Projects sharing features with Dopamine

JumpServer is a privileged access management platform designed to manage and audit secure access to SSH, RDP, Kubernetes, and database endpoints. It functions as a centralized gateway that brokers remote terminal and graphical sessions to isolate users from critical infrastructure. The system utilizes a web-based protocol gateway to translate remote connections into browser-compatible streams and a protocol-based proxy layer to isolate end-user devices from target assets. It incorporates security watermarking to deter unauthorized screen captures and provides a Kubernetes access gateway for c

MaterialFiles is a graphical Linux file manager and system utility designed for local file management, archive manipulation, and system administration. It provides a filesystem interface for navigating directories, inspecting file attributes, and managing local files. The application supports privileged root access to manage restricted system files and directories. It includes specialized tools for Linux system administration, such as inspecting security contexts, symbolic links, and file permissions. The utility features a network file client for connecting to remote servers and managing fi

SuperWeChatPC is a modifier for the WeChat desktop client that unlocks hidden features through memory patching and binary hooks. It functions as a multi-account messaging manager, a messaging data archiver, and a software interface that exposes internal messaging functions to external programs. The project enables the simultaneous operation of multiple independent client instances on a single computer through process isolation. It allows for the transmission of large attachments by bypassing standard file size restrictions and provides a wrapper for programmatic message automation. The tool

ipwndfu is a collection of software utilities designed to exploit the iOS bootrom to enable unsigned code execution and firmware manipulation. The project provides tools to place Apple devices into a pwned DFU state, allowing the system to bypass secure boot signatures. The toolkit includes capabilities for hardware-based decryption, using a connected device's unique keys to decrypt data while in a restricted update mode. It also provides utilities for extracting system ROM and flash memory from the hardware for offline security analysis. The software covers broader hardware exploitation are

This project is a modification for the WeChat mini program developer environment designed to bypass account identity requirements and server-side domain validation. It functions as a set of utilities and patches that enable the creation and testing of mini programs without a registered account identifier or an official developer account. The tool specifically disables AppID registration requirements and removes domain whitelist restrictions. This allows developers to perform network requests to any external endpoint and proceed with local development without a validated project ID. The imple

Boundary is an identity-aware access proxy and privileged access management tool. It brokers secure network connections to infrastructure targets by mapping verified user identities to granular permissions, providing a gateway to servers and databases without the need for static credentials or VPNs. The system distinguishes itself through just-in-time connectivity and automated credential injection, delivering short-lived secrets to users during session initialization. It implements a composable security model using allow-only role-based access control and hierarchical resource scoping to iso

WeChatOpenDevTools-Python is a set of software utilities designed to bypass environment restrictions to enable debugging and element inspection for web and mini program applications. It functions as a developer tool unlocker and web inspector activator to force the activation of integrated inspection tools. The project provides specialized capabilities for debugging and reverse engineering WeChat mini programs. This includes the ability to access hidden developer consoles to analyze the structure, network requests, and behavior of active mini programs and web content. These utilities utilize

vphone-cli is a command line interface for booting virtual iOS devices using Apple's native virtualization framework. It provides a sandboxed virtual mobile environment and tools for executing iOS system images on a host operating system. The project includes a firmware flashing utility capable of building signed ramdisks and applying custom firmware patches to virtual device boot chains. It facilitates the installation of custom firmware variants to remove system security restrictions. The toolset covers virtual device provisioning through system image restoration and security blob retrieva

This project provides a collection of patches and modification sets for Android applications. It focuses on enhancing media consumption through the removal of advertisements and sponsored segments, while enabling deep customization of application interfaces and internal behaviors. The project employs system-level modifications, including binary hooking, bytecode manipulation, and dynamic memory patching, to override default application restrictions. These capabilities allow for the restoration of push notifications via signature spoofing, the suppression of screenshot alerts, and the automati

This project is an open-source software development kit and framework for implementing the Matter smart home standard. It provides a universal IPv6-based application layer and a cluster-based data model to ensure interoperability between diverse smart home devices and controllers. The system is distinguished by its multi-transport network abstraction, which maps Bluetooth LE, Thread, and Wi-Fi implementations to a common layer. It includes specialized tooling for secure device commissioning via QR codes and NFC, as well as a comprehensive over-the-air firmware update system for distributing s

AmazeFileManager is a mobile application for managing local and remote files on the Android operating system. It functions as an Android file manager, an application manager for backing up and uninstalling software packages, and a root file explorer for accessing protected system directories. The project includes a cloud storage client that utilizes plugins to synchronize data across remote providers and a file encryption tool for securing sensitive mobile data through encryption standards. The application provides capabilities for local file operations, specialized format visualization for

This project is a set of extensions for the WeChat macOS application designed to modify client behavior and unlock hidden features. It functions as a client modification framework and a multi-account manager, allowing users to launch and operate several independent instances of the application on a single machine. The tool distinguishes itself through deep integration with the operating system, enabling the execution of macOS system commands and remote administration via incoming chat messages. It also provides productivity extensions that connect chat lists and conversation histories to exte

