Open-source alternatives to LSPosed

Electronic WeChat is an Electron-based desktop chat client and wrapper for the WeChat messaging service, designed for macOS and Linux. It provides a functional messaging interface that integrates with native operating system notifications and system trays. The client includes a message recall blocker that prevents senders from retracting or deleting messages after they have been delivered, ensuring the recipient retains a permanent record of the conversation. It also features a URL redirect bypass to open destination websites directly in the default web browser. The application supports stan

VirtualXposed is an Android virtualization framework that provides a containerized environment for running applications and system-level hooks. It functions as an isolated execution space, allowing users to manage and extend installed software independently from the host operating system. The platform enables the execution of specialized software extensions and framework modules that modify application behavior without requiring device rooting, bootloader unlocking, or modifications to the core system image. By creating a secondary, containerized Android system, it allows for the application

LSPatch is an Android runtime hooking tool and non-root app patcher. It provides a non-root implementation of the Xposed framework, allowing for the modification of Android application behavior without requiring administrative system access. The project enables the integration of Xposed modules into specific applications by embedding the necessary API components directly into the application package. This allows for application sandbox customization and the execution of framework modules on standard devices. The framework achieves these modifications through dex-based method hooking, dynamic

Windhawk is a Windows OS modding framework and user-mode code injector designed to customize the behavior of Windows applications and system components. It functions as a process customization tool and API hooking engine that allows for the insertion of custom logic into running programs. The framework enables software behavior modification and user interface tweaking without requiring access to the original source code. This is achieved by intercepting function calls and altering how software interacts with the operating system to implement patches or feature enhancements. The system covers

Aspects is an aspect-oriented programming library and method hooking framework designed for intercepting and modifying JavaScript function behavior without altering the original source code. It serves as a runtime logic injector that allows for the addition and removal of executable code wrappers from active functions. The library enables the injection of custom logic before or after methods to change application behavior at runtime. It further provides the ability to intercept method calls to capture or override return values before they reach the caller. The framework manages these interce

AyuGramDesktop is a modified Telegram desktop client and MTProto messaging client. It functions as a local message logger and a privacy-focused chat tool, providing a fork of the standard C++ Qt client. The project focuses on unlocking premium features and capabilities locally without a paid subscription. It distinguishes itself through a ghost mode that masks online presence and suppresses read receipts, as well as a system for preserving message history by logging deleted and edited content into a local database. The client includes tools for content management, such as bypassing restricti

This project provides a modular framework for building and orchestrating autonomous AI agents. It functions as an agentic workflow engine that manages the full lifecycle of task execution, including model reasoning, tool invocation, and the integration of results. By utilizing a centralized orchestration platform, the system enables the creation of multi-agent teams that collaborate on complex objectives through structured communication and shared task graphs. The framework distinguishes itself through its focus on persistent, stateful operations and multi-agent coordination. It employs file-

GeoPort is a suite of utilities for geographic coordinate management, wireless location simulation, and mobile device debugging. It functions as a GPS location spoofing tool and route generator, allowing users to simulate specific geographic coordinates and movement patterns on mobile devices. The project enables the simulation of GPS coordinates over WiFi to remove the requirement for physical USB cables. It includes a map-based interface for defining custom movement paths, which can be replayed at specific speeds to automate coordinate changes on a connected device. The system covers coord

Aliucord is a modified version of the Discord Android application that functions as a plugin-based app extender. It allows for the installation of third-party plugins and deep customization of the mobile client without requiring a full rebuild of the binary. The project provides a framework for loading external code modules at runtime and includes a management system for installing and updating these extensions. It features a dedicated telemetry blocker designed to prevent the application from sending tracking and analytics data to remote servers. Additional capabilities include a crash logg

This project is an Android application patching tool and Magisk system module generator. It is designed to apply custom modifications to application packages and generate modules that install these patched binaries into the system partition of rooted Android devices. The tool incorporates a root-based application installer that utilizes specialized mounting methods, such as Zygisk application mounting, to bypass root detection warnings and mount errors. It further distinguishes itself by automating the retrieval of application binaries from external mirrors based on specific device architectu

Breeze Shell is a custom shell extension and operating system context menu customizer. It provides a replacement interface for native system menus, allowing for the modification of both the behavior and appearance of right-click interactions. The project enables the addition of custom buttons and actions to system menus through an embedded script interface. It allows for the complete replacement of default operating system menus with custom interfaces that feature unique visual themes and animations. The software integrates with the operating system to intercept context menu events and injec

ReZygisk is an Android root module framework and Zygote process injector. It functions as a native hooking engine and linker redirection tool designed to inject custom code into the Android Zygote process so that modifications are inherited by all spawned applications. The project provides a decoupled abstraction layer and Zygisk API implementation, allowing system modules to operate independently of specific root management tools. This ensures that root modules remain stable and compatible across various kernel-level rooting solutions. The framework includes capabilities for system process

