WPE x64
看清、改写并重放程序的网络封包
See, edit and replay the network packets a program sends and receives
中文说明 · English · 官网 Website · 使用教程 Tutorial · 下载 Download · 爱发电 Sponsor
🟢 中文
一款 Windows 上的网络封包拦截与编辑工具。它能把某个程序收发的每一条网络封包实时列出来，让你看清里面的内容、改写它、再发一遍——协议调试、接口审计、协议学习、模拟器与手游分析都用得上。界面是深色赛博风格，支持七种语言、深 / 浅主题，以及可保存的全局字号与灰阶文字颜色偏好。
✨ 它能做什么
- 📡 实时抓包：把目标程序收发的封包一条条列出来，随时暂停、搜索、导出；切换页面后列表会稳定恢复显示，列显隐会按注入 / 代理模式分别记住。
- ✏️ 改写封包：十六进制并排编辑，改完可以立即再发一遍。
- 🎨 规则自动改：设好「滤镜」，符合条件的封包自动替换 / 拦截 / 改长度，命中的行按颜色标出来。
- 🤖 自动化：用「机器人」把一串动作（发包、延迟、循环、模拟键鼠）排成流程自动跑。
- 🔍 对比与查找：并排看改写前后、按字节或按行找不同，列表支持文本 / 十六进制 / 正则搜索。
- 🔒 按进程抓取：代理模式下只接管你勾选（或手动指定）的那几个进程，它们的 TCP / UDP 封包照样能看、能改。
- 🔀 TCP 连接级映射：代理模式可按主机 / IP（支持
*、前缀或后缀通配）和端口，把整条 TCP 连接改道到另一目标；不改写协议字节，照样可抓包、记录和使用 TCP 滤镜。
- 🌍 随身即用：免安装，单个文件双击就能跑，退出时自己收拾干净。
🎯 两种工作方式，按场景选
| 适合 | 说明 |
|---|
| 🎯 注入模式 | 单个程序、模拟器、手游 | 附着到目标程序上，从内部把它的封包读出来；对模拟器尤其好用，连启动瞬间的封包都抓得到。 |
| 🌐 代理模式 | 手机、另一台电脑、按进程抓 | 让选定进程（或整台设备）的流量经过 WPE 转发，途中就能看到、改写；HTTP 明文会解析成请求 / 响应，HTTPS 只呈现密文。 |
🧰 主要功能一览
💡 典型用途
- 协议调试：自己写的客户端 / 服务端对不上时，直接看线上真实的字节，比两端加日志快得多。
- 接口审计（需已获授权）：构造异常数据检验目标的处理，或核对敏感信息有没有明文外传。
- 协议学习：拿到一个没有文档的私有协议，靠对照实验一个字段一个字段推出它的结构。
- 模拟器 / 手游分析：安卓模拟器直接注入；真机把 WPE 当成局域网里的代理接进来。
⚠️ 请只在你自己的软件、测试环境或已获授权的目标上使用。在带反作弊的网络游戏里使用抓包 / 改包工具可能导致封号。
⬇️ 下载与运行
- 到 下载中心 的 WPE64 标签页下载最新版压缩包
WPE64 v2.4.zip（免安装，蓝奏云 / 百度网盘任选）。
- 解压之前先在 zip 上右键「属性 → 解除锁定 → 应用」，再解压 —— 里面是
WPE64 v2.4.exe 和校验文件 WPE64 v2.4.exe.sha256.txt（核对方法见下载中心）。
- 双击
WPE64 v2.4.exe，在权限提示上选「是」即可（需要管理员权限）。首次运行会先释放程序文件。
⚠️ 从旧版本升级：配置按版本分开存放、不会自动继承。升级前请先用旧版的「备份设置」导出全部数据，装好新版再导入。
系统要求：Windows 10 / 11（或 Server 2019 / 2022）· 64 位。首次打开若是白屏，是缺少界面运行时，程序会弹出一键安装引导，装完重开即可。
🔗 更多
📖 完整使用教程 · ❓ 常见问题 · 🌐 官网 www.wpe64.com
☕ 觉得好用？欢迎在 爱发电 支持一下，帮助项目持续更新。
🟢 English
A network packet capture-and-edit tool for Windows. It lists every packet a program sends and receives in real time, so you can see what's inside, change it, and send it again — handy for protocol debugging, interface auditing, learning an undocumented protocol, and analyzing emulators and mobile games. The interface is a dark, cyber-styled UI available in seven languages, with dark / light themes and saved preferences for global text size and gray-tone text color.
