Open-source alternatives to Rules

wool_scripts is a collection of HTTP proxy rule sets, network traffic filters, and automation scripts designed for mobile applications. It functions as an application proxy router to reroute specific traffic and AI model requests through proxy servers to change IP addresses. The project provides a system for intercepting network requests to remove embedded advertisements from mobile applications and mini-programs. It also includes filters to suppress operating system update notifications and automatic software downloads by blocking requests to update servers. Beyond traffic filtering, the re

This project is a proxy server designed to intercept and modify HTTP and HTTPS traffic for Netease Cloud Music. It functions as network middleware to restore playback for songs and albums restricted by geographic regions and to unlock premium account features, such as high-fidelity audio. The server utilizes header-based privilege injection to spoof premium status and employs conditional content redirection to route requests for unavailable media to alternative source providers. It also incorporates upstream proxy routing and IP parameters to bypass regional access restrictions. Additional c

This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa

XboxDownload is a specialized toolset for accelerating console downloads and retrieving game content delivery network links. It functions as a console file transfer utility and a game store download accelerator designed to resolve storefront connectivity issues. The project distinguishes itself by capturing direct download URLs from digital storefronts to enable the use of external download managers. It also provides the ability to upload local game files from a computer to a gaming console to bypass slow internal download speeds. The software covers network connectivity resolution and traff

Headroom is an AI gateway proxy and token optimizer designed to reduce the cost and latency of large language model interactions. It functions as an intermediary that intercepts traffic between clients and providers to apply context compression, request routing, and format translation. The system differentiates itself through a Model Context Protocol server implementation that delivers compression and retrieval tools to compatible AI hosts. It employs a content-aware compression pipeline and tiered importance scoring to trim redundant data from logs and tool outputs while preserving essential

Zen Desktop is a cross-platform proxy client and network request filter for Windows, macOS, and Linux. It functions as a system-wide ad blocker and privacy protection tool that intercepts network traffic across all operating system applications to block advertisements, trackers, and malware. The software employs a network request filtering system that modifies HTTP headers and prunes JSON data using custom rules and regular expressions. It specifically removes tracking parameters and sanitizes network headers to prevent activity monitoring. The project provides capabilities for blocklist man

Zhiliao is an Xposed Android app module designed to modify the behavior and interface of the Zhihu mobile application. It functions as a runtime modification tool that uses hook injection to alter application elements and logic. The project provides system-level ad blocking to remove promotional content from feeds, search results, comments, and startup screens. It includes a rule-based content filtering engine that uses keywords and regular expressions to hide specific post types, such as videos and articles, or social features. The module offers interface customization and navigation enhanc

Shadowsocks-android is a secure tunneling application and SOCKS5 proxy client for Android. It routes device network traffic through a Shadowsocks proxy server to encrypt data, mask the user's internet origin, and bypass network restrictions. The client functions as an Android VPN service, creating a virtual network interface to intercept and redirect all outgoing device traffic. It supports the integration of external binary plugins to extend tunnel capabilities with custom transport protocols and traffic obfuscation methods. The project manages network routing through a local SOCKS5 server

Via is a lightweight Android web browser that uses native system rendering for efficient page display. It functions as a privacy-focused browsing tool and a QR code scanner utility. The browser is customizable through user-defined script execution and granular control over network requests. It allows for per-site configuration of user agent strings and JavaScript settings to manage how specific websites behave. Integrated privacy tools intercept and block advertisements and tracking scripts. The application also interfaces with device camera hardware to detect and read QR codes for navigatio

This project provides a collection of patches and modification sets for Android applications. It focuses on enhancing media consumption through the removal of advertisements and sponsored segments, while enabling deep customization of application interfaces and internal behaviors. The project employs system-level modifications, including binary hooking, bytecode manipulation, and dynamic memory patching, to override default application restrictions. These capabilities allow for the restoration of push notifications via signature spoofing, the suppression of screenshot alerts, and the automati

Netfox is an iOS and macOS network debugging library designed to intercept and monitor HTTP traffic. It functions as an in-app HTTP traffic inspector that captures request headers and response bodies for real-time network analysis. The tool provides a network performance monitor to calculate response times and data sizes, as well as a network log exporter for sharing captured request and response data via email. The project covers network analysis capabilities including traffic filtering to exclude specific URLs, request body capture, and a debug interface that can be toggled via programmati

AdAway is an Android network firewall and DNS traffic filter that functions as a local VPN ad blocker. It intercepts network requests to prevent advertisements and tracking domains from reaching the device by filtering traffic against host lists. The project features a host file manager capable of importing and converting blocklists from external third-party providers. It includes a system for managing both blocked and allowed domains, allowing for the creation of custom rules to permit specific trusted sites or block individual domains. The tool provides granular traffic control through app

Tproxy is a set of command-line utilities designed for throttling bandwidth, simulating network latency, proxying TCP traffic, and analyzing connection stability. It provides a toolset for redirecting network traffic from local ports to remote destinations while monitoring the resulting connection behavior. The project differentiates itself by combining traffic manipulation with diagnostic monitoring. It can introduce configurable packet delays and cap upload and download transfer speeds to simulate constrained or low-bandwidth network environments. Beyond traffic control, the utilities incl

