Open-source censorship-circumvention software
481 open-source libraries, tools and applications tagged censorship-circumvention, ranked by how closely censorship-circumvention is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
481 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 69 | 3433 | active |
| NextAlone/Nagram Nagram is a third-party Telegram client for Android, forked from NekoX, adding extra messaging features and customization options. It inclu… | 97 | 3369 | active |
| WG Tunnel WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 95 | 3227 | active |
| xingpingcn/enhanced-FaaS-in-China A service providing optimized CNAME records (e.g., vercel-cname.xingpingcn.top) that improve access speed and stability of sites hosted on … | 71 | 3105 | active |
| hwdsl2/wireguard-install A Bash script that automates setting up a WireGuard VPN server on various Linux distributions, with interactive and fully automatic install… | 75 | 3076 | active |
| x-dr/chatgptProxyAPI A self-deployable reverse proxy for the OpenAI API built on Cloudflare Workers and Cloudflare Pages, letting users replace api.openai.com w… | 10 | 3029 | active |
| I2P I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 91 | 2730 | stable |
| OnionBrowser/OnionBrowser Onion Browser is a free, open-source privacy-focused web browser for iPhone and iPad that tunnels web traffic through the Tor anonymity net… | 95 | 2681 | active |
| madeye/proxydroid ProxyDroid is an Android app that routes all device traffic through an upstream SOCKS5 or HTTP proxy without root, using a VpnService-based… | 64 | 2566 | active |
| Peergos Peergos is a peer-to-peer, end-to-end encrypted global filesystem with fine-grained cryptographic access control, built on IPFS/libp2p with… | 76 | 2530 | active |
| Box for Magisk Box for Root (BFR) is a Magisk/KernelSU/APatch module that bundles proxy cores such as clash, sing-box, v2ray, hysteria, and xray to set up… | 77 | 2523 | active |
| jonssonyan/h-ui H UI is a lightweight web panel for managing the Hysteria2 proxy server, written in Go. It provides user management, traffic limits, subscr… | 79 | 2460 | active |
| YTwsy/OpenSurge-for-Mac OpenSurge for Mac is an open-source, Surge-style macOS gateway and control plane that turns a Mac into a whole-home transparent proxy gatew… | 80 | 2426 | active |
| qwj/python-proxy pproxy is a lightweight asynchronous tunnel proxy implemented in pure Python 3 asyncio, supporting HTTP, HTTP2, HTTP3/QUIC, SOCKS4/5, Shado… | 32 | 2203 | active |
| pablouser1/ProxiTok ProxiTok is an open-source alternative frontend for TikTok, inspired by Nitter, written in PHP. It proxies all requests to TikTok server-si… | 30 | 2142 | active |
| bestruirui/BestSub BESTSUB is a self-hosted web application for managing proxy subscriptions for Clash, Mihomo, and sing-box, with a dashboard for subscriptio… | 83 | 2139 | active |
| pojntfx/weron weron is a Go-based tool and library that creates lean, fast, and secure overlay networks using WebRTC. It connects nodes behind NATs and f… | 27 | 2113 | active |
| haad/proxychains ProxyChains is a UNIX command-line tool that forces TCP connections and DNS lookups of any dynamically linked program through SOCKS4/5 or H… | 32 | 7964 | maintenance |
| RetroShare/RetroShare RetroShare is a free, open-source, cross-platform, decentralized Friend-to-Friend (F2F) communication platform built in C++ with Qt. It pro… | 66 | 2018 | active |
| Start9Labs/start-technologies Start Technologies is the monorepo for Start9's products, headlined by StartOS, an open-source Linux distribution that turns any PC into a … | 96 | 1994 | active |
| trojanpanel/install-script A one-click shell installation script for Trojan Panel, a multi-user web administration panel that manages proxy nodes running Xray, Trojan… | 28 | 1990 | active |
| nymtech/nym Nym is a decentralized privacy platform built in Rust, centered on a mixnet that shuffles Sphinx packets to protect network-level metadata,… | 96 | 1950 | active |
| hackerschoice/gsocket Global Socket (gsocket) is a C-based toolkit that lets two machines behind NAT or firewalls establish secure, end-to-end encrypted TCP conn… | 63 | 1934 | active |
| complexorganizations/wireguard-manager A shell-based tool that automates the installation, configuration, and management of WireGuard VPN servers. It provides a user-friendly way… | 45 | 1860 | active |
| markqvist/Sideband Sideband is an end-to-end encrypted, infrastructure-less LXMF messaging and LXST telephony client for Android, Linux, macOS and Windows, bu… | 94 | 1811 | active |
