script-injection 开源项目推荐（27 个）

eBay /userscript-proxy

HTTP proxy to inject scripts and stylesheets into existing sites.

rainyrainyday /HomebrewOverlay

Browser extension adware (showHomebrewOverlayOuter)

cginternals /gloperate

C++ library for defining and controlling modern GPU rendering/processing operations.

ao /run-javascript

Chrome extension to run custom JavaScript each time you visit a website, automatically on page load. A per-domain javascript injector: inject JS snippets per site, saved across restarts. Not a userscript manager - your own JS per site, in a built-in Ace editor. Manifest V3.

taills /Mirage-Browser

一款用 Electron 构建的指纹浏览器管理器——多配置文件隔离、通过 CDP 伪造指纹、代理集成（Mihomo/Clash）以及脚本注入。Retro Windows XP UI.基于 Electron 的指纹浏览器管理器，支持多环境隔离、CDP 指纹伪造、Mihomo 代理集成与脚本注入，复古 Windows XP 界面风格

Megasware128 /gta.js

A Grand Theft Auto JavaScript hook

wzxwhxcz /LSPFRIDA

在 App 内直接跑 Frida 脚本 —— 不用 frida-server，不用连电脑。内置 GumJS 引擎 + LSPlant Hook，手机端完成脚本编写/注入/调试全流程。

BartJolling /injectsome

Javascript helper library to assist in injecting scripts, styles and html from userscripts.

excerebrose /Facebook-awkward-like

A chrome extension allowing you to disable the like button on facebook!

JaydenV8 /vite-plugin-cooked

Vite's ?raw gives you uncooked source. This gives you the cooked version — compiled, bundled, and tree-shaken.

leaker /pouch

Desktop browser for tweaking any site — inject scripts, swap resources, persist overrides

MrLouisWright /workflow-sentinel

Harden GitHub Actions: flags unpinned actions, broad or missing permissions, pull_request_target pwn requests, script injection, leaked secrets, persisted credentials, self-hosted PR runners, curl|bash, deprecated commands and undigested images, with a fix for each. --fix pins SHAs. Text, JSON, SARIF, Markdown; GitHub Action included.

ananya-singh-baghel /SITE-BRAKE

Cross Site Scripting using CyberSecurity principles

jamessimone /curalate-react

Typescript and plain JSX wrappers for introducing Curalate fan reels on your website

jclerc /bankin-scraper

🏦 Scrape transactions from a website - Bankin Challenge #1.

michaelvanstraten /no-tegridy

Small red team script for injecting login interception code into existing WordPress plugins

a-riceeater /UBConsole

An unblocked console that has almost the same functions as your average chrome browser one.

bamsen04 /scriptdrop

Inject TypeScript scripts into any web page during development. Write modern TypeScript, and ScriptDrop bundles and injects it into your target URL live via a Chrome extension.

xDMPx /AutoInjector

Automatic injection of scripts and CSS into websites

vinimabreu /taint-trail

Follows an untrusted GitHub Actions value after it leaves run:, through env:, with:, step outputs and into the called action, until it dies in argv, reaches a shell, spoofs GITHUB_OUTPUT, or becomes opaque with the reason named. An injection that moved is not an injection that was fixed.