This project is an Xposed Framework module and runtime code injector designed to modify Android application behavior. It functions as an app modifier and feature unlock tool that enables the injection of custom code and the bypassing of subscription restrictions and payment walls to grant access to premium capabilities. The system extends application user interfaces by embedding functional toggles and custom control menus directly into the settings and user pages of target apps. It allows for the injection of additional tools and enhancements through a dedicated configuration menu. The techn

Dexposed is a set of runtime tools and engines designed for dynamic patching, framework interception, and code instrumentation on Android devices. It functions as a hooking framework and instrumentation tool used to load custom code into running processes to alter logic without modifying the original bytecode. The project enables the interception and modification of method behavior within both Android applications and the system framework. It specifically provides capabilities for bypassing operating system limitations by overriding framework calls and applying hot patches to live processes w

Teleport is a zero-trust access platform designed to provide secure, identity-based connectivity to servers, databases, and Kubernetes clusters. It functions as a centralized gateway that replaces static credentials with short-lived, identity-bound cryptographic certificates, effectively eliminating the need for traditional VPNs and long-term secret exposure. The platform distinguishes itself by orchestrating access through a unified control plane that maps external identity provider claims to granular, role-based infrastructure permissions. It enforces security through mutual TLS gateways an

IPAPatch is an iOS application patching and binary instrumentation tool. It is designed to inject dynamic libraries and custom frameworks into decrypted application packages to modify runtime behavior without requiring a jailbroken device. The tool functions as an external debugger interface, preparing applications to allow the setting of breakpoints and the inspection of objects in real time. It enables the integration of third-party service frameworks into existing applications to add new capabilities or specialized inspection tools. The project covers binary modification, including the pa

Infisical is a centralized secrets management platform designed to store, synchronize, and control access to sensitive credentials and configuration data across distributed development, staging, and production environments. It employs client-side encryption to ensure that secrets remain unreadable to the underlying storage infrastructure, while providing a hierarchical permission model to govern both user and machine access. The platform distinguishes itself through dynamic credential provisioning, which generates short-lived access tokens that are automatically revoked after use. It supports

Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies

KernelSU is a kernel-based root management framework for Android that provides administrative access to applications by operating directly within the operating system kernel. By integrating management logic into the kernel source, it enables system-wide permission control through syscall interception and function patching. This approach allows for the enforcement of fine-grained mandatory access control, assigning custom security domains to root processes to restrict their capabilities and prevent unauthorized actions. The project distinguishes itself through a systemless modification archite

Safetynet-fix is a tool for Android device attestation designed to bypass hardware and software integrity checks. Its primary purpose is to achieve Google SafetyNet compliance on devices with unlocked bootloaders, allowing software that requires specific security profiles to run on modified systems. The project provides compatibility for rooted devices, specifically ensuring that banking and payment applications remain functional while maintaining root access. It manages the Magisk environment configuration to maintain these security-sensitive application requirements. The system utilizes va

pcileech is a toolkit for executing DMA attacks, analyzing PCIe bus traffic, performing kernel patching, and conducting remote volatile memory forensics. It functions as a hardware memory acquisition tool and a PCIe DMA attack framework designed to read and write remote system memory via direct hardware interfaces. The project provides capabilities for capturing and displaying raw transaction layer packets from the PCIe bus and mounting live RAM as local drives for analysis. It enables the modification of system memory signatures and the execution of shellcode or implants within the kernel wi

Nugget is an iOS system customization tool that applies exploit-based modifications to device configuration files, enabling changes to system appearance and behavior without jailbreaking. It functions as a feature flag toggler, mobile gestalt modifier, and PosterBoard wallpaper manager, allowing users to enable experimental iOS features, modify hardware-level identifiers, and apply custom wallpapers through system file manipulation. The tool distinguishes itself by using the sparserestore or BookRestore exploit to write system files outside normal restore locations, supporting modifications t

itpol is a framework for cryptographic key management, digital signature policies, and security hardening. It provides an IT policy template library and infrastructure access frameworks to establish organizational security guidelines and governance. The project focuses on cryptographic identity management through the use of PGP and SSH keys, alongside a security hardening guide for workstations. It defines standards for software supply chain security, specifically regarding the signing of code commits and software releases to ensure provenance. The system covers a broad range of security cap

Security-101 is a vendor-agnostic, foundational cybersecurity learning curriculum organized into modular, framework-aligned modules. It is designed to build core knowledge across multiple security domains without tying content to specific products or platforms, making it suitable for both beginners and professionals seeking a structured introduction to the field. The curriculum is built around established security frameworks, including the MITRE ATT&CK framework for standardized threat analysis and the NIST Cybersecurity Framework for incident response workflows. It covers a broad range of do

dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

MonkeyDev is a developer toolset for building, injecting, and deploying system extensions and custom dynamic libraries into mobile applications. It functions as an application patching tool and dynamic library injector designed to modify how mobile applications operate. The project provides a development environment for creating system extensions and tweaks, including tools for injecting libraries into decrypted binaries to enable debugging and symbol restoration on non-jailbroken hardware. It features a command-line interface for deploying hooks into system processes and third-party applicat