thehardwarestore.ai

where AI agents shop for the right tools

── 99427 repos indexed ── | filtered by tag: vpn
AdAway/AdAway ★ 9367 713 APPLICATION

AdAway is an open-source Android ad-blocking application that provides two methods for blocking ads: modifying the system hosts file (requires root) and a local VPN-based DNS filter. The app downloads and manages multiple hosts sources from URLs, parses them into a local Room database, and applies the blocklists either by writing to /etc/hosts or by intercepting DNS queries through a local VPN service. The VPN mode maps real DNS servers to fake addresses, forwards allowed queries, and returns blocked or redirected responses. The architecture follows MVVM with LiveData, ViewModel, and Room, and includes background workers for periodic updates. The app bundles a legacy native C library (tcpdump/libpcap) for packet capture, used for DNS logging. The codebase is actively maintained, with frequent commits and releases, but some native components are outdated and the VPN implementation may have compatibility issues on newer Android versions.

RATING: 7.6/10 MAINT: maintained DRIFT: medium
▸ 4 reusable components found
ermaozi/get_subscribe ★ 9363 673 APPLICATION

This repository is a proxy subscription aggregation and distribution system. It periodically collects free proxy subscription links (Clash YAML and V2Ray URI formats) from multiple public sources, merges them, classifies nodes by TCP connectivity (reachable/unreachable/untested), and serves the resulting files via a Cloudflare Worker. The system is driven by a GitHub Actions workflow that runs every 12 hours, executing Python scripts to fetch, process, and commit updated subscriptions. The architecture is a data pipeline application with a serverless serving layer. Key entry points include main.py (orchestrating collection and merging), check_nodes.py (TCP connectivity classification), and worker/sub.mjs (Cloudflare Worker for serving with caching and ETag). External dependencies include requests, PyYAML, and the Cloudflare Workers runtime. The repository also includes a weekly commit history cleanup workflow to keep repository size small. The project is actively maintained with frequent updates and tests, though it relies on unstable external proxy sources.

RATING: 7.3/10 MAINT: active DRIFT: low
▸ 4 reusable components found
yonggekkk/sing-box-yg ★ 10568 3168 APPLICATION

This repository contains a collection of deployment and management scripts for setting up and maintaining a multi-protocol proxy server (sing-box) on VPS and free hosting platforms (Serv00/Hostuno). The system automates the installation of five proxy protocols (Vless-reality, Vmess-ws, Hysteria-2, Tuic-v5, Anytls), generates TLS certificates, configures Cloudflare Argo tunnels for CDN proxying, and provides keep-alive mechanisms via cron, GitHub Actions, Cloudflare Workers, and a Node.js web server to prevent service downtime on free hosts. The primary entry points are interactive bash scripts (`sb.sh` for VPS, `serv00.sh` for Serv00) and a non-interactive keep-alive script (`serv00keep.sh`). The architecture is a set of loosely coupled shell scripts and a small Express.js application, not a monolithic service. External dependencies include sing-box, cloudflared, and standard Linux utilities. The code is functional and widely used (10k+ stars) but exhibits typical script-level craftsmanship: long monolithic functions, global variable usage, and tight coupling to specific hosting environments. The last commit date (2026-10-13) appears anomalous and likely a data error, but the repository shows active maintenance with recent stars and forks.

RATING: 7.2/10 MAINT: active DRIFT: low
▸ 2 reusable components found
KNG7-P/Se7en-Pro ★ 615 43 APPLICATION