Epic is a toolkit for Android runtime instrumentation, method interception, and security posture auditing. It functions as an aspect-oriented programming framework and a dynamic method interceptor designed to monitor and alter the behavior of Java methods within the Android Runtime. The project provides capabilities for intercepting and modifying both core Android framework components and specific application logic. This allows for the injection of custom Java behavior and the redirection of method execution without altering the original source code. The framework includes tools for applicat

This project is a static site project homepage and software distribution website. It serves as an Android modification portal and a central web portal for downloading official releases and accessing documentation for Android system modifications. The site functions as a markdown-based documentation site and an open source project hosting platform. It provides a central location for technical references and guides regarding the Android system framework, while distributing stable software versions and installation guides to the developer community. The website is built using static site genera

PlayIntegrityFix is a tool for Android device attestation masking designed to bypass Play Integrity checks on devices with unlocked bootloaders. Its primary purpose is to restore access to restricted system applications by simulating a locked bootloader and a vendor-signed state. The project achieves this through fingerprint spoofing and the modification of system properties to mimic the identity of certified devices. This allows devices running custom ROMs to maintain compatibility with applications that require strict hardware and software integrity checks. The system covers capability are

FakeLocation is a set of developer utilities for Android designed to override system-level location data, simulate network environments, and generate synthetic sensor activity. It functions as a location debugger and GPS mocking tool to test location-aware applications without requiring physical movement of the device. The project provides capabilities for mocking cellular base stations and wireless signals to emulate different connectivity environments. It also includes a sensor simulator that generates synthetic step counter data and adjusts location update frequencies to mimic physical act

Frida is a dynamic binary instrumentation toolkit that provides a framework for deep process introspection and live application state manipulation. It enables the injection of custom scripts into running processes to trace function calls, modify memory, and analyze application behavior in real-time across diverse operating systems and processor architectures. The project distinguishes itself by embedding a high-performance JavaScript engine directly within the target process, allowing for the execution of user-defined logic for real-time inspection. It utilizes instruction-level hooking to re

The Android NDK samples provide a comprehensive collection of code examples demonstrating how to integrate C and C++ native code into Android applications. This repository serves as a practical guide for developers utilizing the Android Native Development Kit to implement performance-critical application components that require direct hardware access and low-level system interaction. The project highlights the use of the Java Native Interface to bridge managed code with native modules, enabling cross-language function calls and efficient data exchange. It demonstrates how to manage native act

Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow

Bettercap is an extensible framework for network security testing that provides a unified interface for performing man-in-the-middle attacks, network reconnaissance, and traffic manipulation across WiFi, Bluetooth, and wired networks. It operates through a modular attack module system that loads and executes interchangeable offensive or diagnostic modules, supported by event-driven session management and multi-protocol network spoofing capabilities. The framework distinguishes itself by covering a broad range of network domains, including Bluetooth Low Energy scanning and enumeration, CAN-Bus

Joi is a JavaScript data validation library used to define schemas that validate, cast, and sanitize data objects. It functions as an object schema validator and parser, ensuring that input data matches specific types and formats before it is processed by an application. The library features a conditional validation engine capable of dynamic schema enforcement, where validation logic and dependencies change based on the values of other keys within an object. It also serves as a data casting and sanitization tool, transforming input values into target types and removing sensitive keys from the

Duckling is a deterministic named entity recognizer and natural language entity extractor. It transforms unstructured text into machine-readable data by mapping language-specific input strings to universal structured formats. The system utilizes a rule-based engine and composable language rules to resolve entities without relying on probabilistic models. It supports multilingual text parsing across various regional locales, employing a logic-driven approach to normalize diverse natural language expressions into standardized numeric values. The project covers the extraction and normalization

Atmosphere is a custom firmware for the Nintendo Switch that provides core system components for loading custom kernels, managing modified operating systems, and redirecting hardware storage. It functions as a customized operating system designed to enable deep system modification and functional extensions. The project distinguishes itself through a system module injector and an application patching engine that allow for the loading of custom binary modules and patches to add features to the console. It also includes a virtual storage manager that redirects internal hardware writes to a virtu

auto sign cursor

Piko is a collection of specialized Android utilities designed for binary patching, user interface customization, media downloading, and application debugging. It functions as an APK modification framework that alters application metadata and binary resources to modify internal logic and bypass version locks. The project differentiates itself through deep application modification capabilities, including bytecode-level instruction patching, DEX file manipulation, and a dynamic hooking engine. It enables the overriding of resource files and the injection of permissions via the application manif

Dexposed is a set of runtime tools and engines designed for dynamic patching, framework interception, and code instrumentation on Android devices. It functions as a hooking framework and instrumentation tool used to load custom code into running processes to alter logic without modifying the original bytecode. The project enables the interception and modification of method behavior within both Android applications and the system framework. It specifically provides capabilities for bypassing operating system limitations by overriding framework calls and applying hot patches to live processes w

AndFix is a binary patching framework and update system for Android applications. It provides tools for generating binary diffs and applying runtime method replacements to fix bugs without requiring a full application update. The system utilizes a binary diff generator to isolate minimal code changes between package versions. It supports the consolidation of multiple incremental patches into a single update file and employs native hooks to replace specific method implementations in memory during the application initialization phase. The framework covers capabilities for binary patch generati