Open-source alternatives to WindowsSpyBlocker

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

RyTuneX is a utility suite designed for managing operating system features, removing bloatware, and controlling data privacy settings. It functions as a system optimizer and debloater that allows users to uninstall preinstalled applications and tune system configurations to improve performance and reliability. The project includes a privacy manager to disable telemetry and block data collection tracking. It provides a dashboard for modifying system behaviors and hardware specifications through a simplified interface, including toggle switches for native operating system features. The suite c

Cromite is a privacy-focused browser built as a fork of Chromium that embeds a network-level content blocking engine to intercept advertisements, pop-ups, and tracking scripts before they reach the page. It applies community-maintained public filter lists directly within the browser, eliminating the need for external extensions, and uses a curated patch system applied to the Chromium source tree at build time to add or modify features without maintaining a separate codebase. The browser is hardened against tracking and data leakage through a comprehensive set of privacy and security measures.

Lists is a curated collection of DNS blocklists, a domain blocklist generator, and a categorized library of domains used for network content filtering. The project provides a command-line pipeline that aggregates upstream sources to build and validate blocklists used to redirect unwanted traffic to null addresses. The project distinguishes itself through a CLI-driven build pipeline that automates the fetching, validation, and daily regeneration of datasets. It organizes domains into discrete functional categories rather than a single monolithic list and exports them in multiple syntaxes, incl

This utility provides a centralized administrative framework for managing and optimizing Windows environments. It functions by executing system-level primitives, including registry modifications, service management, and file system operations, to enforce performance, privacy, and security policies. The project distinguishes itself through its template-driven automation, which allows users to apply predefined configuration profiles to ensure consistent system states across machines. It integrates low-level adjustments—such as memory balancing, startup control, and hardware parameter tuning—wit

Kyanos is a diagnostic toolset for network analysis that uses eBPF to measure packet latency and trace traffic from the network card to the application. It functions as a kernel latency profiler and network performance monitor, providing capabilities to map external dependencies and capture network traffic. The project is distinguished by its ability to perform automatic SSL traffic decryption, converting encrypted requests and responses into plaintext for analysis. It further isolates bottlenecks by attributing latency across multiple stages, specifically tracing the time packets spend withi

This project is an educational resource providing a comprehensive development tutorial for writing and loading eBPF programs using C, Go, and Rust within the Linux kernel. It serves as a technical guide for developing custom logic to execute directly in the kernel. The materials cover specialized domains including kernel observability and tracing, security implementation for intrusion detection, and high-performance network engineering for packet filtering and load balancing. It also includes dedicated manuals for Linux kernel tracing and the use of kprobes, uprobes, and tracepoints. The pro

This project provides a collection of tools for deploying, activating, and managing volume-licensed Microsoft Office suites on macOS, supporting versions from 2011 through LTSC 2024. It handles the full lifecycle of Office installation and licensing, including the ability to install a complete Office suite as a single package and activate it using volume license serializers that bypass individual product keys or Microsoft accounts. The project includes capabilities for troubleshooting and repairing broken Office installations by cleaning remnants of previous versions using official Microsoft

Aliucord is a modified version of the Discord Android application that functions as a plugin-based app extender. It allows for the installation of third-party plugins and deep customization of the mobile client without requiring a full rebuild of the binary. The project provides a framework for loading external code modules at runtime and includes a management system for installing and updating these extensions. It features a dedicated telemetry blocker designed to prevent the application from sending tracking and analytics data to remote servers. Additional capabilities include a crash logg

3proxy is a multi-protocol proxy server and network access control gateway. It functions as a network traffic forwarder capable of routing TCP and UDP traffic across HTTP, SOCKS, and various email and file protocols. The project provides specialized capabilities for secure traffic inspection, including the decryption and analysis of HTTPS and TLS streams through certificate spoofing and mutual authentication. It further supports client identity anonymization by routing outbound traffic through recursive upstream proxy chains. The software covers a broad range of network management functions,

This project is a wireless hotspot management interface for Debian devices. It provides a web-based controller for managing wireless access points, wireless repeaters, VPN gateways, and DNS ad-blocking filters. The system includes a captive portal framework to intercept network traffic via customizable splash pages and a VPN controller that supports WireGuard and OpenVPN with kill-switch functionality. It further differentiates itself with a DNS ad-blocking filter using curated blacklists and the ability to operate in multiple network modes, including bridged access point and wireless repeate

Windows Hardening is a PowerShell-based automation framework designed for security assessment and configuration management within Windows environments. It provides a suite of administrative utilities to enforce industry-standard security benchmarks, audit system compliance, and reduce the overall attack surface of host machines. The project distinguishes itself by offering specialized capabilities for enterprise-wide configuration management, including the ability to transform security findings into deployable group policy objects. It also integrates system state management, allowing administ

