DexKit is a high-performance C++ library for runtime parsing and querying of Android DEX bytecode, primarily used by Xposed module developers to locate obfuscated classes, methods, and fields. It provides a rich DSL in Kotlin/Java for constructing structural queries based on annotations, opcodes, string usage, field/method references, and more. The core engine parses DEX files from APK archives, builds in-memory indexes, and uses algorithms like Aho-Corasick for substring matching and the Hungarian algorithm for unordered set matching. Communication between the native C++ layer and JVM is handled via FlatBuffers serialization. The library also includes an optional caching layer (`DexKitCacheBridge`) for persisting query results across app restarts. It is distributed as an Android AAR via Maven Central and includes a demo app and unit tests.
LibrePods is a cross-platform application suite whose verified purpose is to liberate Apple AirPods from the Apple ecosystem, providing full accessory management on non-Apple hardware. The Android app (Kotlin/Jetpack Compose) offers battery monitoring via BLE manufacturer-data parsing, noise-control mode switching, ear detection, head-gesture recognition, hearing aid adjustments, custom EQ, device takeover, home-screen widgets, Quick Settings tiles, and iOS-style popup overlays. The Linux companion (Qt6/QML) delivers the same control surface through a system tray app backed by BlueZ and PulseAudio, with a Rust rewrite in progress per the ci-linux-rust.yml workflow.
HyperCeiler is an Xposed/LSPosed module for Xiaomi HyperOS devices that hooks into system applications (SystemUI, Launcher, Settings, Camera, etc.) to unlock hidden features, disable ads/telemetry, and customize UI elements. The project is a multi-module Android application with a settings UI for toggling hundreds of individual hook rules. It uses a dual-layer architecture: Java/Kotlin hooks via EzHookTool and DexKit for dynamic method interception, and native C++ code for low-level inline patching of ARM64 binaries in system libraries. The codebase includes extensive mutation testing and regression harnesses that compile production source against frozen ROM snapshots and verify behavior via QEMU emulation. While highly specialized for Xiaomi's proprietary stack, the project demonstrates advanced reverse engineering skills and a robust testing methodology.
ONO is an Android Xposed module that modifies and enhances the QQ messaging application (Tencent). It provides a broad set of features including custom sticker panels, message encryption, anti-revoke, developer tools (packet inspection, cookie retrieval), UI tweaks (bubble redirect, profile card menu), and entertainment hooks (fake group owner, sport step spoofing). The module supports both legacy Xposed (API 51–99) and modern LSPosed (libxposed API 100) frameworks, with a dual-entry architecture that unifies startup through a shared `UnifiedEntryPoint` and `StartupRoutine`. Internally, it uses a sophisticated hook item framework based on annotations and a KSP annotation processor to automatically register hook classes. The codebase is heavily reliant on reflection and reverse-engineering of QQ's internal classes, making it tightly coupled to specific QQ versions, but the core utilities (reflection helpers, configuration management, protocol building) are well-crafted and potentially reusable in other Android hooking projects. The project is actively maintained with frequent commits, responsive issue triage, and a comprehensive build system using Gradle convention plugins.
This is an Android Xposed module (using LSPosed/libxposed API) that hooks system APIs to bypass eSIM (Embedded SIM / eUICC) support checks and intercept activation codes. It forces `PackageManager.hasSystemFeature` for eUICC to return true, returns a fake EuiccService in query results, and captures activation codes from `DownloadableSubscription.forActivationCode` or `getEncodedActivationCode`, copying them to the clipboard and offering to share via an Intent. Additionally, it provides an OMAPI bypass by hooking `com.android.se.security.AccessControlEnforcer` to disable ARF/ARA access control, enabling OMAPI access without proper ARA rules. The module targets specific packages listed in `scope.list` (com.android.se, com.miui.euicc, app.septs.euiccprobe). The code is a single Java class (`HookEuicc.java`) that extends `XposedModule` and installs hooks in `onPackageReady`. It demonstrates solid reflection-based hooking patterns and includes a reusable utility method for setting boolean fields via reflection across the class hierarchy. The build system uses Gradle with Android Gradle Plugin 8.6.0 and targets Android SDK 35.