Sheas Cealer is a desktop SNI spoofing tool built with WPF and .Net8 for Windows systems.
The tool addresses network monitoring by spoofing SNI (Server Name Indication) extensions, leveraging Chromium kernel startup parameters to disguise the actual destination server during TLS handshakes. This approach allows users to mask their HTTPS traffic patterns without requiring proxy infrastructure or additional network configuration.
The project targets Windows users who need to conduct network security research or defend against unauthorized network surveillance. It operates as a standalone desktop application with both installer and portable distributions available. The tool maintains a separate repository of spoofing rules that update independently from the application itself, and users must manually sync upstream rules when desired. The README explicitly states the project is intended only for defending against illegal network monitoring and conducting network security research, with a user agreement that should be reviewed before use.
The project remains in active development with formal releases tested for stability before publication. Documentation is maintained in a dedicated external wiki where community contributions are welcomed. The tool provides both standard and self-contained distributions, with the latter bundling the .Net runtime at the cost of larger file size. Development activity includes regular rule updates through a companion repository and ongoing refinement of the core spoofing mechanism based on Chromium kernel capabilities.
