WindowsFoulPlayer is a personal Windows security prototype designed to help detect and document suspected unauthorized access attempts on a user’s own computer.
The project is currently in active development. The current public version corresponds to V4, which is a stable milestone version used as the foundation for future improvements.
This project is intended only for personal, defensive, educational, and authorized use. It must only be used on devices owned by the user or on systems for which the user has explicit, informed, and lawful authorization.
Unauthorized installation, monitoring, surveillance, data collection, or execution on a third-party device is strictly prohibited.
Current public version:
Version: V4 public milestone
Status: Stable milestone / active development
Platform: Windows
Framework: C# / .NET Windows Forms
This version is not the final version of the project. It represents a functional and validated milestone before deeper architectural improvements and additional features planned for future versions.
The current V4 version includes:
- custom verification window after Windows login;
- configurable countdown before triggering the protocol;
- trigger on wrong password, cancellation, timeout, or window close;
- local session folder creation;
- local log generation;
- initial screenshot capture;
- optional repeated screenshots;
- optional webcam photo capture;
- optional public IP lookup;
- optional Telegram alert system;
- configurable startup with Windows;
- local configuration file;
- manual stop shortcut;
- tested behavior in a Windows virtual machine.
The project is still evolving. Planned improvements for the next versions include:
- cleaner internal architecture;
- better separation between services and UI logic;
- improved protocol state management;
- clearer Debug and Release build separation;
- redesigned setup interface using tabs;
- dedicated Alert / Transmission section;
- Telegram setup assistant;
- improved handling of dependent settings in the interface;
- faster protocol startup through better task parallelization;
- improved session summary file;
- local screen video recording;
- local webcam video recording;
- improved maintenance tools for logs, sessions, and configuration.
Future versions may also explore:
- offline queue for failed Telegram alerts;
- retry mechanism when internet connection returns;
- approximate IP-based location logging;
- additional alert methods such as email, webhook, or Discord webhook;
- better configuration recovery if the configuration file is corrupted;
- automatic cleanup of old sessions;
- clearer separation between developer builds and distributable builds.
This software may process sensitive data depending on configuration, including screenshots, webcam captures, logs, device information, timestamps, public IP address, and Telegram alert data.
Do not use this software on a device that you do not own or control without explicit lawful authorization.
Do not use this software to monitor another person without their knowledge and consent.
Do not commit real configuration files, Telegram tokens, chat IDs, screenshots, webcam captures, logs, or session folders to this repository.
This public repository intentionally excludes:
- real
config.jsonfiles; - Telegram bot tokens;
- Telegram chat IDs;
- screenshots;
- webcam images;
- generated logs;
- generated session folders;
- compiled executables;
- published builds.
Use config.example.json as a template and create your own local config.json privately.
This project is distributed under a restrictive personal-use license.
See the LICENSE.md file for details.
This is not a standard open-source license. Usage is limited to personal, educational, defensive, and authorized environments only.
The author does not condone, encourage, support, or authorize any illegal, abusive, intrusive, deceptive, or non-consensual use of this software.
The software is provided “as is”, without warranty of any kind. The author accepts no responsibility or liability for misuse, damage, loss, legal consequences, privacy violations, unauthorized activity, or any other consequence resulting from the use, misuse, modification, distribution, or execution of this project.
Users are solely responsible for complying with all applicable laws, regulations, privacy rules, cybersecurity rules, and consent requirements.