| jasonwong1991/easy_proxies Easy Proxies is a Go-based proxy pool manager built on sing-box that aggregates many upstream proxy nodes into a single stable, health-chec… | 84 | 1783 | active |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 76 | 1745 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 99 | 1738 | active |
| vitorpamplona/amethyst Amethyst is an open-source Nostr client for Android, with recent desktop builds for macOS and Windows, for participating in the decentraliz… | 99 | 1611 | active |
| DimensionDev/Maskbook Mask Network is a browser extension that bridges Web2 social media platforms (X, Facebook, Instagram, Minds, Mirror) with Web3 services. It… | 97 | 1586 | active |
| wikiZ/RedGuard RedGuard is a C2 front flow control tool written in Go that acts as a filtering reverse proxy in front of command-and-control servers. It h… | 23 | 1569 | active |
| MikeWang000000/FakeHTTP FakeHTTP is a Linux command-line tool that obfuscates TCP connections by disguising them as HTTP traffic using Netfilter Queue (NFQUEUE). I… | 31 | 1549 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 77 | 1448 | active |
| rosenpass/rosenpass Rosenpass is a post-quantum-secure key exchange tool written in Rust that establishes symmetric keys and feeds them to WireGuard via its pr… | 82 | 1417 | active |
| Maasea/sgmodule A collection of Surge modules (sgmodule files) written in JavaScript that enhance or modify mobile apps and network behavior, such as remov… | 70 | 1395 | active |
| YukiCoco/ToMoon ToMoon is a Decky Loader plugin for SteamOS that provides an out-of-the-box Clash proxy client written in Rust. It automatically configures… | 35 | 1381 | active |
| maqp/tfc Tinfoil Chat (TFC) is a peer-to-peer, end-to-end encrypted messaging system built on Tor onion services and high-assurance hardware archite… | 70 | 1322 | active |
| liamcottle/reticulum-meshchat Reticulum MeshChat is an Electron-based mesh network communications app built on the Reticulum Network Stack. It lets users exchange encryp… | 86 | 1303 | active |
| ultranity/Pix-EzViewer PixEz is a third-party Pixiv client for Android built with Kotlin and Jetpack, offering a modern Material Design UI and many enhancements o… | 93 | 1265 | active |
| cfal/shoes A high-performance multi-protocol proxy server written in Rust supporting HTTP, SOCKS5, VMess, VLESS, Shadowsocks, Trojan, Snell, Hysteria2… | 100 | 1245 | active |
| torlando-tech/columba Columba is a native Android messaging and voice call app for the Reticulum network, sending LXMF messages and making LXST calls without int… | 84 | 1237 | active |
| manualdousuario/marreta Marreta is a self-hostable PHP/Laravel web application that removes access barriers, paywalls, and visual distractions from web pages. It c… | 78 | 1222 | active |
| zu1k/proxypool A Go service that automatically crawls proxy nodes (ss, ssr, vmess, trojan) from Telegram channels, subscription URLs, and the public inter… | 23 | 4034 | maintenance |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 46 | 3929 | maintenance |
| ricochet-im/ricochet Ricochet is a cross-platform desktop instant messaging application that provides anonymous, metadata-resistant chat over Tor hidden service… | 23 | 3918 | maintenance |
| EchoHS/GeekezBrowser GeekEZ Browser is an anti-detect (fingerprint spoofing) browser built on Electron and Puppeteer with integrated Xray-core proxy support. It… | 80 | 1127 | active |
| Windscribe VPN The open-source (GPL-2.0) desktop VPN client for the Windscribe service, built in C++ for Windows, macOS, and Linux. It supports multiple V… | 92 | 1108 | active |
| immortalwrt/homeproxy HomeProxy is the modern proxy platform for ImmortalWrt (an OpenWrt fork), built on top of sing-box. It provides a LuCI web interface for ma… | 77 | 1088 | active |
| shadowsocks/ChinaDNS ChinaDNS is a C-based local DNS server that prevents DNS poisoning by routing Chinese domain queries to local DNS servers and foreign domai… | 23 | 3603 | maintenance |
| libreswan/libreswan Libreswan is a free software implementation of the IPsec VPN protocol and its Internet Key Exchange (IKEv1/IKEv2) keying protocol, forked f… | 99 | 1009 | stable |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3251 | maintenance |
| django-sspanel A self-hosted Shadowsocks proxy management panel built with Django, used to manage proxy nodes, users, and subscriptions. It pairs with the… | 10 | 3066 | maintenance |
| KOP-XIAO/QuantumultX A JavaScript resource parser script for the Quantumult X iOS proxy client that converts proxy node subscriptions and configs from formats l… | 77 | 2999 | maintenance |
| Bitmessage/PyBitmessage PyBitmessage is the reference client for Bitmessage, a peer-to-peer protocol for sending encrypted, authenticated messages without central … | 57 | 2885 | maintenance |
