qingralf

arnis. Generate any location from the real world in Minecraft with a high level of detail.

ds4. DeepSeek 4 Flash and PRO local inference engine for Metal, CUDA and ROCm

proxypin. Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems

wechat_chatter. 微信(wechat hook macos) mac 收发消息逆向

vphone-cli. Swift

quickjs. Public repository of the QuickJS Javascript Engine.

chomper. A lightweight emulation framework for emulating security algorithms in iOS executables and libraries.

puerts. PUER(普洱) Typescript. Let's write your game in UE or Unity with TypeScript.

wechat-selkies. 基于Selkies的Linux网页版微信/QQ/Telegram，支持本地中文输入法，支持三方应用，支持AMD64和ARM64。

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

root-bluestacks-air. Root BlueStacks Air macOS

ChinaTextbook. 所有小初高、大学PDF教材。

shu. 书

bagbak. [deprecated] Yet another frida based iOS dumpdecrypted. Also decrypts app extensions

js-deobfuscator. An automated JavaScript deobfuscation tool based on Babel AST, with an online playground, CLI, and programmable API.

ecapture. Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Headphone-Motion. Swift

hls.js. HLS.js is a JavaScript library that plays HLS in browsers with support for MSE.

Pow. Delightful SwiftUI effects for your app

FART. ART环境下自动化脱壳方案

meilisearch. A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

vConsole. A lightweight, extendable front-end developer tool for mobile web page.

lamda. Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

python-proxy. HTTP/HTTP2/HTTP3/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.

SwingAnimation. 小组件平移动画 | Widget on the Move, A Playful Animation

qrbtf. AI & parametric QR code generator. AI & 参数化二维码生成器。https://qrbtf.com

DolphinAttack. Inaudible Voice Commands

chinese-poetry. The most comprehensive database of Chinese poetry 🧶最全中华古诗词数据库, 唐宋两朝近一万四千古诗人, 接近5.5万首唐诗加26万宋诗. 两宋时期1564位词人，21050首词。

miasm. Reverse engineering framework in Python

donut. Official Implementation of OCR-free Document Understanding Transformer (Donut) and Synthetic Document Generator (SynthDoG), ECCV 2022

MidJourney-Styles-and-Keywords-Reference. A reference containing Styles and Keywords that you can use with MidJourney AI. There are also pages showing resolution comparison, image weights, and much more!

ChatGLM-6B. ChatGLM-6B: An Open Bilingual Dialogue Language Model | 开源双语对话语言模型

ghidra. Ghidra is a software reverse engineering (SRE) framework

ml-stable-diffusion. Stable Diffusion with Core ML on Apple Silicon

CLIP. CLIP (Contrastive Language-Image Pretraining), Predict the most relevant text snippet given an image

btk. 虚拟蓝牙键盘（BlueTooth Keyboard）

frp. A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

monomorph. MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

ipatool. Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

disco-diffusion. Jupyter Notebook

cdnlookup. 一个使用 Edns-Client-Subnet(ECS) 遍历智能CDN节点IP地址的工具

libffi. A portable foreign-function interface library.

Pluto. Obfuscator based on LLVM 14.0.6

ascii-zip. A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.

oicq. Tencent QQ Bot Library for Node.js

distroless. 🥑 Language focused docker images, minus the operating system.

Fugu14. Fugu14 is an untethered iOS 14.3-14.5.1 jailbreak

ambiguous-png-packer. Craft PNG files that appear completely different in Apple software [NOW PATCHED]

famicn. 中文家用游戏博物馆 FamiCN.com

openshare. 不用官方SDK，利用社交软件移动客户端(微信/QQ/微博/人人/支付宝)分享/登录/支付。

qiling. A True Instrumentable Binary Emulation Framework

HanLP. Natural Language Processing for the next decade. Tokenization, Part-of-Speech Tagging, Named Entity Recognition, Syntactic & Semantic Dependency Parsing, Document Classification

unicorn. Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

Magisk. The Magic Mask for Android

jadx. Dex to Java decompiler

zxing. ZXing ("Zebra Crossing") barcode scanning library for Java, Android

AndroidAsync. Asynchronous socket, http(s) (client+server) and websocket library for android. Based on nio, not threads.

nanohttpd. Tiny, easily embeddable HTTP server in Java.

grapefruit. Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

jnitrace. A Frida based tool that traces usage of the JNI API in Android apps.

WeChatExtension-ForMac. A plugin for Mac WeChat

wechat-bot. 和国产大模型相关的免费工具集

wechaty. Conversational RPA SDK for Chatbot Makers. Join our Discord: https://discord.gg/7q8NBZbQzt

Odyssey. Odyssey Swift-based semi-untethered jailbreak

NMSSH. NMSSH is an Objective-C wrapper for libssh2, with a sweet API.

web-frontend-magic. #前端黑魔法# 整理

unidbg. Allows you to emulate an Android native library, and an experimental iOS emulation

flexdecrypt. Decrypt iOS Apps and Mach-O binaries

chineseocr_lite. 超轻量级中文ocr，支持竖排文字识别, 支持ncnn、mnn、tnn推理 ( dbnet(1.8M) + crnn(2.5M) + anglenet(378KB)) 总模型仅4.7M

stegcloak. Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

computer-museum-dnbwg. 电脑博物馆 - compumuseum.com

play_with_siguza_first_0day. a toy to play with siguza's very first 0 day - sandbox escape

psychicpaper. iOS <13.5 sandbox escape/entitlement 0day

darling. Darwin/macOS emulation layer for Linux

MonkeyDev. CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.

baraba. Make your UIScrollView scroll automatically when user is looking 👀 by tracking face using ARKit and AVFoundation