Se7en Pro is a Windows 10/11 anti-censorship VPN client that aggregates eleven circumvention protocols into one desktop application. In production it runs a Flutter glassmorphic GUI (Se7enFlutter) that talks over authenticated named pipes to a .NET 8 daemon (Se7enCore), which orchestrates child processes for Psiphon, Tor, Xray/sing-box, Aether (MASQUE/WireGuard/WARP), and SHARD (Cloudflare TLS fragmentation over VLESS/Trojan nodes). Chained multi-hop modes (Psiphon-over-WARP, Tor-over-V2Ray, etc.) are first-class features, and a Wintun/tun2socks TUN adapter provides system-managed routing with split tunneling by app, domain, and IP along with a kill switch, system proxy, DNS handling, LAN sharing, and admin elevation. Architecturally the daemon's ConnectionManager selects active engines behind an IConnectionEngine abstraction; LocalSocksEngineBase supplies a shared process-spawn/SOCKS5-probe/auto-restart lifecycle for every engine. The Flutter side is a Riverpod-driven dashboard with live speed/ping telemetry, engine-filtered log viewing, region picking, and a large settings surface. Primary data flows are: UI command → PipeCoreClient → IpcDaemonService JSON dispatch → ConnectionManager → engine process → local SOCKS5/HTTP proxy → system proxy or TUN; status and logs stream back over the same pipe. The daemon persists settings to settings.json, caches Aether edge pools, and fetches SHARD node lists from GitHub. The repo is hybrid in a narrow sense: it bundles curated operational datasets (Akamai/Cloudflare/Fastly IP ranges, Akamai seed IPs, SHARD seed nodes, Tor bridge strings) used at runtime for CDN fronting and edge discovery. These are static resource inputs to the application machinery, not research artifacts or pipeline outputs, so the dominant character is application. Craftsmanship is solid but uneven. The engine abstraction, IPC layer, Authenticode trust checks, DPAPI secret storage, and route-pinning logic are genuinely reusable. However, multi-thousand-line widget files (settings_page.dart ~2200 lines, split_tunnel_section.dart ~1200 lines), incomplete i18n coverage with hardcoded English/Chinese/Russian strings, version drift (UI reports v1.0.4 while the engine UA says 1.1.0), brittle relative resource paths, and bundled third-party binaries with limited update channels create real maintenance friction. Test coverage is thin (a few model/round-trip widget tests).

RATING: 7.1/10 MAINT: maintained DRIFT: medium
▸ 7 reusable components found
r3nor/mullvad-tailscale ★ 202 16 APPLICATION

This repository provides a bash script (`mnf`) and an nftables rules file (`mullvad.rules`) that enable running Mullvad VPN alongside Tailscale or Zerotier on Linux. The script orchestrates the Mullvad CLI, nftables, and the mesh networking service to ensure traffic from the Tailscale/Zerotier network bypasses the VPN (or is correctly routed) while all other traffic goes through Mullvad. It supports country selection, RAM-only servers, custom DNS, and selective teardown. The code is a single, well-structured bash script with clear functions and argument parsing. It is not a library or framework but a purpose-built tool for a specific network configuration problem. The repository has a small footprint, no tests, and no CI/CD, but it is actively maintained (last commit dated 2026-05-07, though this appears anomalous). The nftables rules file is a simple configuration that marks packets from excluded IP ranges. There are no reusable software components beyond the script itself, which is tightly coupled to the Mullvad/Tailscale/Zerotier ecosystem.

RATING: 6.8/10 MAINT: active DRIFT: low
eooce/Sing-box ★ 5186 1849 APPLICATION

This repository provides a collection of scripts and lightweight HTTP servers for automated deployment and management of sing-box multi-protocol proxy nodes. It supports VLESS-REALITY, VMess-WebSocket (with optional Cloudflare Argo tunnel), Hysteria2, and TUIC v5 protocols, along with Nezha monitoring agent integration. The primary use case is setting up proxy services on VPS or free hosting platforms like Serv00/CT8, with additional 'toy' implementations for game hosting environments using Go, Node.js, PHP, and Python. The architecture is script-driven: large Bash scripts (sing-box.sh, sb_serv00.sh) handle installation, configuration, and service management via interactive menus or environment variables. They download precompiled binaries, generate sing-box JSON configurations, and manage systemd or OpenRC services. The supplementary HTTP servers (Node.js, Python, PHP) provide subscription endpoints and process lifecycle management, downloading and running a core binary (sbsh) that performs the actual proxy setup. The PHP check.php script offers standalone server environment diagnostics. Code quality is average overall. The Bash scripts are functional but contain significant duplication across Serv00 variants and lack modularity. The Node.js and Python HTTP servers are well-structured and demonstrate clean asynchronous patterns, while the PHP diagnostic script is a polished, self-contained tool. There is no test suite or CI/CD, and external binary URLs are hardcoded, posing medium technical drift risk. The repository is actively maintained by a large community, making it a practical solution for proxy deployment despite its architectural limitations.

