This repository is a build tooling and patching infrastructure for producing a de-Googled Chromium browser. It does not contain the browser itself but provides the configuration files, patches, and scripts needed to download, modify, and build Chromium without Google web service dependencies. The architecture consists of several layers: configuration files (flags.gn, pruning.list, domain_substitution.list, downloads.ini) that define what to remove or alter; source file processors (binary pruning, domain substitution) that modify the Chromium source tree; a quilt-based patch system with core and extra patches organized by origin (ungoogled-chromium, Bromite, Inox, Iridium, Debian); and utility scripts in the `utils/` and `devutils/` directories for downloading, patching, validating, and building. Key entry points include `utils/downloads.py` for fetching Chromium source, `utils/patches.py` for applying patches, `utils/domain_substitution.py` for replacing Google domains, and `devutils/validate_config.py` for sanity checks. The primary data flow is: clone Chromium source → prune binaries → apply patches → substitute domains → build with GN flags. External dependencies include the Chromium source tree, quilt, Python 3, and platform-specific build tools (e.g., ninja, clang). The project is actively maintained with CI workflows that validate patches and check for new Chromium versions, but it is tightly coupled to specific Chromium releases, requiring constant patch updates.
WES-NG (Windows Exploit Suggester - Next Generation) is a monolithic CLI tool written in Python. Its core function is to read the output of the Windows `systeminfo` command and compare the detected operating system version and installed patches against a bundled database of known vulnerabilities (CVEs). It outputs a prioritized list of likely exploitable vulnerabilities, including links to public exploits. The architecture centers on `wes.py`, which handles input parsing, OS fingerprinting, patch matching, and output formatting. The vulnerability database is shipped as `definitions.zip`, a compressed CSV file. The tool employs a recursive graph traversal algorithm (`mark_superseeded_hotfix`) to filter out patches that have been superseded by newer updates, significantly reducing false positives. Optional companion scripts (`missingkbs.vbs`, `missingkbs.ps1`) can enumerate missing patches directly on a Windows host. The repository also contains a complete data collection pipeline (`collector/*.ps1`) used by the maintainers to regenerate the vulnerability database from sources like the MSRC API, NVD, and Exploit-DB. A large corpus of validation data (`validation/*.txt`) ensures the OS fingerprinting logic works across a wide range of Windows versions and locales. While the core logic is robust and well-tested, the codebase shows signs of technical drift, including remnants of Python 2 compatibility and reliance on hardcoded URLs for data updates. Overall, it is a highly effective and practical security auditing tool that accurately fulfills its stated purpose.
This repository is a template for creating ReVanced patches. It provides a Gradle multi-module project structure with a patches module and an extensions module, along with example code for a bytecode patch and an Android extension. The template includes CI/CD workflows for building, testing, and releasing patches using semantic release, as well as issue templates and contribution guidelines. The actual patch logic is not implemented (the example patch contains a TODO), making this a scaffolding repository intended to be forked and customized. The codebase is minimal and well-organized, but lacks any non-trivial logic or reusable components beyond the template structure itself.