-PORT UI-EX COMMAND DEVICE-NAME
// Always add a catch-all

End the table with type = MATCH, action = DIRECT so unmatched traffic goes direct instead of everything being forced through the proxy.

The notice list

FieldNotes
Notice type1 event news (blue) · 2 maintenance (yellow) · 3 esports (green) · 4 limited-time shop (purple) · 5 community (blue)
Title / Bodythe body may span several lines
More URLwhere the More link goes

07 · The System Log

TabColumnsExport headings
System Logno. / time (HH:mm:ss) / module / messagetime · module · message
Filter Logno. / time (HH:mm:ss:fffffff) / filter name / action / matches / type / lengthtime · filter name · action · matches · type · length
Proxy Logno. / time / account / IP address / messagetime · account · IP address · message

Toolbar: Auto scroll and Auto clear with a threshold, 5000 by default. Right-click to export to Excel (.xls). Underneath, log4net writes the same entries to disk, configured in Config\log4net.config.

// The first place to look

Failed injections, a proxy that will not start, certificate installation, filter errors, bad robot instructions, remote management starting and stopping — all of it is recorded here. Come here before the FAQ.

08 · System Settings

GroupControlDefaultNotes
Working modeSpeed Modeoffwith it on, packets are never queued or displayed — only counted and passed through the filters. For very high-rate editing
Floating buttonon / offonthe feedback and website bubble in the lower right
List execution modesimultaneously / in orderin ordergoverns batch runs of the Send List and the Robot List
Filter execution modepriority / in orderin ordersee the Filters chapter
Filter action coloursfour text/background pairs, with a resetsee the paletteReplace / Intercept / Change / NoModify Display

09 · HotKey Settings

03Hotkeys · global, so they work with the WPE window in the background.
HotKey Settings Applies to : Send List Robot List 1 HotKey 1 :Ctrl + Alt + F1 HotKey 2 :Ctrl + Alt + F2 HotKey 3 :Ctrl + Alt + F3 HotKey 4 :Ctrl + Alt + F4 …… hotkeys 5 to 10 work the same way, firing entries 5 to 10 …… 2 Execute :Ctrl + Alt + F11 Stop :Ctrl + Alt + F12 3 the boxes record whatever you press; Ctrl / Alt / Shift plus F1–F24, 0–9 or NumPad0–9 Save Exit
  1. Applies to: either the Send List or the Robot List. This one switch decides where every hotkey lands
  2. Hotkeys 1 to 10: fire entries 1 to 10 of that list
  3. Execute / Stop (hotkeys 11 and 12): run or stop the whole list
// Pressed it and nothing happened?

① Is Applies to pointing at the right list? ② Has another program grabbed that combination globally? ③ Does the numbered entry exist — hotkey 1 needs a first entry in the list.

10 · Backup Settings

Exports and imports the entire configuration as a single .sb file.

GroupWhat it covers
Systemsystem runtime configuration
Proxy Modeproxy configuration, accounts, mappings, allow list, block list
Inject Modeinject-mode configuration
List datathe Filter List, Send List and Robot List
// Encryption

Both export and import prompt for a password, with the hint Enter a password. To skip it, press [ Cancel ]. Importing with the wrong one reports that the password is incorrect.

11 · Display Settings

Opened from the gear icon in the title bar. Five switches: animation, shadows, show popups inside the window, hidden scrollbar style and high-quality text rendering.

12 · Remote MGT and the web console

FieldDefaultNotes
Enable Remote MGToffthe master switch
IP / port— / 88the address it binds to
Administrator account / passwordthe HTTP Basic credentials

Save, restart the service, and the log reports Remote MGT enabled: http://ip:88. If it fails you get Remote MGT failed to start: try launching <process name> with administrator rights, usually an HTTP.SYS URL-reservation permission.

Pages and endpoints

PathPage or purposeAuthenticated
/overviewyes
/ProxyAccountproxy account managementyes
/SystemLogsystem logyes
/accounta CCProxy-compatible account endpoint — GET returns an HTML list, POST adds, edits and deletesyes
/SystemInfo/*GetCPUAndMemory · GetStartTime · GetSelectModeyes
/SocketInfo/*GetSocketInfo · GetSocketLogList · GetProxyLogListyes
/ProxyInfo/*GetProxyInfo · GetProxyAuthList · GetProxyLogListyes
/ProxyCap/*GetServerList · GetNoticeListno — allow-listed
// Security note

/ProxyCap/* is a public, unauthenticated endpoint: anyone who can reach that port can read your node list. Restrict the source addresses with a firewall before exposing it, or keep the remote management port on your LAN.

13 · Performance tuning

When capture volume makes things stutter and the buffer count climbs, work down this list — best return first:

  1. Turn off both location columns in List Settings, which skips the IP lookup and the flag rendering.
  2. Turn on Auto clear and lower the threshold from its default of 5000.
  3. Turn off Auto scroll.
  4. In Display Settings, turn off animation, shadows and high-quality text rendering.
  5. Use Leach Setting to display only the packets you care about.
  6. The last resort: Speed Mode — nothing is displayed at all, but the filters keep working.