PongoOS. pongoOS

networkfixer. Enable network access for Chinese iPhone with checkra1n

BugTracker. checkra1n bug tracker

PrivateWindowCheck. https://jlynx.github.io/PrivateWindowCheck/

ios-snapshot-test-case. Snapshot view unit tests for iOS

ipwndfu. open-source jailbreaking tool for many iOS devices

apple_bleee. Apple BLE research

fastlane. 🚀 The easiest way to automate building and releasing your iOS and Android apps

FFmpeg. Mirror of https://git.ffmpeg.org/ffmpeg.git

UglifyJS. JavaScript parser / mangler / compressor / beautifier toolkit

WebKit-http. Deprecated unofficial http mirror of the WebKit SVN repository

MachObfuscator. MachObfuscator is a programming-language-agnostic Mach-O apps obfuscator for Apple platforms.

restore-symbol. A reverse engineering tool to restore stripped symbol table for iOS app.

ios-webkit-debug-proxy. A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).

crypto-js. JavaScript library of crypto standards.

ios-power-geniustools. Power usage analysis tools for iOS, similar to the ones available at the Genius Bar

quine-relay. An uroboros program with 100+ programming languages

tview. Terminal UI library with rich, interactive widgets — written in Golang

tampermonkey. Tampermonkey is the most popular userscript manager, with over 10 million users. It's available for Chrome, Microsoft Edge, Safari, Opera Next, and Firefox.

WeChatPlugin-MacOS. 微信小助手

MachOView. MachOView fork

appmon. Documentation:

powend. powerd exploit : Sandbox escape to root for Apple iOS < 12.2 on A11 devices

frida-cycript. Cycript fork powered by Frida.

Undecimus. unc0ver jailbreak for iOS 11.0 - 12.4

objection. 📱 objection - runtime mobile exploration

pyppeteer. Headless chrome/chromium automation library (unofficial port of puppeteer)

clickhouse-rpm-install. How to install clickhouse RPM packages

DNSGrep. Quickly Search Large DNS Datasets

OCEval. 动态执行Objective-C. A tiny JIT Interpreter of Objective-C, dynamically run your code like eval().

darwin-xnu. Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu

frida-ios-dump. pull decrypted ipa from jailbreak device

frida. Clone this repo to build Frida

Cuteit. IP obfuscator made to make a malicious ip a bit cuter

libimobiledevice. A cross-platform protocol library to communicate with iOS devices

tinyproxy. tinyproxy - a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems

Jsdir. Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.

empty_list. iOS 11.3.1 exploit

obfuscator.

JSPatch. JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.

Hikari. LLVM Obfuscator

ipv6-hosts. Fork of https://code.google.com/archive/p/ipv6-hosts/, focusing on automation

pwn2own2018. A Pwn2Own exploit chain

XuanwuLab.github.io. Xuanwu Lab Blog

rootlessJB. C

iOS_12_beta_Rutime_Headers. iOS_12_beta_Rutime_Headers

bfinject. Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks

100-Days-Of-ML-Code. 100-Days-Of-ML-Code中文版

opencv. Open Source Computer Vision Library

pure-bash-bible. 📖 A collection of pure bash alternatives to external processes.

files. C

AgileSocialKit. Objective-C

HookCase. Tool for reverse engineering macOS/OS X

app2dylib. A reverse engineering tool to convert iOS app to dylib

GlobalWebInspect. Enable WebView remote inspector for every app

iOS-11.1.2-15B202-Jailbreak. iOS 11.1.2 (15B202) Jailbreak

ShadowsocksX-NG. Next Generation of ShadowsocksX

redis. For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

wechat_jump_game. 微信《跳一跳》Python 辅助

radare2. UNIX-like reverse engineering framework and command-line toolset

jsoup. jsoup: the Java HTML parser, built for HTML editing, cleaning, scraping, and XSS safety.

async_wake-fun. async_wake with a bit of fun! - async_awake by Ian Beer (https://bugs.chromium.org/p/project-zero/issues/detail?id=1417#c3)

iOS. Most usable tools for iOS penetration testing

passionfruit. [WIP] Crappy iOS app analyzer

EggShell. iOS/macOS/Linux Remote Administration Tool

IOKitBrowser. A simple iOS IOKitBrowser

eos. An open source smart contract platform

go-ethereum. Go implementation of the Ethereum protocol

ssl-kill-switch2. Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

zmap. ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

aquatone. A Tool for Domain Flyovers

listen1_chrome_extension. one for all free music in china (chrome extension, also works for firefox)

SafariCookieBridge. Get and Set data via Safari's Cookie

HikariCP. 光 HikariCP・A solid, high-performance, JDBC connection pool at last.

awesome-mac.  This project is dedicated to collecting high-quality macOS software and organizing them systematically by different categories for easy search and use.

IPAPatch. Patch iOS Apps, The Easy Way, Without Jailbreak.

jsonschema2pojo. Generate Java types from JSON or JSON Schema and annotate those types for data-binding with Jackson, Gson, etc

ZIKCellularAuthorization. 用于修复iOS 10首次安装app时，不会弹出"允许xxx使用数据？"授权框的bug

yalu102. incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi

AppBrowser. 不需要越狱，调用私有方法，获取完整的已安装应用列表、打开和删除应用操作、应用运行时相关信息的查看。

inotify-tools. inotify-tools is a library and a set of command-line programs providing a simple interface to inotify.

Luyten. An Open Source Java Decompiler Gui for Procyon

Amoeba-Plus-For-MySQL. Improvement of Amoeba For MySQL.

iOS-Runtime-Headers. iOS Objective-C headers as derived from runtime introspection