✨ What it does
- 📡 Live capture — list every packet the target sends and receives; pause, search and export any time, with the list restoring reliably after switching pages; visible columns are remembered separately for injection and proxy modes.
- ✏️ Edit packets — a side-by-side hex editor; replay a packet the moment you're done.
- 🎨 Rewrite by rule — set up a filter and matching packets are replaced / blocked / resized automatically, with matched rows color-coded.
- 🤖 Automation — a robot runs a sequence of steps (send, delay, loop, simulate keyboard and mouse) for you.
- 🔍 Compare & search — view before/after side by side, diff by byte or by line; search the list as text, hex or regex.
- 🔒 Per-process capture — in proxy mode you can watch just the processes you pick (or type in by hand); their TCP / UDP packets stay fully visible and editable.
- 🔀 TCP connection mapping — in Proxy Mode, route a whole TCP connection to another host / port by host or IP (exact,
*, prefix, or suffix wildcard) and port, without rewriting protocol bytes; capture, logging, and TCP filters still apply.
- 🌍 Portable — no installer; one file, double-click to run, and it cleans up after itself on exit.
🎯 Two ways to work, pick per situation
| Best for | How it works |
|---|
| 🎯 Inject Mode | a single program, emulators, mobile games | Attaches to the target and reads its packets from the inside; great with emulators, and it even catches the packets sent the instant it launches. |
| 🌐 Proxy Mode | phones, another PC, per-process capture | Routes the selected processes' (or a whole device's) traffic through WPE, where you can watch and rewrite it; plain HTTP is parsed into requests / responses, while HTTPS stays encrypted. |
🧰 Feature tour
💡 Typical uses
- Protocol debugging — when your own client and server don't agree, read the real bytes on the wire instead of adding logs on both ends.
- Interface auditing (with authorization) — feed the target unusual data to test how it copes, or check that nothing sensitive leaves in the clear.
- Learning a protocol — take an undocumented private protocol and work out its structure field by field through experiment.
- Emulator / mobile analysis — inject an Android emulator directly, or point a real phone at WPE as a proxy on your LAN.
⚠️ Use it only on your own software, test environments, or targets you are authorized to touch. Using a capture / packet-editing tool in an online game with anti-cheat can get your account banned.
⬇️ Download & run
- Download the latest zip,
WPE64 v2.4.zip (no installer), from the WPE64 tab of the download center — Lanzou or Baidu Pan.
- Before unzipping, right-click the zip → Properties → Unblock → Apply, then unzip it. Inside are
WPE64 v2.4.exe and its checksum file WPE64 v2.4.exe.sha256.txt (see the download center for how to check it).
- Double-click
WPE64 v2.4.exe and choose Yes at the prompt (administrator rights are required). The first run unpacks the program files.
⚠️ Upgrading from an older version: settings are stored per version and are not carried over. Export all your data from the old version with Backup settings first, then import it into 2.4.
Requirements: Windows 10 / 11 (or Server 2019 / 2022), 64-bit. If the first launch is blank, the interface runtime is missing — the program shows a one-click installer; install it and reopen.
🔗 More
📖 Full tutorial · ❓ FAQ · 🌐 www.wpe64.com
☕ Find it useful? Support the project on Afdian (爱发电) to help keep it updated.
