Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Whois A pure Ruby WHOIS client library that performs WHOIS lookups for domains, TLDs, IPv4, and IPv6 addresses, with intelligent server guessing … | 75 | 1172 | stable |
| dropbox/goebpf A Go library for loading, attaching, and interacting with eBPF programs, maps, and perf events on Linux. It supports XDP, socket filters, k… | 69 | 1172 | active |
| eko/pihole-exporter A Prometheus exporter written in Go that collects metrics from a Pi-hole ad-blocking instance and exposes them for scraping. It ships with … | 62 | 1172 | active |
| NH-RED-TEAM/RustHound RustHound is a cross-platform Active Directory data collector for BloodHound Legacy 4.x, written in Rust. It enumerates users, groups, comp… | 23 | 1172 | active |
| srsran/srsRAN_4G srsRAN 4G is an open-source software radio suite implementing a full 4G LTE protocol stack in C++, including srsUE (UE), srsENB (eNodeB), a… | 72 | 4078 | maintenance |
| bszapp/android-wifi-pojie An Android WiFi toolbox app written in Kotlin that brute-forces WiFi passwords using password dictionaries, supporting multiple run modes (… | 71 | 1171 | active |
| pycurl/pycurl PycURL is a thin Python binding over the libcurl multiprotocol file transfer library, exposing HTTP/HTTPS, FTP, SSL, proxies, authenticatio… | 92 | 1170 | stable |
| ameshkov/dnslookup dnslookup is a simple command line utility for making DNS lookups against a specified server. It supports all major DNS protocols including… | 74 | 1170 | active |
| 64characters/Telephone Telephone is a free open-source SIP softphone for macOS that lets users make and receive phone calls over the Internet or a company network… | 65 | 1170 | active |
| spyboy-productions/CamXploit CamXploit is a Python-based security reconnaissance tool that checks whether an IP address hosts a potentially exposed IP camera or CCTV se… | 44 | 1170 | active |
| R44VC0RP/pgrok pgrok is a self-hosted ngrok alternative that exposes local ports to the internet via SSH reverse tunnels with automatic HTTPS through Cadd… | 42 | 1167 | active |
| proxy-agents A monorepo of Node.js HTTP Agent implementations that route HTTP/HTTPS requests through proxies using various protocols (HTTP, HTTPS, SOCKS… | 90 | 1165 | active |
| cloudflare/wirefilter A Rust library implementing an execution engine for Wireshark-like filter expressions, including parsing, compilation, and fast evaluation.… | 76 | 1165 | active |
| qoomon/docker-host A Docker sidecar container image that forwards TCP and UDP traffic to the Docker host or any other configured destination. It works with Do… | 93 | 1163 | active |
| TheThingsNetwork/lorawan-stack The Things Stack is an open source LoRaWAN network server written in Go, providing network, application, and join server components plus an… | 91 | 1163 | active |
| zu1k/proxypool A Go service that automatically crawls proxy nodes (ss, ssr, vmess, trojan) from Telegram channels, subscription URLs, and the public inter… | 23 | 4034 | maintenance |
| Psiphon Tunnel Core Psiphon Tunnel Core is the core tunneling client and server implementation of the Psiphon Internet censorship circumvention system, written… | 92 | 1159 | active |
| mmalmi/nostr-vpn nostr-vpn is a Tailscale-style private mesh VPN written in Rust, built around a FIPS-backed data plane with a `nvpn` CLI/daemon, a shared n… | 75 | 1158 | active |
| URenko/Accesser Accesser is a Python-based local HTTP proxy tool that circumvents SNI-based connection resets (SNI RST) used by the Great Firewall, restori… | 55 | 1158 | active |
| Edgio/vflow vFlow is a high-performance, scalable network flow collector written in pure Go that ingests IPFIX (RFC7011), sFlow v5, and Netflow v5/v9 t… | 23 | 1157 | active |
| fanpei91/torsniff torsniff is a Go CLI tool that sniffs torrent metadata from the BitTorrent network by participating in the DHT and connecting to peers to d… | 10 | 4009 | maintenance |
| Matchbox Matchbox is a Rust library and toolset for painless peer-to-peer WebRTC networking targeting both wasm/browser and native applications. It … | 68 | 1152 | active |
| Kindness-Kismet/stelliberty Stelliberty is a cross-platform desktop proxy client for Windows, Linux, and macOS built with C#/.NET and Avalonia UI with a Rust core. It … | 80 | 1149 | active |
| iagox86/dnscat2 dnscat2 is an encrypted DNS tunneling tool designed to create a command-and-control (C&C) channel over the DNS protocol. It consists of a C… | 23 | 3978 | maintenance |
| pendulum-project/ntpd-rs ntpd-rs is a memory-safe Rust implementation of the Network Time Protocol (NTP) with support for the authenticated NTS extension, providing… | 87 | 1147 | stable |
| cenkalti/rain Rain is a high-performance BitTorrent client and embeddable Go library, running in production at put.io. It supports core BitTorrent BEPs i… | 94 | 1146 | active |
| ngtcp2/nghttp3 nghttp3 is a C implementation of HTTP/3 (RFC 9114) over QUIC and QPACK (RFC 9204). It is QUIC-transport-agnostic and supports extensions li… | 89 | 1146 | active |
| savoirfairelinux/opendht OpenDHT is a lightweight C++17 distributed hash table (DHT) library providing an easy-to-use distributed in-memory data store with redundan… | 96 | 1145 | active |
| zmap/zdns ZDNS is a high-speed DNS resolver library and CLI tool written in Go for performing large-scale DNS measurements and lookups. It includes i… | 92 | 1145 | active |
| samba-team/samba Samba is the standard open-source Windows interoperability suite for Linux and Unix, implementing the SMB/CIFS protocol for file and print … | 75 | 1145 | stable |
| projectdiscovery/tlsx TLSX is a fast and configurable TLS grabber written in Go that collects and analyzes TLS-based data from hosts. It supports multiple TLS co… | 90 | 1143 | active |
| outray-tunnel/outray OutRay is an open-source ngrok alternative that exposes local servers to the internet via HTTP, TCP, and UDP tunnels with custom domains an… | 69 | 1143 | active |
| GamehunterKaan/AutoPWN-Suite AutoPWN Suite is a Python-based automated vulnerability scanning and exploitation framework that wraps nmap for host discovery, version-bas… | 100 | 1142 | active |
| sindresorhus/speed-test A Node.js CLI tool that tests internet connection speed and ping using speedtest.net. It outputs download/upload speed and ping, with JSON … | 23 | 3952 | maintenance |
| leev/ngx_http_geoip2_module An Nginx module that creates variables from MaxMind GeoIP2 databases based on client IP addresses, supporting both IPv4 and IPv6. It works … | 23 | 1141 | stable |
| diyan/pywinrm pywinrm is a Python client library for the Windows Remote Management (WinRM) service, enabling remote command and PowerShell script executi… | 62 | 1140 | stable |
| P3TERX/warp.sh A Bash script that automates installation and configuration of Cloudflare WARP on Linux servers, supporting both the official WARP client (… | 10 | 3935 | maintenance |
| wukongdaily/RunFilesBuilder A GitHub Actions workflow that syncs the latest compiled .ipk packages from various OpenWrt plugin projects and packages them into self-ext… | 52 | 1136 | active |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 46 | 3929 | maintenance |
| denoland/fastwebsockets fastwebsockets is a fast, minimal RFC6455 WebSocket implementation in Rust, usable as a raw frame parser or as a full client/server with op… | 70 | 1135 | active |
| nsupdate-info/nsupdate.info nsupdate.info is a free dynamic DNS service and the self-hostable Django/Python software that powers it. It accepts dynamic DNS updates via… | 75 | 1134 | active |
| the-useless-one/pywerview PywerView is a partial Python rewrite of PowerSploit's PowerView for Active Directory enumeration, built on impacket. It lets pentesters ru… | 70 | 1134 | active |
| davidfowl/BedrockFramework Bedrock Framework is a high-performance, low-level networking library for .NET that provides transport-agnostic APIs for building custom se… | 48 | 1134 | active |
| seadog007/smc.peering.tw An interactive web dashboard that maps Taiwan's submarine cables, showing cable routes, landing points, and real-time incident status. Buil… | 67 | 1132 | active |
| storm storm is a Python command line tool for managing SSH connections by adding, editing, deleting, listing, and searching entries in your SSH c… | 10 | 3912 | maintenance |
| genotrance/px Px is an HTTP/HTTPS proxy server that automatically handles NTLM and Kerberos proxy authentication, typically in corporate environments, us… | 84 | 1131 | active |
| qmonnet/rbpf rbpf is a Rust crate providing a user-space virtual machine for executing eBPF programs. It includes an interpreter, an x86_64 JIT compiler… | 67 | 1131 | active |
| projectdiscovery/asnmap asnmap is a Go CLI tool and library that maps organizations to their network ranges (CIDR blocks) using ASN information. It supports lookup… | 65 | 1131 | active |
| caozhiyi/CppNet CppNet is a cross-platform, multithreaded C++11 network library implementing the proactor pattern for asynchronous TCP I/O. It uses epoll, … | 32 | 1131 | active |
| SabyasachiRana/WebMap WebMap is a self-hosted web dashboard for visualizing and reporting on Nmap scan results stored as XML files. It provides charts, host insp… | 73 | 1130 | active |
| dperson/openvpn-client A Docker container that runs an OpenVPN client so other containers can route their traffic through a VPN connection. It is configured via e… | 32 | 1130 | active |
| Adversis/tailsnitch Tailsnitch is a Go-based CLI security auditor for Tailscale configurations that scans a tailnet for 50+ misconfigurations, overly permissiv… | 78 | 1129 | active |
| bolkedebruin/rdpgw An open-source implementation of the Microsoft Remote Desktop Gateway protocol (MS-TSGU) written in Go, allowing official Microsoft RDP cli… | 76 | 1127 | active |
| zmjack/PortProxyGUI PortProxyGUI is a Windows GUI application for managing netsh interface portproxy rules, which handle TCP/IP port redirection. It provides a… | 23 | 1125 | active |
| AlchemillaHQ/Sylve Sylve is an open-source web-based management platform for FreeBSD that unifies Bhyve virtual machines, FreeBSD Jails, ZFS storage, networki… | 86 | 1124 | active |
| fiddyschmitt/File-Tunnel File Tunnel is a C# CLI tool that tunnels TCP connections through files on a shared file server, letting two hosts exchange traffic via rea… | 97 | 1123 | active |
| Miaomiaowu Suite Miaomiaowu is a lightweight, self-hosted Clash subscription management system for managing proxy nodes, generating subscriptions, and aggre… | 81 | 1122 | active |
| DHDAXCW/OpenWRT_x86_x64 A community-built OpenWrt firmware for x86_64 hardware, compiled daily from immortalwrt sources via GitHub Actions. It bundles common route… | 67 | 1122 | active |
| ChirpStack ChirpStack is an open-source LoRaWAN Network Server written in Rust for setting up private or public LoRaWAN networks. It provides a multi-… | 93 | 1118 | stable |
| burghardt/easy-wg-quick A shell script that generates WireGuard VPN configurations for a hub (VPN concentrator) and its peers, including QR codes for mobile client… | 87 | 1118 | active |
| D00Movenok/BounceBack BounceBack is a stealth reverse proxy with WAF-like filtering designed to hide red team C2 and phishing infrastructure from blue teams, san… | 68 | 1117 | active |
| sandialabs/wiretap Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges o… | 75 | 1116 | active |
| GoodiesHQ/headscale-admin A stateless web admin interface for juanfont/headscale, the self-hosted Tailscale control server. Built with SvelteKit and TailwindCSS, it … | 91 | 1115 | active |
| Stair Speedtest A C++ batch speed testing tool for proxy nodes supporting Shadowsocks, ShadowsocksR, V2Ray, and Trojan. It tests subscription links, logs r… | 23 | 3839 | maintenance |
| EnableSecurity/sipvicious SIPVicious OSS is a Python-based toolset for auditing SIP-based VoIP systems, including tools to scan for SIP servers (svmap), enumerate ex… | 83 | 1109 | active |
| juicity/juicity Juicity is a QUIC-based proxy protocol implementation written in Go, inspired by tuic. It ships both a server and a CLI client, with suppor… | 29 | 1109 | active |
| Windscribe VPN The open-source (GPL-2.0) desktop VPN client for the Windscribe service, built in C++ for Windows, macOS, and Linux. It supports multiple V… | 92 | 1108 | active |
| samhocevar/rinetd rinetd is a lightweight C utility that efficiently redirects TCP and UDP connections from one IP address/port combination to another. It is… | 23 | 1108 | stable |
| Yfamily Script Modules Collection A curated collection of configuration files, modules, and scripts for the iOS proxy clients Shadowrocket, QuantumultX, and Surge. It provid… | 77 | 1107 | active |
| coredhcp/coredhcp CoreDHCP is a fast, multithreaded DHCP server written in Go that supports both DHCPv4 and DHCPv6. Almost all functionality is implemented a… | 63 | 1106 | active |
| mcginty/snow Snow is a pure-Rust implementation of the Noise Protocol Framework for building encrypted, authenticated channel handshakes. It supports No… | 60 | 1105 | stable |
| kingston-csj/jforgame jforgame is a lightweight, high-performance Java framework for building game servers, providing modular components for socket/WebSocket com… | 95 | 1101 | active |
| vinc/moros MOROS is a text-based hobby operating system written in Rust for x86-64 BIOS computers, inspired by Unix, Plan 9, and DOS. It includes a cu… | 81 | 1101 | active |
| zpl-c/enet A fork of the ENet reliable UDP networking library written in pure C, distributed as a single header. It adds IPv6 support, monotonic time,… | 84 | 1100 | active |
| kort0881/telegram-proxy-collector A Python CLI tool that automatically collects, analyzes, and filters MTProto and SOCKS5 proxies for Telegram. It decodes proxy secrets to d… | 79 | 1099 | active |
| theturtle32/WebSocket-Node A mostly pure JavaScript WebSocket client and server implementation for Node.js supporting protocol versions 8 and 13 (Draft-08 through RFC… | 49 | 3781 | maintenance |
| serjs/socks5-server A lightweight SOCKS5 proxy server written in Go, packaged as a Docker container, built on go-socks5. It supports username/password authenti… | 48 | 1098 | stable |
| Qihoo360/evpp evpp is a modern C++11 network library built on libevent for developing high-performance, nonblocking, multi-threaded TCP, UDP, and HTTP se… | 23 | 3775 | maintenance |
| k8spacket/k8spacket k8spacket is a Kubernetes tool that collects TCP traffic and TLS connection metadata using eBPF (tracepoints and traffic-control filters) a… | 87 | 1097 | active |
| netbox-community/netbox-topology-views A NetBox plugin that generates visual network topology maps from devices and the cables defined in NetBox. It supports filtering by name, s… | 92 | 1096 | active |
| ReturnFI/Blitz Blitz Panel is a self-hosted management panel for the Hysteria2 proxy server, offering user management, traffic monitoring, WARP integratio… | 10 | 1096 | active |
| apache/mina-sshd Apache MINA SSHD is a pure-Java library implementing the SSH protocol on both client and server sides, with pluggable I/O back-ends (built-… | 89 | 1095 | stable |
| MKTXP MKTXP is a Prometheus exporter and CLI tool for Mikrotik RouterOS devices that exposes router metrics for monitoring, with a companion Graf… | 91 | 1093 | active |
| lesismal/arpc ARPC is a high-performance RPC framework for Go supporting two-way calling, notify, broadcast, and pub/sub over TCP with customizable codec… | 85 | 1093 | active |
| kasketis/netfox Netfox is a lightweight Swift library for iOS and macOS that logs and displays all HTTP network requests made by an app, including those fr… | 23 | 3754 | maintenance |
| tsduck/tsduck TSDuck is an extensible C++ framework and toolkit of command-line tools for manipulating, analyzing, monitoring, and transforming MPEG tran… | 90 | 1091 | stable |
| ab77/netflix-proxy A smart DNS proxy deployed via Docker that uses dnsmasq and sniproxy to let users stream Netflix, Hulu, HBO Now and other region-locked ser… | 23 | 3741 | maintenance |
| djylb/nps NPS Enhanced is a lightweight, actively maintained NAT traversal and reverse proxy system with a Web management UI, based on the original e… | 86 | 1088 | active |
| immortalwrt/homeproxy HomeProxy is the modern proxy platform for ImmortalWrt (an OpenWrt fork), built on top of sing-box. It provides a LuCI web interface for ma… | 77 | 1088 | active |
| rehiy/dnspod-shell A pure Shell dynamic DNS (DDNS) client built on the DNSPod user API, updating DNS A/AAAA records when your public IPv4/IPv6 address changes… | 47 | 1088 | active |
| fastos/fastsocket Fastsocket is a scalable Linux kernel TCP socket implementation that delivers linear performance scaling on multicore machines, transparent… | 23 | 3735 | maintenance |
| semihalev/sdns SDNS is a high-performance recursive DNS resolver server written in Go, with DNSSEC validation and a privacy-first design supporting DNS-ov… | 99 | 1086 | active |
| mdlayher/netlink A Go library providing low-level access to Linux netlink sockets (AF_NETLINK). It offers an idiomatic, well-tested API for building netlink… | 92 | 1084 | stable |
| muraenateam/muraena Muraena is an almost-transparent reverse proxy written in Go that automates phishing and post-phishing activities by dynamically proxying a… | 62 | 1083 | active |
| Yuheng0101/X A collection of JavaScript scripts for proxy clients such as Quantumult X, Surge, Loon, and Shadowrocket, plus Node.js utilities. The scrip… | 65 | 1082 | active |
| EternalPain/ZJL ZJL is a shell script for Android that integrates the tiny and clnc engines to enable 'mianliu' (carrier free-data traffic) with anti-leak … | 23 | 1082 | active |
| minekube/gate Gate is a high-performance, extensible Minecraft proxy server written in Go that supports Java Edition (1.8 to latest) and Bedrock Edition … | 96 | 1080 | active |
| wreq wreq is an ergonomic, privacy-aware HTTP client written in Rust with a Python binding (wreq-python) that provides high-fidelity browser TLS… | 88 | 1077 | active |
| emanuele-em/proxelar Proxelar is a scriptable local MITM proxy workbench written in Rust for inspecting, intercepting, replaying, and rewriting HTTP, HTTPS, and… | 97 | 1076 | active |
| belaban/JGroups JGroups is a Java toolkit for reliable group communication and messaging between cluster nodes. It provides configurable protocol stacks co… | 76 | 1076 | stable |