Open-source alternatives to ZygiskNext

XposedBridge is an Android Java hooking framework and bytecode instrumentation engine. It functions as a runtime system for intercepting and modifying Java method calls within the Android operating system and installed applications. The project provides a mechanism for zygote process injection, ensuring that all spawned applications inherit the instrumentation logic. It enables the modification of internal Android system behaviors through method proxying and Java reflection to access private internal system members. The framework supports dynamic Android instrumentation and runtime analysis,

Xposed is a native Android runtime hooking framework and instrumentation tool. It provides a modified version of the Android app process binary to intercept and modify the behavior of system and application processes at the binary level. The framework enables Android operating system customization by altering internal function calls and runtime execution flow. It achieves this through native process instrumentation, allowing for the modification of functionality without altering original application files. The tool covers several low-level capabilities, including native library injection and

XposedInstaller is an Android system hooking tool designed to deploy the Xposed modification framework to a device. It serves as a rooted Android modification utility that enables the interception and modification of Android system and application methods to change native operating system behavior. The tool manages the installation of the framework to allow for deep system-level hooks and device behavior customization. It automates the deployment of the software required to alter how the Android operating system and its installed applications function. The installation process involves writi

APatch is a suite of utilities for Android designed to provide kernel-level root access, manage system modules, and inject custom code into the kernel. It functions as a root tool and system module loader that allows for administrative privileges and device customization. The project distinguishes itself by injecting root capabilities directly into the kernel space to increase stealth and system-level authority. It utilizes a key-based authorization system to manage high-privilege access and prevent unauthorized administrative control of the device. The system modifies operating system behav

JavaCPP is a JNI C++ bridge and foreign function interface that provides a binding generator, a native library loader, and a native memory manager. It automates the creation of Java wrappers around native C++ headers and shared libraries to enable interoperability between the two languages. The project features a C++ binding generator that parses header files to automatically produce the necessary glue code and interfaces for calling native functions. It includes a native library loader that locates and extracts platform-specific binaries from the classpath into a local cache for runtime exec

PojavLauncher is a mobile launcher and game wrapper that provides a compatible Java Runtime Environment for mobile operating systems. Its primary purpose is to enable the execution of the Java Edition of Minecraft on Android and iOS devices. The project includes a mobile game input mapper that adapts desktop keyboard and mouse controls to touch screen interfaces. It also provides tools for mobile game modding, allowing users to install and manage custom content through a mobile interface.

Elder driver Xposed Framework.

Magisk is an Android rooting framework designed to manage system-level modifications and grant administrative access to mobile devices. It functions by patching boot and recovery images to inject custom code into the operating system initialization sequence, allowing for system-wide control while maintaining compatibility with the underlying hardware. The project distinguishes itself through a systemless modification layer that overlays a virtual file system on top of read-only partitions, enabling changes without altering core system files. It includes a policy daemon to manage security cont

LSPosed_mod is a system for Android system hooking and module management. It enables the installation and configuration of system-level modifications to change device behavior without altering the original system image or source files. The project utilizes zygote-based process injection and runtime method hooking to intercept execution flows in memory. It includes a version-agnostic execution layer to maintain a consistent interface across different Android operating system versions and environments, as well as dynamic proxy interception to modify method arguments and return values. Manageme

KernelSU is a kernel-based root management framework for Android that provides administrative access to applications by operating directly within the operating system kernel. By integrating management logic into the kernel source, it enables system-wide permission control through syscall interception and function patching. This approach allows for the enforcement of fine-grained mandatory access control, assigning custom security domains to root processes to restrict their capabilities and prevent unauthorized actions. The project distinguishes itself through a systemless modification archite

VirtualXposed is an Android virtualization framework that provides a containerized environment for running applications and system-level hooks. It functions as an isolated execution space, allowing users to manage and extend installed software independently from the host operating system. The platform enables the execution of specialized software extensions and framework modules that modify application behavior without requiring device rooting, bootloader unlocking, or modifications to the core system image. By creating a secondary, containerized Android system, it allows for the application

Windhawk is a Windows OS modding framework and user-mode code injector designed to customize the behavior of Windows applications and system components. It functions as a process customization tool and API hooking engine that allows for the insertion of custom logic into running programs. The framework enables software behavior modification and user interface tweaking without requiring access to the original source code. This is achieved by intercepting function calls and altering how software interacts with the operating system to implement patches or feature enhancements. The system covers

HyperCeiler is an Android system customizer and enhancement kit designed to alter core application logic and graphical interfaces. It functions as a customization module specifically for HyperOS mobile devices to modify their visual and functional behaviors. The project utilizes a system of signed OS modules, employing keystores and digital credentials to cryptographically sign packages for secure installation on the target device. Its capabilities cover the modification of system behavior and the alteration of visual elements through resource-based UI overrides and system-level logic modifi

Epic is a toolkit for Android runtime instrumentation, method interception, and security posture auditing. It functions as an aspect-oriented programming framework and a dynamic method interceptor designed to monitor and alter the behavior of Java methods within the Android Runtime. The project provides capabilities for intercepting and modifying both core Android framework components and specific application logic. This allows for the injection of custom Java behavior and the redirection of method execution without altering the original source code. The framework includes tools for applicat

Breeze Shell is a custom shell extension and operating system context menu customizer. It provides a replacement interface for native system menus, allowing for the modification of both the behavior and appearance of right-click interactions. The project enables the addition of custom buttons and actions to system menus through an embedded script interface. It allows for the complete replacement of default operating system menus with custom interfaces that feature unique visual themes and animations. The software integrates with the operating system to intercept context menu events and injec

waydroid_script is a system configuration toolkit and container customizer for Waydroid. It provides automation scripts to modify the Android environment on Linux, focusing on the deployment of core services and system-level extensions. The project enables the integration of Google Play Services and the registration of device identifiers for app store access. It integrates binary translation layers to allow ARM-based applications to run on x86 hardware and installs digital rights management layers for protected media playback. The toolkit covers a broad range of system modifications, includi

Aspects is an aspect-oriented programming library and method hooking framework designed for intercepting and modifying JavaScript function behavior without altering the original source code. It serves as a runtime logic injector that allows for the addition and removal of executable code wrappers from active functions. The library enables the injection of custom logic before or after methods to change application behavior at runtime. It further provides the ability to intercept method calls to capture or override return values before they reach the caller. The framework manages these interce

VirtualApp is an Android application virtualization engine and user-space sandbox that enables the execution of applications within an isolated environment. It allows for the running of multiple independent instances of the same application on a single device and supports private application installation without requiring system-level root access. The project features a comprehensive hooking framework for intercepting Java and native layer functions to modify application behavior. It includes tools for hardware simulation to spoof device models and system information, as well as a non-root pr

Frida is a dynamic binary instrumentation toolkit that provides a framework for deep process introspection and live application state manipulation. It enables the injection of custom scripts into running processes to trace function calls, modify memory, and analyze application behavior in real-time across diverse operating systems and processor architectures. The project distinguishes itself by embedding a high-performance JavaScript engine directly within the target process, allowing for the execution of user-defined logic for real-time inspection. It utilizes instruction-level hooking to re

Safetynet-fix is a tool for Android device attestation designed to bypass hardware and software integrity checks. Its primary purpose is to achieve Google SafetyNet compliance on devices with unlocked bootloaders, allowing software that requires specific security profiles to run on modified systems. The project provides compatibility for rooted devices, specifically ensuring that banking and payment applications remain functional while maintaining root access. It manages the Magisk environment configuration to maintain these security-sensitive application requirements. The system utilizes va

LSPosed is an Android runtime hooking framework and in-memory code modifier. It functions as a system hooking tool that intercepts and modifies system and application methods in memory to change behavior without altering original installation files. The project provides a standardized interface through the Xposed Module API, allowing for the development of plugins that alter the behavior of the Android operating system and installed applications. The framework covers a range of capabilities including runtime function interception, Android system debugging, and application customization. Thes

Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow

JNA is a foreign function interface and native memory mapper that allows Java applications to call functions in shared native libraries without writing custom JNI wrapper code. It serves as a JNI alternative framework for invoking C functions and mapping native data structures using high-level interfaces. The library distinguishes itself through its ability to translate Java objects and primitives into C-style structs, unions, and pointers for cross-platform memory exchange. On Windows, it provides a dedicated toolkit for interacting with Component Object Model objects using both early and la

node-ffi is a foreign function interface library for Node.js that enables calling functions from native C dynamic libraries without writing manual C++ bindings. It serves as a system for loading shared objects and DLLs into process memory, translating JavaScript values into binary representations, and executing external binaries at runtime. The project utilizes a wrapper around the libffi library to construct call frames and execute native functions with dynamic arguments. It distinguishes itself by providing a native memory manager for allocating raw pointers and a mapping system that connec

Red-DiscordBot is a modular framework for building and self-hosting Discord bots. It functions as a server management tool and community moderation bot that can be tailored by enabling or disabling specific feature modules. The system is distinguished by its extensible plugin architecture, which allows for the integration of third-party modules and the development of custom functional packages. Users can manage bot behavior through a chat-based interface, enabling them to assemble custom bots and define unique responses and behaviors without writing new code. The framework covers a broad ran

MagiskOnWSALocal is a toolkit and set of scripts designed to integrate root access and Google Apps into the Windows Subsystem for Android. It functions as a customization utility to provide administrative control over the virtualized Android environment. The project enables the installation of Magisk root binaries and the integration of Google Play Store services. It includes capabilities for removing default application marketplaces and modifying system settings to customize the subsystem. The toolset manages subsystem maintenance through version updates that preserve user data. It also pro

POCO is a comprehensive C++ application framework that provides a cross-platform set of libraries for building network-centric applications. It offers a unified abstraction layer that wraps platform-specific APIs, enabling the same code to run across desktop, server, mobile, IoT, and embedded systems. The framework is organized into modular libraries that can be compiled and linked selectively, allowing developers to include only the components their application needs. The framework distinguishes itself through its broad coverage of application infrastructure needs, including threading and sy