I hunt bugs in open-source VPN and proxy software — panels, clients and network cores. Every report comes with a reproduction and a test that fails before the fix.
Accepted upstream fixes
| Project | Fix |
|---|---|
| SagerNet/sing-tun | #106 Fix IP headers of synthesized UDP replies (stale ECN marks, RFC 3168) · #107 Do not route replies of peer-initiated UDP flows into the TUN |
| SagerNet/sing | #119 Fix a race between Read and Close in cached connections · #118 Cancel the winning attempt's context in parallel dial |
| 2dust/v2rayN | #10548 Keep the WebSocket path query when removing ed (sing-box) |
| MHSanaei/3x-ui | #7042 A partial client update no longer wipes fields it does not mention |
| alireza0/s-ui | #1343 Accept TLS handshakes without SNI when the panel domain is an IP |
| throneproj/Throne | #2098 Apply a group's front and landing proxy to routing rule outbounds |
| GUI-for-Cores/GUI.for.SingBox | #40 Keep rules and rule-sets saved without action or type · #41 System proxy with an IPv6 listen address |
| MetaCubeX/mihomo | #3415 Convert HTTPUpgrade share links correctly |
| MetaCubeX/metacubexd | #2246 Keep config edits on remote profiles across refresh · #2247 Offer only TUN stacks mihomo accepts |
| hiddify/hiddify-app | #2465 Accept a base64 profile title without padding |
| hiddify/hiddifypanel | #176 Turning off HTTP no longer drops Shadowsocks 2022 and Mieru · #178 Renew no longer exceeds max active users |
Own projects
- still-ui — a maintained fork of the 3x-ui panel: releases built and attested by GitHub Actions.
- xui-doctor — a read-only health checker for 3x-ui and still-ui panels.
How I work: reproduce first, prove it with a test that fails before the fix, keep the change small, say plainly what was not tested.