Open-source alternatives to ClashX.Meta

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

This application provides a comprehensive interface for managing network traffic through a core proxy engine. It supports multiple traffic interception methods, including system-wide proxy settings and virtual network interfaces, allowing users to route TCP and UDP traffic based on specific domain, IP, port, or process criteria. The system facilitates complex network configurations through proxy chaining, rule-based routing, and the aggregation of multiple remote subscription sources. Beyond core networking, the tool includes developer-focused utilities for configuration management and system

NekoBoxForAndroid is a network utility for Android that functions as a system-wide VPN tunneling client. It leverages the Sing-Box engine to capture and redirect device traffic through a virtual network interface, providing a centralized platform for managing proxy connections and network routing. The application distinguishes itself through its advanced configuration management, allowing users to define granular traffic rules based on domains, IP addresses, or specific applications. It supports complex network requirements by enabling multi-hop proxy chaining, custom DNS resolution strategie

Shadowsocks-Windows is a desktop proxy manager that provides a graphical interface for configuring system-wide network routing. It functions as a local SOCKS5 or HTTP proxy server, intercepting outbound traffic through system-level injection to route requests through secure, encrypted remote tunnels. The application distinguishes itself through a modular architecture that supports plugin-based transport extensibility, allowing users to integrate external binaries for custom traffic obfuscation and specialized cryptographic protocols. It also enables high-availability networking by automatical

electron-ssr-backup is a cross-platform Electron desktop application that serves as a ShadowsocksR proxy client and system network manager. It acts as a proxy server orchestrator, allowing users to route network traffic through specific servers and automate operating system proxy configurations. The application enables the import and organization of proxy server lists via subscription URLs, QR codes, manual configuration files, or clipboard pasting. It includes a synchronization mechanism to fetch and update server databases from remote URLs. The software provides controls for toggling betwe

This project provides predefined configuration profiles and rule sets for ad filtering, geographic traffic steering, and proxy routing. It specifically offers curated rule sets and configuration lists for Shadowrocket to filter advertising domains and manage network traffic on iOS devices. The project specializes in converting industry-standard ad-blocking filter lists into a proprietary rule format compatible with proxy client configurations. These rule sets facilitate the separation of domestic and foreign network requests to optimize connection paths and bypass regional restrictions. The

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures c

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Clash Nyanpasu is a network proxy client and graphical user interface for managing Clash network cores. It functions as a proxy manager and traffic monitoring dashboard, allowing users to route system traffic and handle proxying through a visual interface. The project distinguishes itself by providing a TUN mode proxy manager for controlling system-wide network tunneling. It features a core-agnostic API layer that standardizes communication between the interface and various interchangeable network core implementations. The application covers proxy configuration management, including profile

Netch is a multi-protocol proxy client and network traffic interceptor designed to route internet traffic through VPN and proxy tunnels. It functions as a connection manager that tunnels outbound data to modify network paths and bypass network restrictions. The project supports a wide range of tunneling protocols, including Socks5, Shadowsocks, WireGuard, Trojan, VMess, and VLESS. It distinguishes itself by offering the ability to distribute established proxy connections to other devices on a local network and by providing UDP FullCone NAT support to maintain stable peer-to-peer connectivity

Throne is a cross-platform proxy client that provides a unified graphical interface for managing and routing network traffic through secure proxy protocols. It combines subscription-based node management, multi-protocol routing, TUN-based global traffic interception, and DNS leak prevention into a single application that runs on Windows, Linux, and macOS. The application supports a wide range of proxy protocols including SOCKS, HTTP, Shadowsocks, Trojan, and VMess, and can route traffic through chains of multiple proxy servers for layered routing. It creates a virtual network interface to int

yacd is a browser-based dashboard for managing and configuring Clash proxy servers. It provides a graphical web interface that allows users to view and edit proxy settings, switching between network nodes and adjusting routing rules without manually editing configuration files. The application acts as a client to the Clash backend REST API, enabling real-time operations such as proxy group administration, traffic routing configuration, and connection parameter tuning. Its single-page application shell handles all state management on the client side, with form validation catching input errors

x-ui-yg is a web-based proxy panel and multi-protocol manager used to deploy and manage network proxy protocols for bypassing internet censorship. It serves as a centralized administrator for secure network tunnels, providing a dashboard to obscure internet traffic and maintain user privacy. The project functions as a proxy subscription server, generating aggregated client subscription links and configuration files locally to remove reliance on third-party conversion tools. It also acts as a CDN proxy orchestrator, allowing the use of CDN domains and encryption to mask server identities and p

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

MetaCubeXD is a network proxy management system comprising a web-based dashboard, a background kernel orchestrator, and a real-time traffic monitor. Its primary purpose is to provide a centralized interface for controlling proxy kernels, managing routing rules, and overseeing system-wide traffic routing. The project distinguishes itself through a WebSocket-driven network dashboard that streams bidirectional telemetry and configuration changes without requiring restarts. It features a sidecar-based orchestration model that decouples the management interface from the proxy binary, allowing for