AWAvenue-Ads-Rule is an optimized DNS-level rule list designed to block advertising SDKs and tracking domains across all devices on a network. It operates by resolving known ad-serving domains to a non-routable address at the DNS query level, preventing any connection from being made before ads can load. The rule set is intentionally minimalist, focusing only on essential ad-serving domains to reduce memory and CPU overhead compared to comprehensive blocklists. It specifically targets domains associated with known advertising software development kits, particularly in Android applications, to

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

DetectionLab is a reproducible Windows Active Directory security lab designed for testing detection capabilities. It uses an automation framework based on Vagrant and Packer to provision virtualized networks across multiple hypervisors and cloud platforms. The project utilizes Ansible for the declarative installation and configuration of domain services and endpoint security tools. It incorporates a browser-based remote access interface via Apache Guacamole to manage laboratory hosts without requiring standalone remote desktop clients. The environment includes a telemetry pipeline that aggre

NuttX is a POSIX-compliant real-time operating system designed for microcontrollers ranging from 8-bit to 64-bit architectures. It provides a deterministic execution environment with a real-time task scheduler and a POSIX embedded kernel to ensure portable code execution across diverse hardware targets. The project distinguishes itself through a comprehensive hardware abstraction layer that provides standardized drivers for I2C, SPI, CAN, and USB across various semiconductor chipsets. It also features an embedded networking stack supporting TCP, UDP, IPv4, and IPv6, alongside industrial proto

KeepChatGPT is a browser extension designed to enhance the ChatGPT web experience by acting as a session manager, UI optimizer, and privacy guard. It focuses on maintaining active connections to prevent session timeouts and improving the overall interface for better readability and organization. The project distinguishes itself through privacy and security features that block tracking telemetry and use regular expressions to mask sensitive data before it is sent. It also includes tools to mitigate conversation auditing and bypass bot verification challenges to reduce the risk of account restr

SpotX is a desktop client patcher designed to modify the Spotify application. It functions as an ad-blocking modifier and UI customizer that removes advertisements and promotional content from the music player. The project includes tools to disable automatic updates, ensuring that custom patches and visual themes remain active. It also provides a telemetry blocking patch to prevent the application from sending usage data and analytics to the service provider. The tool enables interface customization to hide specific sections, such as podcasts and audiobooks, from the homepage. These modifica

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

This project is a cross-platform privacy hardening tool and declarative system tweaking framework. It provides a suite of scripts designed to disable telemetry, remove data leaks, and enforce security best practices across Windows, macOS, and Linux. The tool functions as a state-aware configuration manager, allowing users to apply security tweaks and subsequently restore system settings to their original default values. It utilizes a templating system to define and apply custom system configurations for improved privacy and security. The capability surface covers operating system privacy har

Wireshark is a network protocol analyzer and traffic inspector used for capturing and inspecting network traffic. It functions as a packet capture tool that intercepts live data from network interfaces and a TCP/IP dissector that decodes network protocol layers to translate raw binary packets into human-readable fields. The system provides capabilities for protocol stream reconstruction, grouping related packets into cohesive conversations between endpoints. It also operates as a packet file converter, allowing for the reading, modification, and conversion of network capture files across vari

Surge is a network traffic routing and configuration system designed to categorize and steer network requests using curated rule sets, domain lists, and IP databases. It provides the data structures and filtering logic necessary to manage how application traffic is directed across proxies, direct connections, or regional gateways. The project distinguishes itself through granular traffic identification and steering. It identifies network requests by matching them against system process names, user-agent strings, and geographic IP ranges to apply specific routing policies. This allows for the

GitHub520 is a DNS resolution accelerator and hosts file optimizer that provides curated sets of IP addresses to bypass slow or broken DNS lookups. It specifically functions as a GitHub hosts resolver, providing optimized mappings to resolve connectivity issues and improve loading speeds for GitHub services. The project automates the process of improving network performance by fetching current IP address mappings from remote text or JSON endpoints. It modifies the local operating system hosts file to override default DNS resolution, which helps resolve slow connection speeds and image loading

Ecapture is a suite of specialized auditing tools designed to capture plaintext database queries, log executed shell commands, forward packet captures, and decrypt TLS traffic. The system extracts plaintext content from encrypted communications and TLS master secrets without requiring CA certificates. It further monitors data interactions by capturing SQL queries from database instances and recording commands from shell environments for host-level auditing. The toolset includes capabilities for network traffic analysis, exporting captured data to pcapng files, and forwarding events to extern

Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination