The hardest part about such a toolkit is how do you know it is undetectable. Its quite easy to see when you have managed to bypass filters but what if the government has still detected the bypass and has put you on a list for illegal activity. Or what if they work out how to detect it in the future and go back through the logs to find all the people who used it.

I think this is a problem that needs a political solution, not a technical one. The protesting in HK is probably the best way to go about this.