Open-source alternatives to UMatrix

AdRules is a collection of ad-blocking rule sets and DNS filter lists designed to identify and block malicious domains, trackers, and PCDN services. It functions as a DNS sinkhole filter and a malware domain blocklist used by DNS servers and network proxies to stop advertisements and harmful content from loading. The project provides regional network optimization, utilizing rule sets tailored to specific geographic regions, languages, and mobile device conditions to target local advertising networks. The system covers DNS traffic filtering and malware domain blocking through suffix-based dom

This project is an ad-blocking filter list and DNS blocklist collection designed to prevent advertisement and tracking servers from loading content across devices. It functions as a network-layer ad filter by providing a curated set of domain patterns and URLs that network components use to block known advertising and big data statistics domains. The collection focuses on privacy-focused domain filtering to stop the unauthorized collection of personal information and user tracking. It identifies and blocks domains associated with telemetry, analytics, and log collection to prevent the upload

This project provides a containerized DNS sinkhole and network-wide traffic filtering solution. It functions as a central network resolver that intercepts domain queries, allowing users to block advertisements, trackers, and malicious domains by returning null responses to connected devices. The platform distinguishes itself through its integrated DHCP server and comprehensive management capabilities, which allow for automated IP address allocation and granular control over network traffic. It supports complex filtering through regular expression matching, hierarchical rule prioritization, an

Mihomo is a rule-based network proxy and traffic orchestrator designed to manage internet connections by intercepting and routing data packets. It functions as a background service that directs traffic through various proxy nodes based on user-defined policies, allowing for granular control over outbound network paths. The engine distinguishes itself through a sophisticated domain pattern matching system that utilizes wildcard and suffix-based algorithms to categorize web traffic. It supports complex configuration management by allowing users to define reusable data blocks and import external

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This browser extension is a web traffic redirector designed to route requests from popular social and video platforms to privacy-focused alternative frontends and backends. It functions as a privacy-friendly frontend redirector by replacing standard website URLs with user-defined alternative instances. The system includes a frontend instance manager that allows for the selection of preferred community-run versions of a site. Users can manage custom web traffic routing through the use of allowlists to exclude specific websites from redirection and can toggle between original and alternative si

💯 Teach puppeteer new tricks through plugins.

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

This framework provides a multi-process architecture for building desktop applications using web technologies. It manages the application lifecycle, window states, and system-level integrations through a primary entry point, while isolating web content in separate rendering processes to maintain stability and security. A secure bridge mechanism facilitates communication between these isolated contexts and the main process, ensuring that privileged system APIs remain protected. The framework distinguishes itself through a comprehensive security model that includes process sandboxing, content p

This project is a comprehensive repository of curated domain blocklists designed for network-wide DNS filtering. It functions as a DNS sinkhole feed, providing the necessary data to intercept and block unwanted network requests at the resolution layer before they reach their destination. By returning null or loopback addresses for identified domains, it prevents connections to malicious infrastructure, advertising servers, and tracking endpoints across all devices on a network. The repository distinguishes itself through a tiered categorization logic that allows users to select protection lev

Lists is a curated collection of DNS blocklists, a domain blocklist generator, and a categorized library of domains used for network content filtering. The project provides a command-line pipeline that aggregates upstream sources to build and validate blocklists used to redirect unwanted traffic to null addresses. The project distinguishes itself through a CLI-driven build pipeline that automates the fetching, validation, and daily regeneration of datasets. It organizes domains into discrete functional categories rather than a single monolithic list and exports them in multiple syntaxes, incl

DnsServer is a recursive and authoritative DNS server that provides domain name resolution and zone hosting. It functions as both a recursive resolver, performing iterative lookups across the internet, and an authoritative manager for primary and secondary DNS zones. The system distinguishes itself through high-availability clustering and a programmable HTTP API for automating server configurations and bulk record management. It supports a wide range of encrypted transport protocols, including TLS, HTTPS, and QUIC, and allows for custom functionality via a plugin-based request interception fr

uBlock is a browser content blocker and web privacy tool designed to prevent advertisements and tracking scripts from loading. It functions as a network request filter, a DOM element hider, and a script execution controller to manage how web pages load and render. The project distinguishes itself through a combination of network-level request interception and cosmetic filtering. It uses declarative filter lists and pattern-based matching to block trackers and pop-ups, while employing CSS selectors and wildcard entity matching to remove visual components across multiple regional domain variant

capa is a binary capability scanner that identifies high-level behaviors and actions an executable can perform, such as network communication or file manipulation. It functions as a malware behavior analysis tool and a MITRE ATT&CK mapping framework, scanning PE, ELF, .NET, and shellcode files through both static analysis and dynamic sandbox report processing. The tool distinguishes itself through a YAML-based detection rule engine that defines detection logic in human-readable files, with conditions expressed as feature combinations and logical operators. It integrates with IDA Pro, Ghidra,