RATING: 6.5/10 MAINT: active DRIFT: medium
▸ 2 reusable components found
zc360/Xiaomi-ax3000t-openwrt ★ 209 96 APPLICATION

This repository provides a GitHub Actions-based continuous integration pipeline for building custom OpenWrt firmware specifically for the Xiaomi AX3000T router. It contains a pre-configured build configuration (`.config`), custom feed scripts (`diy-part1.sh`, `diy-part2.sh`), and a comprehensive workflow file that orchestrates the entire build process: cloning the LEDE source tree, applying customizations (including passwall2, ddns-go, Argon theme, and UA3F), and compiling the firmware. The repository also includes detailed documentation for unlocking SSH on the stock firmware, flashing the custom build, and reverting to the official Xiaomi firmware. While the repo is not a traditional software application, it serves as a build configuration and automation project for embedded Linux firmware development. The codebase is tightly coupled to the specific hardware and build process, offering no reusable software components outside of the OpenWrt build context.

RATING: 6.4/10 MAINT: active DRIFT: low
itgoyo/TelegramGroup ★ 5676 374 DATA_RESEARCH

This repository is a static, curated directory of Telegram resources—groups, channels, bots, VPNs, cryptocurrency exchanges, and other utilities. The entirety of the codebase is a single, extensive README.md file organized into clear sections with navigation anchors. There is no application code, data pipeline, or analytics logic. The repo serves as a reference index for Telegram users, particularly the Chinese-speaking community. Its value lies in the comprehensiveness and ongoing maintenance of the link collection, not in any software architecture or data engineering. Clone reproducibility is not applicable as there are no data transformations or analytical outputs to replicate.

RATING: 6.3/10 MAINT: maintained DRIFT: low
geph-official/geph-android ★ 303 68 APPLICATION

Geph Android is a production VPN client that wraps a Rust-based circumvention engine (geph5-client) and a web UI (gephgui) inside a native Android application. The architecture is a hybrid of a WebView-hosted UI and a native daemon process: the main activity loads a local HTML/JS UI via WebViewAssetLoader, and a JavaScript bridge (init.js) communicates with Kotlin through @JavascriptInterface to invoke RPC calls over a Unix socket to the daemon. The daemon is spawned as a separate process (libgeph.so) and manages the VPN tunnel via Android's VpnService. The app supports multiple build variants (debug, releaseAPK for sideloading with auto-update, releasePlay for Google Play with Firebase Analytics and Play In-App Review) using a factory pattern to inject platform-specific features. Key data flows include user authentication via broker RPC, VPN start/stop lifecycle, and periodic update checks that download and verify APK signatures. External dependencies include the Rust engine binary, a prebuilt web UI, JNA for native access, and Firebase services for the Play variant.

RATING: 6.1/10 MAINT: active DRIFT: medium
▸ 2 reusable components found
koolshare/koolshare.github.io ★ 4665 1777 APPLICATION

