domain: networking
2089 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ysrc/xunfeng Xunfeng is a self-hosted web application for rapid vulnerability emergency response and continuous scanning of enterprise internal networks… | 23 | 3597 | maintenance |
| tombcato/clash-ip-checker A Python automation tool for Clash proxy users that iterates through proxy nodes, checks each node's IP purity, bot ratio, and IP type via … | 44 | 1052 | active |
| emanuele-em/proxelar Proxelar is a scriptable local MITM proxy workbench written in Rust for inspecting, intercepting, replaying, and rewriting HTTP, HTTPS, and… | 96 | 1050 | active |
| k4yt3x/wg-meshconf wg-meshconf is a Python CLI tool that generates peer configuration files for WireGuard full mesh networks. It stores peer information in a … | 32 | 1050 | stable |
| pond3r/ggpo GGPO is a C++ SDK that implements rollback networking, using input prediction and speculative execution to give online multiplayer games th… | 32 | 3578 | maintenance |
| fusionpbx/fusionpbx FusionPBX is a full-featured, domain-based multi-tenant PBX and voice switch web application built on top of FreeSWITCH. It provides a PHP-… | 78 | 1048 | active |
| Ullaakut/nmap An idiomatic Go library that wraps the nmap network scanner by shelling out to the nmap binary and parsing its XML output. It lets Go devel… | 90 | 1047 | active |
| l7mp/stunner STUNner is a Kubernetes media gateway for WebRTC that lets you run WebRTC media servers in the cloud without fighting Kubernetes container … | 87 | 1047 | active |
| iluobei/miaomiaowu Miaomiaowu is a lightweight, self-hosted Clash subscription management system for managing proxy nodes, generating subscriptions, and aggre… | 77 | 1047 | active |
| romanz/amodem A Python library and CLI tool that transmits files between computers by modulating data into audio signals (OFDM) played through a speaker … | 55 | 1047 | active |
| aligungr/UERANSIM UERANSIM is an open source 5G UE (user equipment) and RAN (gNodeB) simulator implementing 3GPP R15 specifications. It simulates a 5G mobile… | 80 | 1046 | active |
| chris1111/Wireless-USB-Big-Sur-Adapter A macOS installer package providing drivers for Realtek 802.11n and 802.11ac USB Wi-Fi adapters, distributed as prebuilt binaries with no s… | 62 | 1045 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 56 | 1042 | active |
| Blockstream/satellite Blockstream Satellite is a Python-based software suite (GUI and CLI) for setting up a receiver node that downloads the Bitcoin blockchain v… | 64 | 1041 | active |
| python-hyper/h2 h2 is a pure-Python implementation of the HTTP/2 protocol stack that performs no I/O, making it embeddable in any program or framework. It … | 75 | 1040 | stable |
| yarrick/pingfs pingfs is a FUSE filesystem for Linux that stores file data in ICMP Echo (ping) packets bouncing between the local machine and remote hosts… | 32 | 3542 | maintenance |
| QNLab-USTC/SimQN SimQN is a discrete-event network-layer simulator for quantum networks, written in Python with optional Cython acceleration. It supports la… | 83 | 1039 | active |
| firewalld/firewalld firewalld is a dynamically managed firewall daemon for Linux that provides zone-based trust levels for network connections and interfaces, … | 97 | 1037 | stable |
| ytti/oxidized Oxidized is a network device configuration backup tool that periodically fetches running configs from network equipment and stores them, wi… | 94 | 3529 | maintenance |
| bszapp/android-wifi-pojie An Android WiFi toolbox app written in Kotlin that brute-forces WiFi passwords using password dictionaries, supporting multiple run modes (… | 73 | 1036 | active |
| TheRook/subbrute SubBrute is a Python DNS meta-query spider that enumerates subdomains and arbitrary DNS record types by leveraging open resolvers to bypass… | 23 | 3526 | maintenance |
| vanhoefm/krackattacks-scripts Scripts by Mathy Vanhoef to test whether Wi-Fi clients or access points are vulnerable to the KRACK attack against WPA2. They include a mod… | 23 | 3524 | maintenance |
| espressif/esp-hosted ESP-Hosted is an open-source solution that lets Espressif SoCs like the ESP32 act as wireless communication co-processors, adding Wi-Fi and… | 82 | 1033 | active |
| square/certigo Certigo is a Go command-line utility for examining, dumping, and validating TLS/SSL certificates in formats like X.509 (DER/PEM), PKCS7, PK… | 73 | 1031 | stable |
| UnnoTed/wireguird A GTK-based graphical GUI client for WireGuard on Linux, mimicking the official Windows WireGuard client. It lists tunnels from /etc/wiregu… | 59 | 1031 | active |
| UIforFreedom/UIF UIF is an open-source, cross-platform proxy panel UI with proxy management and subscription management features, built in Vue. It serves as… | 82 | 1028 | active |
| TeraTermProject/teraterm Tera Term is a free, open-source terminal emulator for Windows supporting serial port, Telnet, and SSH connections. It includes a macro scr… | 88 | 1027 | active |
| karasevm/PrivateDNSAndroid An Android app that adds a quick settings tile for switching the active private DNS (DNS-over-TLS) provider with a single tap. It supports … | 69 | 1027 | active |
| GNS3 GNS3 is a graphical network simulator that lets users design, build, and emulate complex network topologies using real router, switch, and … | 98 | 1022 | active |
| net-ssh/net-ssh Net::SSH is a pure-Ruby implementation of the SSH2 client protocol, packaged as a Ruby gem. It lets Ruby programs open SSH connections to r… | 75 | 1022 | active |
| maxmind/libmaxminddb A C library for reading MaxMind DB files, the binary format used by MaxMind's GeoIP databases. It provides fast IP address lookups with fle… | 90 | 1020 | stable |
| apify/proxy-chain A programmable HTTP/HTTPS proxy server library for Node.js, similar to Squid, with support for SSL/TLS, SOCKS4/5, authentication, upstream … | 90 | 1020 | active |
| jpr5/ngrep ngrep is a PCAP-based command-line tool that applies GNU grep-style regular or hexadecimal expression matching to network packet payloads. … | 74 | 1020 | active |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 71 | 1019 | active |
| SONiC SONiC (Software for Open Networking in the Cloud) is a free, open-source network operating system based on Linux that runs on switches from… | 77 | 1018 | active |
| jclehner/nmrpflash A cross-platform command-line utility that uses Netgear's NMRP protocol to flash firmware images to Netgear routers and other compatible de… | 82 | 1017 | active |
| DeedleFake/trayscale Trayscale is an unofficial GTK4/libadwaita GUI for the Tailscale daemon, built primarily for Linux desktops where no official graphical cli… | 100 | 1016 | active |
| redcode-labs/neurax Neurax is a Go framework for constructing self-spreading binaries (worms) that propagate across LAN/WAN networks without external servers. … | 32 | 1015 | active |
| linux-rdma/perftest A collection of C-based performance micro-benchmark tools for InfiniBand and RoCE networks, built on the ibverbs API. It measures bandwidth… | 85 | 1012 | active |
| nttgin/BGPalerter BGPalerter is a self-configuring, real-time BGP and RPKI monitoring tool that detects prefix visibility loss, hijacks, RPKI invalid announc… | 77 | 1011 | active |
| aflnet/aflnet AFLNet is a greybox fuzzer for network protocol server implementations, extending American Fuzzy Lop with state-feedback derived from serve… | 43 | 1011 | active |
| wreq wreq is an ergonomic, privacy-aware HTTP client written in Rust with a Python binding (wreq-python) that provides high-fidelity browser TLS… | 90 | 1006 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 70 | 1006 | active |
| KumoKyaku/kcp A C# port of the KCP reliable UDP protocol, offering a thread-safe, allocation-free implementation suitable for game networking. It support… | 32 | 1005 | active |
| libreswan/libreswan Libreswan is a free, GPLv2-licensed implementation of the Internet Key Exchange (IKE) protocol for setting up IPsec VPNs, supporting IKEv1 … | 99 | 1004 | active |
| kavehtehrani/cloudflare-speed-cli A Rust CLI tool that runs internet speed tests against Cloudflare's speed test service, showing download/upload throughput, latency, and ne… | 79 | 1004 | active |
| stilleshan/frpc A set of one-click install/uninstall shell scripts and a Docker image wrapping the official frp client (frpc) for NAT traversal / internal … | 74 | 1004 | active |
| flipt-io/reverst Reverst is a load-balanced reverse-tunnel server and Go client library built on QUIC and HTTP/3. It lets services behind restrictive networ… | 50 | 1004 | active |
| odedshimon/BruteShark BruteShark is an open-source Network Forensic Analysis Tool (NFAT) that deeply inspects network traffic from PCAP/PCAPng files or live capt… | 23 | 3395 | maintenance |
| mokeyish/smartdns-rs SmartDNS-rs is a cross-platform local DNS server written in Rust, inspired by the C SmartDNS project. It queries multiple upstream DNS serv… | 89 | 1001 | active |
| aleixrodriala/wa-tunnel A Node.js CLI tool that tunnels TCP internet traffic through WhatsApp messages using the Baileys library, sending packets as text or compre… | 32 | 3349 | maintenance |
| mmatczuk/go-http-tunnel A reverse tunnel tool based on HTTP/2 that exposes localhost services to the public internet via a server (tunneld) and client (tunnel) pai… | 63 | 3330 | maintenance |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3284 | maintenance |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3254 | maintenance |
| jwise/HoRNDIS HoRNDIS is a macOS kernel extension (kext) driver that enables Android USB tethering, letting a Mac use an Android phone's native tethering… | 23 | 3253 | maintenance |
| progrium/localtunnel Localtunnel is a tool that exposes localhost servers to the public Internet via tunnels. The current v3 is a minimal Go implementation buil… | 32 | 3227 | maintenance |
| alibaba/lightproxy LightProxy is a cross-platform desktop web debugging proxy built on Electron and whistle, offering out-of-the-box certificate installation … | 23 | 3217 | maintenance |
| sensepost/reGeorg reGeorg is a Python tool that creates a SOCKS proxy through a compromised bastion webserver by tunneling traffic over HTTP(S) via uploaded … | 37 | 3183 | maintenance |
| sustrik/libmill Libmill is a C library that brings Go-style concurrency to C, providing goroutine-like coroutines and channels. It lets C developers write … | 32 | 3175 | maintenance |
| facebookarchive/network-connection-class An Android library by Facebook that listens to the app's existing network traffic and classifies the user's connection quality into discret… | 10 | 3174 | maintenance |
| sdushantha/wifi-password A Python command-line tool that quickly retrieves the password of the WiFi network you are connected to (or a previously connected SSID). I… | 23 | 3152 | maintenance |
| saminiir/level-ip A userspace TCP/IP stack for Linux implemented in C using TUN/TAP devices, with an accompanying blog series explaining Ethernet, ARP, IPv4,… | 32 | 3132 | maintenance |
| tomnomnom/httprobe httprobe is a Go command-line tool that takes a list of domains on stdin and probes for working HTTP and HTTPS servers, reporting which res… | 23 | 3119 | maintenance |
| salesforce/ja3 JA3 is a standard and set of scripts (Python and Zeek) for generating SSL/TLS client fingerprints that are easy to produce and share for th… | 10 | 3103 | maintenance |
| dustturtle/RealReachability An iOS library that determines real internet reachability rather than just local network connection status, by combining SCNetworkReachabil… | 58 | 3102 | maintenance |
| alexforencich/verilog-ethernet A collection of Verilog Ethernet components for FPGA implementation, covering gigabit, 10G, and 25G packet processing with MAC, PCS/PMA PHY… | 36 | 3074 | maintenance |
| risinek/esp32-wifi-penetration-tool An extensible Wi-Fi penetration testing framework for the ESP32 microcontroller, implementing attacks such as PMKID capture, WPA/WPA2 hands… | 23 | 3050 | maintenance |
| snabbco/snabb Snabb is a simple and fast packet networking toolkit written in Lua on LuaJIT, using kernel-bypass Ethernet I/O. It compiles to a single bu… | 66 | 3032 | maintenance |
| arthepsy/ssh-audit ssh-audit is a dependency-free Python CLI tool that audits SSH servers by grabbing banners and enumerating key exchange, host key, encrypti… | 32 | 2995 | maintenance |
| KOP-XIAO/QuantumultX A JavaScript resource parser script for the Quantumult X iOS proxy client that converts proxy node subscriptions and configs from formats l… | 76 | 2985 | maintenance |
| rajkumardusad/IP-Tracer IP-Tracer is a command-line tool for Linux and Termux that retrieves geolocation and information about any IP address using the ip-api serv… | 23 | 2983 | maintenance |
| facebook/wdt Warp speed Data Transfer (WDT) is an embeddable C++ library and command line tool for transferring files between two systems as fast as pos… | 63 | 2956 | maintenance |
| google/nogotofail Nogotofail is an on-path (man-in-the-middle) blackbox network traffic security testing tool built in Python. It detects weak TLS/SSL connec… | 10 | 2951 | maintenance |
| seemoo-lab/nexmon Nexmon is a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables custom firmware modifications such as monitor … | 64 | 2876 | maintenance |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2856 | maintenance |
| seclab-ucr/INTANG INTANG is a Linux daemon that evades the Great Firewall of China's TCP reset attacks by desynchronizing the TCP Control Block on censorship… | 44 | 2835 | maintenance |
| esc0rtd3w/wifi-hacker A shell script that automates attacking wireless connections using the built-in tools of Kali Linux. It supports WEP, WPS, WPA, and WPA2 se… | 23 | 2799 | maintenance |
| spdy-http2/node-spdy A Node.js module for creating SPDY and HTTP/2 servers with a natural http-module-like interface, falling back to regular HTTPS for unsuppor… | 32 | 2792 | maintenance |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2790 | maintenance |
| Ettercap/ettercap Ettercap is a comprehensive open-source suite for man-in-the-middle attacks on local networks. It supports live connection sniffing, on-the… | 81 | 2784 | maintenance |
| yann-shi/dht A Go library implementing the BitTorrent DHT protocol (BEP-3, 5, 9, 10) with two modes: a standard DHT server and a crawling mode for harve… | 23 | 2769 | maintenance |
| soheilhy/cmux cmux is a Go library that multiplexes TCP connections based on their payload, allowing multiple protocols like gRPC, HTTP, HTTPS, and SSH t… | 62 | 2767 | maintenance |
| rtr7/router7 router7 is a small home internet router implemented entirely in Go, running as a gokrazy appliance on PC Engines apu2c4 hardware. It bundle… | 74 | 2764 | maintenance |
| xuhaoyang/ClashForAndroid A GUI application for Android that wraps the Clash rule-based tunnel proxy core. It lets users route device traffic through configurable pr… | 32 | 2744 | maintenance |
| mehrdadrad/mylg myLG is an open-source command-line network diagnostic tool written in Go that combines ping, traceroute, BGP looking glasses, DNS lookup, … | 23 | 2719 | maintenance |
| dlundquist/sniproxy A C-based TCP proxy that routes incoming HTTP and TLS connections to backend servers based on the hostname in the initial request (SNI or H… | 50 | 2717 | maintenance |
| k4m4/kickthemout KickThemOut is a Python command-line tool that kicks devices off a local network by performing an ARP spoofing attack against selected targ… | 23 | 2674 | maintenance |
| xuuhaoo/OkSocket OkSocket is a Java library providing a blocking TCP socket client (and optional server plugin) for Android and Java applications. It wraps … | 23 | 2590 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2584 | maintenance |
| cleanbrowsing/dnsperftest A shell script that benchmarks the latency of popular public DNS resolvers (Cloudflare, Google, Quad9, OpenDNS, etc.) from your machine. It… | 32 | 2515 | maintenance |
| infosec-au/altdns Altdns is a Python CLI tool for DNS reconnaissance that generates permutations, alterations, and mutations of known subdomains using a word… | 32 | 2503 | maintenance |
| KimiNewt/pyshark A Python wrapper around tshark that lets you parse packets from capture files or live captures using all installed Wireshark dissectors. It… | 56 | 2496 | maintenance |
| cokemine/ServerStatus-Hotaru ServerStatus-Hotaru is a lightweight self-hosted server monitoring tool (cloud probe) that displays status of multiple servers via a web da… | 57 | 2464 | maintenance |
| github/glb-director GitHub's GLB Director is a set of components implementing a scalable, stateless Layer 4 load balancer for bare metal datacenter environment… | 67 | 2453 | maintenance |
| aploium/zmirror zmirror is a Python-based HTTP reverse proxy designed to automatically and completely mirror entire websites, such as Google, Wikipedia, Yo… | 10 | 2394 | maintenance |
| knownsec/ksubdomain ksubdomain is a stateless subdomain enumeration tool written in Go that performs extremely fast DNS brute-forcing by separating packet send… | 23 | 2393 | maintenance |
| monlor/MIXBOX-ARCHIVE MIXBOX is a shell-script-based toolbox for Xiaomi routers that provides quick configuration and management of plugins like Shadowsocks, frp… | 10 | 2388 | maintenance |
| besimorhino/powercat powercat is a PowerShell reimplementation of netcat supporting TCP, UDP, and DNS (dnscat2) connections, file transfer, and shell serving. I… | 32 | 2387 | maintenance |
| flyzy2005/ss-fly A set of one-click shell scripts to install and configure Shadowsocks (SS/SSR) proxy servers on Ubuntu, CentOS, and Debian, with optional B… | 32 | 2341 | maintenance |
| ggerganov/wave-share A proof-of-concept browser application that shares files between nearby devices by performing WebRTC signaling through audio tones instead … | 32 | 2311 | maintenance |