These open-source projects provide utilities and frameworks for routing internet traffic anonymously through the Tor network.
Proxychains is a SOCKS proxy chain tool and TCP traffic redirector that forces outgoing network connections from applications into a specified sequence of proxy servers. It functions as a proxy sequence orchestrator, routing TCP network traffic through multiple SOCKS or HTTP proxies to anonymize network paths and bypass firewalls. The tool includes a remote DNS resolver that performs domain name resolution through a remote proxy to prevent DNS leaks and hide queries. This ensures that network traffic from applications that are not proxy-aware is redirected through the configured intermediaries. The project provides capabilities for anonymous network tunneling, network traffic routing, and secure proxy chaining to mask origin addresses and bypass restrictive network filters.
Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using custom scripts. It provides a unified command-based interface for manual interaction, enabling users to define custom key bindings, content views, and command-line tools. The engine supports multiple operational modes, including explicit, transparent, reverse, and SOCKS proxying, as well as a userspace WireGuard VPN mode for capturing traffic without requiring client-side configuration changes. Beyond basic interception, the platform includes comprehensive tools for recording and replaying network conversations to simulate complex interactions or automate repetitive tasks. It offers advanced capabilities such as request blocking, header and body modification, and local resource mapping. The system also provides robust support for debugging and performance analysis, including integration with external tools through secret logging and structured data representation. The software is designed for rapid iteration, featuring live script reloading that updates custom logic without restarting the proxy process. It includes extensive documentation for managing certificates, configuring proxy modes, and implementing custom addons through a well-defined programmatic interface.
Orbot is an Android network anonymization tool designed to route mobile internet traffic through the Tor network. Its primary purpose is to hide a user's identity and location from websites by masking the originating network address. The software enables users to bypass internet censorship to access blocked services and prevents trackers from identifying a mobile device. It provides a local SOCKS proxy configuration to force specific applications to send traffic through an encrypted tunnel. The application utilizes the Android VPN service to capture device traffic at the network layer and integrates with the Tor binary to manage the routing process.
Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment. The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unified internal state before execution. It employs a rule-based traffic dispatcher that evaluates incoming packets against hierarchical criteria to determine optimal routing paths dynamically. This is complemented by an asynchronous domain name resolution pipeline, which provides granular control over how network requests are mapped and filtered, ensuring that traffic handling remains both accurate and performant. Beyond its core routing capabilities, the platform includes a comprehensive security layer for managing encrypted connections, including support for advanced handshake options and certificate validation. It also provides tools for monitoring real-time traffic and connection status, alongside flexible management of routing rule sets that can be sourced from local or remote locations. The software is designed to be installed as a background service, providing a stable and scalable infrastructure for controlled network communication.
Learning Bitcoin from the Command Line is an interactive tutorial that teaches Bitcoin Core node operation, JSON-RPC programming, and Lightning Network payments entirely from the terminal. The guide covers running a full Bitcoin Core node on a remote server with automated setup scripts, controlling the node through shell commands and JSON-RPC calls, and communicating with Bitcoin Core by sending JSON-formatted requests over HTTP. The tutorial provides hands-on instruction for writing and executing custom Bitcoin locking and unlocking scripts using Bitcoin's stack-based scripting language, building and spending multisignature transactions through automated command-line workflows, and constructing, signing, and exchanging Partially Signed Bitcoin Transactions for collaborative offline signing with hardware wallets. It also covers routing Bitcoin Core and SSH traffic through Tor or I2P anonymity networks to hide node identity and transaction origins, and subscribing to real-time blockchain events using ZeroMQ sockets. Additional capability areas include opening, using, and closing Lightning Network payment channels with Core Lightning, monitoring stuck transactions and re-broadcasting them using Replace-by-Fee and Child-Pays-for-Parent techniques, and sending Bitcoin transactions in raw, SegWit, and automated formats. The guide also demonstrates how to call a running Bitcoin Core node programmatically from languages including C, Go, Java, Node.js, Python, Rust, and Swift.
