A powerful, standalone web application with two tools:
- 🧬 Fragment + Fingerprint — enhance a VLESS or Trojan URL by injecting
cs(cipher suites),fm(fragment mask) andfp(TLS fingerprint) parameters, plus a server (IP/domain) override — producing a link ready to import into your own client. - 🔗 Chain Builder — chain two proxy configurations into a single Xray or Sing-box JSON configuration for enhanced connection stability and fixed IP masking.
All processing happens in your browser. No data is sent to any server.
- Paste & Enhance: Paste single or multiple
vless://ortrojan://URLs (one per line) and get enhanced links withcs,fmandfpparameters added. - Multi-Config Support: Paste bulk proxy URL lists to parse, validate, and batch enhance all URLs cleanly without remark collision.
- Server Override: The server (IP/domain) field is auto-filled from the URL for a single config and is user-editable. With multiple configs the field stays empty and only applies to all configs if you type a custom value (supports IPv4, IPv6 and domains).
- Fingerprint: Default
unsafe, withchrome,firefox,safari,randomandnoneoptions. - TLS-aware:
csandfmare only added when the config usestlssecurity. Clear a field to skip that parameter. - One-click Copy: Copy the enhanced URL straight to the clipboard.
- Protocol Support: VLESS and Trojan.
- Dual Config Chaining: Easily chain a primary proxy (e.g., Worker/CDN) with a secondary chain proxy.
- Protocol Support: Supports VLESS, VMess, Trojan, Shadowsocks, SOCKS, HTTP, and SSH.
- Dual Output: Generates both Xray and Sing-box JSON configurations.
- ECH Support: Automatically parses and includes ECH config for secure connections.
| Output | Client |
|---|---|
| Xray JSON | Use with any Xray-compatible client (v2rayN, v2rayNG, Nekoray, etc.) |
| Sing-box JSON | Nested tabs for different client types (see below). |
- Standard: The regular Sing-box configuration.
- Nekoray: High compatibility format optimized for Nekoray.
- Nekobox (Android): Optimized for Android with a TUN inbound, ensuring proper VPN recognition (key icon) and mobile stability.
The application generates a configuration that routes your traffic in this sequence:
You ➔ Config 1 (Proxy) ➔ Config 2 (Chain) ➔ Internet
This ensures that your final outgoing IP address is that of the Chain Proxy, providing a consistent identity for the websites you visit.
- Switch to the Fragment + Fingerprint tab.
- Paste your VLESS or Trojan URL.
- Adjust the options if needed: server override (auto-filled from the URL), fingerprint, cipher suites, final mask.
- Click "Enhance URL" and copy the resulting link — import it into your client.
- Windows: use v2rayN version 7.24.7 or higher.
- Android: use PattNG or v2rayNG version 2.3.4 or higher.
- Config 1: Paste your first proxy URL (this can be a Cloudflare Worker, CDN, or any other proxy).
- Config 2: Paste your second proxy URL (the one you want to chain through).
- For SSH, click the 🔑 SSH toggle and fill in server, port, username, and password.
- Settings: Adjust DNS servers or SOCKS ports if needed.
- Generate: Click "Generate Chained Config" to get your JSON.
- Deploy: Copy the JSON or download it as a file to use in your preferred client.
| Protocol | URL Format | Notes |
|---|---|---|
| VLESS | vless://uuid@server:port?params |
Supported by both tools |
| VMess | vmess://base64-json |
Chain Builder only |
| Trojan | trojan://password@server:port?params |
Supported by both tools |
| Shadowsocks | ss://base64(method:pass)@server:port |
Chain Builder only — no transport (ws, grpc, etc.) and no TLS support |
| SOCKS | socks://user:pass@server:port |
Chain Builder only — must include username and password |
| HTTP | http://user:pass@server:port |
Chain Builder only — must include username and password |
| SSH | 4-field input (server, port, user, password) | Chain Builder only — Sing-box only, not supported by Xray |
- The Fragment + Fingerprint tool supports VLESS and Trojan URLs only.
- TLS is required: the Fragment + Fingerprint tool only works with configs that have TLS enabled (security
tlsorreality). Non-TLS configs are not supported and will not work. cs(cipher suites) andfm(final mask) are only added when the config uses tls security.- SOCKS & HTTP configs must have username and password included.
- Xray does not support raw (headerless TCP) configs — use TCP with http header type instead.
- Shadowsocks cannot have any transport (WebSocket, gRPC, HTTPUpgrade, etc.) and cannot have TLS.
- SSH is only supported by Sing-box. When SSH is used, the Xray tab is automatically disabled. Use the sing-box client for SSH configs.
TCP, TCP (http header), WebSocket, gRPC, HTTPUpgrade
TLS, Reality, None
- HTML5: Semantic structure.
- CSS3: Custom variables, glassmorphism, and animations.
- JavaScript: Core logic for URL parsing, enhancement and JSON generation.
- The Fragment + Fingerprint enhancement logic (
cs/fm/fpinjection and URL export format) is based on the PattNG project's export-to-clipboard behavior. - The Chain Builder draws inspiration and logic from the BPB-Worker-Panel project and this Sing-box configuration.
Built with ❤️ for the privacy community.