| Ice-Hazymoon/openai-scf-proxy A small Node.js proxy service that forwards OpenAI API requests, deployable to Tencent Cloud Functions (or Aliyun) in minutes without writi… | 22 | 2543 | maintenance |
| vuvuzela/vuvuzela Vuvuzela is a metadata-private messaging system written in Go that hides who is talking to whom, even against nation-state adversaries, usi… | 32 | 2487 | maintenance |
| zmirror zmirror is a Python-based HTTP reverse proxy designed to automatically and completely mirror entire websites, such as Google, Wikipedia, Yo… | 10 | 2396 | maintenance |
| monlor/MIXBOX-ARCHIVE MIXBOX is a shell-script-based toolbox for Xiaomi routers that provides quick configuration and management of plugins like Shadowsocks, frp… | 10 | 2382 | maintenance |
| fossabot/clash Clash is a rule-based network proxy written in Go that supports HTTP/HTTPS and SOCKS proxies with Surge-like configuration and GeoIP rule r… | 32 | 2178 | maintenance |
| quericy/one-key-ikev2-vpn A one-click bash script that installs and configures an IKEv2/L2TP VPN server using strongSwan on Ubuntu, CentOS, or Debian. It handles cer… | 32 | 2104 | maintenance |
| lukeaschenbrenner/TxtNet-Browser TxtNet Browser is an Android app that lets users browse the web over SMS without any WiFi or mobile data connection. It sends HTTP GET requ… | 75 | 1541 | maintenance |
| freelan-developers/freelan FreeLAN is an open-source, peer-to-peer VPN application written in C++ that creates secure virtual networks over the internet. It supports … | 23 | 1378 | maintenance |
| Rafficer/linux-cli-community A community-maintained Linux command-line client for ProtonVPN, rewritten in Python from the original bash version. It manages OpenVPN-base… | 10 | 1362 | maintenance |
| SECFORCE/Tunna Tunna is a Python toolset that tunnels arbitrary TCP connections over HTTP using a remote webshell and a local SOCKS-capable proxy. It is d… | 32 | 1275 | maintenance |
| yggdrasil-network/yggdrasil-go Yggdrasil is a lightweight userspace software router implementing an experimental, fully end-to-end encrypted IPv6 overlay network with a s… | 88 | 5443 | experimental |
| Kuingsmile/clash-core A backup fork of Clash, a rule-based network tunnel written in Go that proxies traffic through protocols like Shadowsocks, VMess, Trojan, a… | 18 | 1132 | maintenance |
| ihciah/clean-dns-bpf A Rust + eBPF/XDP tool that drops GFW DNS poisoning packets at the kernel level, allowing clean DNS resolution from 8.8.8.8 without a proxy… | 23 | 1115 | maintenance |
| ToyoDAdoubiBackup/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 1076 | maintenance |
| Jigsaw-Code/Intra Intra is an experimental Android app from Jigsaw (Google) that routes DNS lookups over DNS-over-HTTPS to encrypt them and prevent network-l… | 75 | 2221 | experimental |
| OpenWrt Domain Routing Suite Podkop is an open-source traffic routing tool for OpenWrt routers, built on sing-box, that lets users send selected resources through a tun… | 85 | 2189 | experimental |
| darkrenaissance/darkfi DarkFi is an anonymous Layer 1 blockchain built in Rust that uses zero-knowledge cryptography (zk-SNARKs, halo2, a zkVM) to enable fully pr… | 73 | 1380 | experimental |
| nethical6/conversation-steganography A Go CLI tool that hides encrypted secret messages inside natural-looking chat text generated by a local LLM (GPT-2), enabling covert commu… | 52 | 1250 | experimental |
| hanselime/paqet paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pca… | 81 | 1191 | experimental |
| ToyoDAdoubi/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 4685 | abandoned |
| isohuntto/openbay Openbay is a self-hosted PHP (Yii2-based) web application that acts as a proxy/mirror frontend for The Pirate Bay torrent index. The isoHun… | 32 | 3485 | abandoned |
| vzex/dog-tunnel Dog Tunnel is a Go-based peer-to-peer tunneling tool that provides port mapping over UDP using the KCP protocol, with NAT hole punching ass… | 10 | 2167 | abandoned |
| okTurtles/dnschain DNSChain is a blockchain-based DNS and HTTPS server that provides a decentralized, MITM-proof alternative to the traditional DNS and X.509 … | 23 | 1731 | abandoned |
| nining377/UnblockMusicPro_Xposed An Xposed module for Android that unlocks greyed-out (region- or license-restricted) songs in the Netease Cloud Music client by hooking the… | 23 | 1387 | abandoned |
| Privacy Pass A browser extension implementing the client side of the Privacy Pass protocol, which issues and redeems unlinkable cryptographic tokens (ba… | 23 | 1250 | abandoned |
| cryptosphere/cryptosphere Cryptosphere is a global peer-to-peer cryptosystem for publishing and securely distributing content pseudonymously with no central point of… | 10 | 1142 | abandoned |
← prev page 5 / 5