Adblock4limbo is a collection of JavaScript-based scripts and tools designed for web content filtering and advertisement blocking. It functions as a content filter and user script suite that removes pop-ups, banners, and trackers from websites. The project includes a bilingual web translator for side-by-side content translation, an M3U8 video link extractor for retrieving direct stream URLs, and a web content filter specifically designed to remove sponsored links and content farm entries from search engine results. Its capabilities extend to network traffic management, including request filt

meta-rules-dat is a collection of binary-encoded network datasets used to identify and categorize traffic for routing on resource-constrained devices. It provides a structured domain categorization list and a geographic IP routing dataset to map network traffic to specific countries or service providers. The project utilizes trie-based lookup data and compact binary serialization to enable high-performance prefix matching and fast domain-to-category resolution. To minimize memory and storage overhead, it employs stripped-down GeoIP mapping that removes non-essential metadata. The datasets co

Glider is a multi-protocol forward proxy, transparent proxy gateway, and network service provider. It functions as a DNS and DHCP server, a Linux IP set manager, and a network traffic load balancer. The project distinguishes itself through a protocol-translation bridge that translates traffic between different proxy schemes and a chain-based routing system that sequences multiple remote proxy servers. It supports transparent traffic interception at the system level and utilizes build-time protocol stripping to minimize the binary size of the executable. The system covers a broad range of net

This project is an ad-blocking filter list and DNS blocklist collection designed to prevent advertisement and tracking servers from loading content across devices. It functions as a network-layer ad filter by providing a curated set of domain patterns and URLs that network components use to block known advertising and big data statistics domains. The collection focuses on privacy-focused domain filtering to stop the unauthorized collection of personal information and user tracking. It identifies and blocks domains associated with telemetry, analytics, and log collection to prevent the upload

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

This project is a comprehensive security hardening and privacy management guide for macOS. It provides a set of instructions and checklists for reducing the system attack surface through manual configuration, policy enforcement, and a layered defense strategy. The guide emphasizes a system auditing framework, using binary analysis, system logs, and packet inspection to verify that security controls and application sandboxing are functioning as intended. It offers tool-agnostic recommendations, defining security goals while allowing users to select their own third-party software for implementa

Simplewall is an application firewall manager and network traffic filter that provides a graphical interface for the Windows Filtering Platform. It controls inbound and outbound network access for individual programs and services by intercepting and filtering traffic at the kernel level. The project identifies specific binaries using file hashes to prevent spoofing and allows users to define custom firewall rules based on IP addresses, CIDR ranges, and port numbers. It includes a system for blocking operating system telemetry and managing blocklists of known malicious IP addresses. The tool

CocoaDebug is a debugging framework for iOS that provides a toolkit for inspecting application logs, network traffic, and sandbox files directly on a device. It functions as a suite of specialized tools for auditing device hardware, monitoring performance, and inspecting network activity. The framework includes an on-device network inspector for capturing and filtering HTTP requests and payloads, as well as a sandbox file manager to list and modify files and folders within the application container. It further provides a device auditor to display system build versions and hardware details for

Tamperchrome is a browser-based API debugger and network interceptor designed for the real-time manipulation of HTTP traffic. It functions as a proxy alternative that allows for the capturing and modification of requests and responses directly within the browser environment. The tool enables API response mocking and the alteration of server data before it reaches the page. It provides capabilities for modifying outgoing request headers and bodies, as well as injecting content into response bodies to test client-side behavior. The project covers a broad surface of network debugging, including

AdguardFilters is a collection of curated adblock filter lists, content blocking rulesets, and DNS blocklists. Its primary purpose is to provide the rules necessary to identify and remove advertisements, tracking scripts, and intrusive elements across web browsers and applications. The project includes specialized rules for cosmetic filtering to hide layout gaps and a malware domain database to block phishing and spyware destinations. It provides distinct filtering sets for different regions and purposes, such as social media blocking. The repository covers broad capability areas including m

Clumsy is a Windows network fault injection tool that intercepts system-wide network traffic at the kernel level using the WinDivert driver, without requiring proxy configuration or application code changes. It captures and manipulates packets for all running applications, including localhost connections, enabling controlled testing of application behavior under degraded network conditions. The tool provides comprehensive network impairment capabilities including latency simulation, bandwidth throttling, packet loss, corruption, duplication, and reordering. Users can apply these impairments s

AndroidHttpCapture is a mobile application for intercepting and analyzing HTTP and HTTPS network traffic directly on an Android device. It functions as a local proxy server and traffic interceptor to capture and monitor requests and responses from other installed mobile applications. The tool provides capabilities for MITM HTTPS decryption through root certificate installation and supports exporting captured network sessions as HAR files for external analysis. It allows for real-time response body injection and the modification of request headers via user agent spoofing. The project includes

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

This project is an Android RPA framework designed for automating user interfaces and system tasks on rooted Android devices using Python and ADB. It provides a suite of tools for rooted device management, allowing for programmatic control of system settings, application lifecycles, and shell command execution via a remote API. The framework distinguishes itself through a combination of dynamic instrumentation and AI integration. It can inject scripts into running processes to hook Java interfaces and modifies application behavior in real time. Additionally, it supports large language model in