This repository is a plugin ecosystem for Koolshare-modified Asuswrt-Merlin router firmware. It provides a software center (softcenter) that manages the installation, update, and removal of various router plugins, including DDNS (ddnspod, phddns, appledns), VPN (shadowvpn), download acceleration (kuainiao), network utilities (dualwan, swap, ssid), and a web-based terminal (shellinabox). The architecture is a collection of shell scripts and ASP web pages, with a central softcenter module that handles app store functionality, version checking, and offline installation. Key entry points include softcenter's install.sh, ks_app_install.sh, and Main_Soft_center.asp. Data flows involve downloading plugins as tar.gz archives from remote servers (koolshare.cn, GitHub raw), installing via scripts, and storing configuration in a dbus key-value store. External dependencies include precompiled binaries (curl, wget, perp, speedtest, shadowvpn, shellinaboxd) and remote endpoints for version checks and push messages. The codebase is heavily duplicated, with many identical backup.sh and install/uninstall scripts across modules, and relies on opaque UPX-packed binaries. Maintenance risks include hardcoded endpoints, outdated toolchains, and lack of tests or CI/CD.

RATING: 5.9/10 MAINT: maintained DRIFT: high
yonggekkk/warp-yg ★ 4631 1157 APPLICATION

This repository contains a monolithic bash script (CFwarp.sh) that provides a one-click installation, configuration, and management interface for Cloudflare WARP on Linux VPS systems. The script supports two WARP kernel implementations (wgcf and warp-go), allows switching between IPv4-only, IPv6-only, or dual-stack WARP modes, and includes utilities for upgrading to WARP+ or Teams accounts, monitoring WARP status, and generating WireGuard configuration files. It is a practical tool for VPS owners seeking to unlock Netflix, ChatGPT, or other geo-restricted services through WARP, but the codebase is a single large script with repetitive patterns, heavy reliance on external downloads, and no modularization or testing, making it fragile and difficult to reuse. The high star count and fork activity indicate widespread use, but the engineering quality is average for a system administration script.

RATING: 5.7/10 MAINT: active DRIFT: medium
XX-net/XX-Net ★ 33452 7534 APPLICATION

XX-Net is a desktop application for circumventing internet censorship, primarily targeting the Great Firewall of China. It operates as a multi-protocol proxy client that supports Google App Engine (GAE) fronting, custom X-Tunnel, Cloudflare, CloudFront, and direct connections. The system consists of a launcher with a web-based control panel, a smart router for DNS and traffic routing, and multiple frontend modules that implement various obfuscation and tunneling techniques. The codebase is a large, monolithic Python 2/3 project with heavy use of vendored libraries (tlslite, hyper, ecdsa, asn1crypto, dnslib) for custom TLS, HTTP/2, and cryptographic operations. It is not a data research project; it is a pure application focused on network proxy functionality.

RATING: 5.0/10 MAINT: stale DRIFT: high
▸ 4 reusable components found
getsurfboard/surfboard ★ 8674 264 APPLICATION

This repository is the public home of Surfboard, an Android VPN/proxy client. However, the checked-out snapshot contains only GitHub Pages documentation and release metadata: a one-line README, a changelog, privacy/terms pages, a sponsors list, a version manifest, and a Jekyll layout. No application source code, build files, tests, or CI configuration are present, so the architecture and engineering quality cannot be verified from code. Git tags indicate mobile releases through 2.35.2 and a TV release 1.1.1, but the working tree exposes only docs/ assets.

RATING: 4.2/10 MAINT: active DRIFT: medium
KEJIXIAOLU/jcpm ★ 310 19 DATA_RESEARCH

This repository consists solely of a README.md file containing a static HTML table of VPN service recommendations. The table lists various VPN providers ('airports') with pricing details, features, and promotional discount codes. There is no executable code, data processing scripts, configuration files, or any infrastructure for data ingestion, transformation, or analysis. The content is purely informational and presented as a static reference guide for users seeking VPN services. The repository does not perform any data operations; it merely displays hardcoded information in a markdown table format.

RATING: 2.8/10 MAINT: active DRIFT: low
free18/v2ray ★ 5342 238 APPLICATION

This repository is a static collection of proxy subscription links and configuration files for V2Ray and Clash proxy clients. It contains a README.md with promotional material for various VPN services, a list of free proxy URIs in v.txt, a Clash YAML configuration file (c.yaml) with hundreds of proxy entries, and a vpn.md with a promotional link. The repository serves as a free source of proxy configurations for circumventing internet censorship. It does not contain any original software code. The architecture is trivial: it is a file-based subscription endpoint. The primary data flow is users downloading these files and importing them into proxy clients.