This application provides a comprehensive interface for managing network traffic through a core proxy engine. It supports multiple traffic interception methods, including system-wide proxy settings and virtual network interfaces, allowing users to route TCP and UDP traffic based on specific domain, IP, port, or process criteria. The system facilitates complex network configurations through proxy chaining, rule-based routing, and the aggregation of multiple remote subscription sources. Beyond core networking, the tool includes developer-focused utilities for configuration management and system diagnostics. Users can modify configuration objects using a sandboxed scripting engine or automate imports via URL-based protocols and custom response headers. The application also offers administrative service modes for elevated privilege management and provides tools for visual interface customization, including support for custom style sheets and icon management.
FMHY is a community-driven index designed to organize and distribute decentralized digital content through standardized metadata and protocol-agnostic linking. It functions as a resilient, distributed map of internet resources, providing a structured directory that facilitates the discovery of media, software, and educational tools without reliance on centralized control. The project distinguishes itself by maintaining a massive, human-verified repository of external links that span diverse digital ecosystems, including peer-to-peer networks, Usenet, and direct download servers. By utilizing lightweight, version-controlled text files, the platform enables easy mirroring and local hosting, ensuring that its comprehensive index remains accessible and redundant across various environments. The directory covers a broad operational surface, including tools for digital media acquisition, retro gaming emulation, and self-directed academic learning. It also provides extensive resources for system privacy and security, artificial intelligence integration, and professional development, offering a centralized hub for navigating complex online information. The project is documented through a series of structured, navigable directories that allow users to filter and locate specific resources efficiently.
Mihomo is a rule-based network proxy and traffic orchestrator designed to manage internet connections by intercepting and routing data packets. It functions as a background service that directs traffic through various proxy nodes based on user-defined policies, allowing for granular control over outbound network paths. The engine distinguishes itself through a sophisticated domain pattern matching system that utilizes wildcard and suffix-based algorithms to categorize web traffic. It supports complex configuration management by allowing users to define reusable data blocks and import external domain collections, ensuring that routing policies remain consistent and up-to-date across different geographic regions and operating systems. The project provides a comprehensive suite of tools for network security filtering and traffic management. It processes structured configuration files to define rules based on destination hostnames and port ranges, enabling the creation of detailed filtering policies. The system is configured using a standard serialization format that supports object nesting, array definitions, and inline documentation.
I2P is a decentralized anonymous network layer and peer-to-peer overlay network. It functions as a darknet infrastructure that encrypts traffic and masks user identities and locations from external observers. The system acts as an anonymous proxy gateway, enabling the hosting of hidden services and websites that are unreachable via the public internet. It provides capabilities for privacy-preserving web mirroring and private secure shell tunneling to hide the physical IP addresses of both servers and clients. The network employs garlic routing, unidirectional tunneling, and a distributed hash table to manage communication. It uses asymmetric key identification to decouple network addresses from physical locations and encapsulates standard traffic within a custom encrypted protocol.
This project is a comprehensive network traffic orchestrator and server infrastructure manager designed to provide centralized control over secure tunneling, routing, and security policies. It functions as a web-based dashboard that enables administrators to deploy and maintain network services, enforce access restrictions, and manage traffic flow through a private server environment. The platform distinguishes itself by integrating advanced traffic anonymization and routing capabilities, including support for relay networks and secure tunnels to bypass regional restrictions. It provides granular control over network security through automated certificate lifecycle management, host-based firewall rule enforcement, and the ability to configure specialized transport protocols. Administrators can further manage server operations remotely via event-driven messaging bot integration, allowing for real-time monitoring and command execution. Beyond its core routing and security functions, the software supports flexible deployment models, including containerized orchestration and automated script-based installation. It includes a suite of maintenance tools for monitoring user traffic, managing geographical routing databases, and hardening system environments against unauthorized access. The project provides multiple installation paths, ranging from automated scripts to manual binary deployment, to accommodate various server configurations.