13ft is a web content unblocker and proxy service designed to retrieve restricted articles and paywalled web pages. It functions by emulating search engine crawlers to access full-text content that is otherwise locked behind subscriptions or account requirements. The service employs crawler mimicry and header spoofing to impersonate search engine bots, which helps avoid anti-scraping mechanisms. It also utilizes proxy-based content fetching and fallback request routing to navigate regional restrictions and blocked responses. Additionally, the tool includes a localized web interface that tran

WindowsSpyBlocker is a suite of utilities designed to stop operating system data collection and tracking by applying firewall rules, hosts file blocks, and telemetry restrictions. It functions as a telemetry blocker and firewall manager that prevents the operating system from sending usage data to remote servers. The project features a specialized connectivity modifier for adjusting the network connectivity status indicator to prevent external reporting. It includes a network traffic auditor to capture and analyze system traffic to identify spying activities, alongside a manager for DNS and h

This project provides a curated blocklist of disposable email domains used to prevent fake account registrations and service abuse. It serves as a reference dataset and email validation resource for identifying temporary email providers during user signup processes. The data is maintained through a workflow that includes case normalization and deduplication. Entries are verified against a public suffix list to ensure each listed domain is a valid registrable entity. The project distributes these domains as a plain text file for integration into spam prevention and registration security filte

This project provides a collection of domain blocklists designed to prevent network requests from reaching specific destinations. These lists function as databases of problematic and corporate web addresses that can be imported into content filters, network security tools, and system-level hosts files. The lists focus on blocking known malicious domains and corporate web services to control network access. These curated sets are organized to filter harmful websites and company-owned domains across local devices or networks. The project manages these entries through flat-file storage and stat

Camoufox is a Firefox-based stealth automation browser designed to evade detection during automated browsing. It combines a fingerprint randomization engine that generates thousands of unique device attributes per session, native-level API interception to spoof WebRTC, WebGL, media, and other fingerprintable properties, and human behavior simulation that moves the cursor along natural, distance-aware trajectories. The browser is compiled from source with build-time stealth patches and runs headlessly via a lightweight virtual display buffer, making it suitable for web scraping, automated testi

angular-loading-bar is a loading state manager and progress bar component for Angular applications. It provides a system for visualizing network request activity through an automatic loading indicator that monitors outgoing HTTP requests. The project manages concurrent network requests by bundling multiple API calls into a single loading state, ensuring the indicator remains visible until the final request completes. It includes a latency threshold to delay the appearance of the loading bar, which prevents visual flashing during fast requests. The system supports URL pattern filtering to exc

Script is a collection of scripts and rule-sets designed for iOS proxy tools to modify mobile application behavior, filter network traffic, and automate interactions with online services. It provides a library of scripts and a network filter to manage how applications communicate with web services. The project enables the unlocking of premium features, memberships, and VIP content within third-party applications. It also allows for the bypass of geographical restrictions on downloads and the removal of advertisements from mobile application interfaces. The toolset covers the automation of we

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

uBlacklist is a browser extension that filters search engine results by hiding specific domains from view. It functions as a client-side content filter that modifies the search engine interface to remove unwanted website elements based on custom blacklists. The tool manages both individual custom domain blocklisting and remote rule subscriptions. Users can import curated lists of unwanted domains from external HTTP sources or publish their own subscription lists for others to use. The system supports regular expression matching to identify domains and uses browser-based synchronization to ma

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

React is a JavaScript library for building user interfaces based on a component-driven architecture and unidirectional data flow.

uBlock is a browser-based content blocker that functions as a declarative filtering engine to intercept network requests and modify web page content. It operates by parsing standardized filter lists into optimized data structures, allowing it to block network hosts, enforce security policies, and prevent unauthorized data transmission. The extension provides a comprehensive security layer that monitors outgoing traffic and disables intrusive browser features to enhance user privacy. What distinguishes this project is its granular control over filtering behavior through a dynamic rule orchestr

AdGuardHome is a network-wide software solution that provides centralized control over domain name resolution, content filtering, and local network management. It functions as a recursive DNS server and DHCP address server, intercepting network traffic to enforce security policies and block unwanted content across all connected devices. By acting as a central gateway, it ensures that every device on a home or office network benefits from consistent protection and private, authenticated name resolution. The software distinguishes itself through granular client management and robust security fe