ShadowsocksX-NG is a macOS application that functions as a Shadowsocks proxy client to establish encrypted tunnels for bypassing network censorship. It operates as an encrypted tunnel manager that allows for the configuration of secure ciphers and the import of proxy server profiles. The client includes a proxy converter that transforms SOCKS5 traffic into HTTP proxy traffic to provide compatibility for applications that do not support SOCKS. It also integrates a traffic steering system using Proxy Auto-Configuration files to automatically determine which network requests bypass the proxy. T

w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing

BPB-Worker-Panel is a control panel designed for deploying and managing VLESS and Trojan proxies hosted on Cloudflare Workers. It functions as a proxy subscription generator and a manager for secure DNS over HTTPS servers and WireGuard configuration provisioning. The project distinguishes itself through network traffic obfuscation capabilities, utilizing packet fragmentation and SNI spoofing to evade detection. It provides specialized administration for Cloudflare Warp and Warp Pro connections, including the ability to optimize endpoints and export WireGuard configurations. The system covers

tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It routes system network traffic through a SOCKS5 proxy using a virtual tunnel interface and provides the ability to tunnel IPv4 traffic over IPv6 or vice versa. The project implements a userspace TCP/IP stack to intercept raw IP packets and translate them for transmission to remote proxy servers. It supports multiple proxy protocols, including HTTP, SOCKS4, SOCKS5, and Shadowsocks, allowing application traffic to be redirected without per-app configuration. The software includes cap

This project is an OpenWrt proxy client and network traffic orchestrator designed to tunnel internet traffic through remote proxy nodes. It functions as a system for managing proxy subscriptions, preventing DNS leaks, and directing traffic flow via an automatic failover gateway. The software distinguishes itself through a subscription manager that imports and synchronizes remote server lists via URLs and QR codes. It features device-specific access controls that allow the application of unique proxy rules, domain whitelists, and time-based schedules to individual network devices. The capabil

WARP-Clash-API is a backend service designed to manage Cloudflare WARP endpoints and generate routing configurations and subscription links compatible with the Clash proxy ecosystem. It functions as a proxy subscription server and a VPN gateway manager to secure and redirect network traffic. The project utilizes a network endpoint optimizer to filter IP addresses based on latency and packet loss for stable connections. It implements an automated credential refresh cycle for license keys and employs secret-keyed validation to control access to subscription settings. The system includes capabi

Crawlee is a web scraping framework designed for building scalable, reliable, and distributed data extraction pipelines. It provides a unified interface for managing headless browser automation and lightweight HTTP requests, allowing developers to handle complex web navigation, dynamic content rendering, and large-scale data collection within a single, modular architecture. The project distinguishes itself through its resource-aware concurrency controller, which dynamically scales task execution based on real-time CPU and memory usage to prevent host machine exhaustion. It also features a rob

Freeze is a code-to-image generator and terminal output renderer that converts source code and ANSI terminal text into high-quality images. It functions as a command-line tool that transforms text and styled sequences into scalable vector graphics for use in documentation and presentations. The tool differentiates itself by capturing raw output from shell commands via a pseudo-terminal environment and translating ANSI escape codes and colors directly into SVG styles. It features a terminal user interface for real-time parameter adjustment and supports configuration profiles to maintain consis

TV is a media streaming management application used to organize and play on-demand videos and live television channels from various web sources through a single interface. It functions as a hub for IPTV channel organization and media discovery. The project utilizes a modular system of crawler scripts to aggregate content and extract metadata from external websites. It manages network connectivity through encrypted DNS, proxy rules, and domain-based routing to filter traffic and bypass regional content restrictions. The application supports hardware-accelerated video decoding, electronic prog

This project is an Android RPA framework designed for automating user interfaces and system tasks on rooted Android devices using Python and ADB. It provides a suite of tools for rooted device management, allowing for programmatic control of system settings, application lifecycles, and shell command execution via a remote API. The framework distinguishes itself through a combination of dynamic instrumentation and AI integration. It can inject scripts into running processes to hook Java interfaces and modifies application behavior in real time. Additionally, it supports large language model in

AutoMergePublicNodes is a system for scraping public proxy nodes from across the internet and merging them into a unified list. It serves as an aggregator and converter that transforms these collected nodes into specialized subscription formats for various network routing clients. The project includes dedicated generators for creating configuration files and subscriptions compatible with Clash, Clash Meta, Sing-Box, and V2Ray. It handles the conversion of aggregated lists into Base64 and other standardized formats required by these specific network applications. The software also provides a

V2RayX is a macOS network proxy manager and graphical user interface designed to control V2Ray core configurations and manage network traffic routing. It functions as a configuration tool that translates visual user inputs into the required JSON files for the underlying proxy core. The tool provides a menu-bar interface for modifying system-wide network settings and switching between proxy servers. It separates the graphical interface from the proxy network core to ensure that connectivity persists independently of the UI. Traffic routing is handled through multiple modes, including global r