RATING: 2.3/10 MAINT: maintained DRIFT: low
Pawdroid/shadowrocket_for_android ★ 2065 112 APPLICATION

This repository is a binary distribution hub for the Android VPN client 'Shadowrocket for Android'. It contains no source code, build scripts, or development artifacts. The only substantive content is a README file with download links for pre-built APK files targeting different CPU architectures (arm64-v8a, armeabi-v7a, x86_64, x86), along with translations of that README into 32 languages. The repository serves solely as a release channel for the closed-source Shadowrocket application; there are no entry points, data flows, or external dependencies to analyze. From a software engineering perspective, this is not a codebase but a static file index. No components are reusable because no code exists to extract.

RATING: 1.7/10 MAINT: active DRIFT: high
feiniaoyun/feiniaoyun ★ 2256 82 APPLICATION

The repository contains only a README.md file with no source code, scripts, or data files. It serves as a static list of URLs and instructions for accessing the Feiniaoyun proxy/service, including invitation links, subscription addresses, and troubleshooting guidance. The content promotes a circumvention service with a referral program offering 30% commissions. There is no executable code, data processing logic, or application architecture present—the repository functions solely as a reference guide for users to obtain service nodes and configure third-party clients.

RATING: 1.5/10 MAINT: active DRIFT: low
jdnei/mojie ★ 803 24 APPLICATION

This repository is a promotional landing page for the 'mojie' VPN service (魔戒机场). It contains no application source code, libraries, or data pipelines. The core content consists of multilingual README files (Chinese, English, Russian, Persian) that list VPN subscription plans, pricing, invitation codes, affiliate links, and server status tables, along with a handful of performance test screenshots in the mojie/ directory. The only functional component is a GitHub Actions workflow (.github/workflows/daily-sync.yml) that runs nightly to update the date in all README headers and forces pushes the repository to GitLab (Gitee sync is commented out). This is primarily a marketing and affiliate revenue vehicle, not a software project. Because there is no software to evaluate, the quality score reflects the minimal engineering effort: a trivial cron-based workflow with dated bash/perl commands. It is actively maintained in the sense that the date is refreshed daily, but there is no meaningful code craftsmanship or reusability.

RATING: 1.5/10 MAINT: active DRIFT: low
Kejifaxian/welcome ★ 2058 351 APPLICATION

This repository contains no application code, data pipelines, or software artifacts. It is a single README.md file that serves as a curated list of download links for various VPN and proxy software (V2ray, Clash, Shadowrocket, etc.) across Windows, Android, macOS, and iOS platforms. The README also includes links to a YouTube tutorial channel, a Telegram group for language localization, and a list of recommended VPN service providers. There is no executable code, no build system, no tests, and no architecture to evaluate. The repository functions purely as a static resource page, not as a software project. It has no reusable components and demonstrates no software craftsmanship.

RATING: 0.9/10 MAINT: stale DRIFT: low
TunnlTo/desktop-app ★ 1966 87 APPLICATION

This repository is a stub. The current file tree contains no application source code—only a README and seven screenshots. The README explicitly states that the open-source project has been discontinued and transitioned into a commercial service at tunnl.to. There are no entry points, no executable files, no build configuration, and no code to analyze; the repo exists primarily as a notice and redirect for former users. The README explains that the old open-source version is still available for personal use but is not licensed for commercial use, and that the source was removed to avoid misleading users now that the application is closed-source. It also describes the rationale for the new UI, but none of that functionality exists in this repository. From a software engineering perspective, this is not a usable or reusable codebase; it is a deprecated project marker with screenshots and marketing/FAQ content.

RATING: N/A/10 MAINT: deprecated DRIFT: high
$ loading more...
$ submit: