// the take
A grab-bag of JavaScript snippets and config modules for iOS proxy/MITM apps (Surge, Quantumult X, Loon, Stash) that do things like auto-claim daily bonuses in Chinese apps, strip ads, merge TestFlight accounts, and unlock paid features in apps like VSCO, CamScanner, and Polarr. It's for iOS users already running one of those proxy tools, not general developers.
Scripts are split per proxy app (Surge/QX/Loon/Stash) so you grab the right format instead of guessing; it solves real recurring annoyances like ad injection and TestFlight region locks; the project has stuck around long enough to accumulate credited contributors and an actual community feeding bug reports back in.
The compatibility table marks several scripts outright broken, and the 'last verified working' dates on most of the rest sit at 2023/08/17 despite the repo itself showing pushes into 2026 — there's no way to know what still works without trying each one yourself. The whole thing only has value if you already run a MITM-capable proxy app with a trusted root cert installed, which is itself a real attack surface if any script or its remote config is ever compromised. A large chunk of the scripts exist specifically to bypass in-app purchases and subscriptions (VSCO, Polarr, MIX, CamScanner), which puts you at risk of account bans the moment the vendor patches it, and sits in a legal gray zone the README's own disclaimer spends a full section hedging against. There's no test suite or review process — correctness is entirely self-reported via a markdown table.
We read the README, the directory tree and a key source file in October 2026. Nobody pays to be listed. How we judge →