Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| soheilhy/cmux cmux is a Go library that multiplexes TCP connections based on their payload, allowing multiple protocols like gRPC, HTTP, HTTPS, and SSH t… | 58 | 2768 | maintenance |
| dlundquist/sniproxy A C-based TCP proxy that routes incoming HTTP and TLS connections to backend servers based on the hostname in the initial request (SNI or H… | 47 | 2719 | maintenance |
| mehrdadrad/mylg myLG is an open-source command-line network diagnostic tool written in Go that combines ping, traceroute, BGP looking glasses, DNS lookup, … | 23 | 2719 | maintenance |
| k4m4/kickthemout KickThemOut is a Python command-line tool that kicks devices off a local network by performing an ARP spoofing attack against selected targ… | 23 | 2679 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2587 | maintenance |
| xuuhaoo/OkSocket OkSocket is a Java library providing a blocking TCP socket client (and optional server plugin) for Android and Java applications. It wraps … | 23 | 2586 | maintenance |
| Wifite Wifite is a Python command-line tool that automates wireless network security auditing by running existing tools like the Aircrack-ng suite… | 82 | 2517 | maintenance |
| cleanbrowsing/dnsperftest A shell script that benchmarks the latency of popular public DNS resolvers (Cloudflare, Google, Quad9, OpenDNS, etc.) from your machine. It… | 32 | 2517 | maintenance |
| infosec-au/altdns Altdns is a Python CLI tool for DNS reconnaissance that generates permutations, alterations, and mutations of known subdomains using a word… | 32 | 2511 | maintenance |
| KimiNewt/pyshark A Python wrapper around tshark that lets you parse packets from capture files or live captures using all installed Wireshark dissectors. It… | 52 | 2500 | maintenance |
| ServerStatus-Hotaru ServerStatus-Hotaru is a lightweight self-hosted server monitoring tool (cloud probe) that displays status of multiple servers via a web da… | 54 | 2463 | maintenance |
| github/glb-director GitHub's GLB Director is a set of components implementing a scalable, stateless Layer 4 load balancer for bare metal datacenter environment… | 67 | 2457 | maintenance |
| knownsec/ksubdomain ksubdomain is a stateless subdomain enumeration tool written in Go that performs extremely fast DNS brute-forcing by separating packet send… | 23 | 2402 | maintenance |
| zmirror zmirror is a Python-based HTTP reverse proxy designed to automatically and completely mirror entire websites, such as Google, Wikipedia, Yo… | 10 | 2396 | maintenance |
| besimorhino/powercat powercat is a PowerShell reimplementation of netcat supporting TCP, UDP, and DNS (dnscat2) connections, file transfer, and shell serving. I… | 32 | 2395 | maintenance |
| monlor/MIXBOX-ARCHIVE MIXBOX is a shell-script-based toolbox for Xiaomi routers that provides quick configuration and management of plugins like Shadowsocks, frp… | 10 | 2382 | maintenance |
| flyzy2005/ss-fly A set of one-click shell scripts to install and configure Shadowsocks (SS/SSR) proxy servers on Ubuntu, CentOS, and Debian, with optional B… | 32 | 2341 | maintenance |
| ggerganov/wave-share A proof-of-concept browser application that shares files between nearby devices by performing WebRTC signaling through audio tones instead … | 32 | 2313 | maintenance |
| WireGuard WireGuard is a fast, modern, and secure VPN tunnel that uses state-of-the-art cryptography (Noise framework, Curve25519, ChaCha20) to creat… | 65 | 722 | stable |
| xtr4nge/FruityWifi FruityWiFi is an open-source wireless network auditing tool with a web-based control panel for deploying advanced WiFi attacks. It is modul… | 23 | 2280 | maintenance |
| shmilylty/netspy netspy is a fast, cross-platform Go CLI tool for discovering reachable intranet network segments from a compromised host. It supports ICMP,… | 23 | 2237 | maintenance |
| wulabing/V2Ray_ws-tls_bash_onekey A one-click bash installation script that deploys a V2Ray proxy server with VMess/VLESS over WebSocket + TLS, fronted by Nginx with automat… | 32 | 2208 | maintenance |
| LionSec/xerosploit Xerosploit is a Ruby-based penetration testing toolkit that wraps bettercap and nmap to perform man-in-the-middle attacks, port scanning, a… | 23 | 2204 | maintenance |
| codingo/Reconnoitre Reconnoitre is a Python CLI tool for multithreaded information gathering and service enumeration of target hosts and ranges, built original… | 23 | 2196 | maintenance |
| ixy network driver Ixy is an educational user-space network driver for Intel ixgbe 10 Gbit/s NICs, implemented in many programming languages (C, Rust, C++, Go… | 32 | 2185 | maintenance |
| fossabot/clash Clash is a rule-based network proxy written in Go that supports HTTP/HTTPS and SOCKS proxies with Surge-like configuration and GeoIP rule r… | 32 | 2178 | maintenance |
| Dliv3/Venom Venom is a multi-hop proxy tool written in Go for penetration testers, connecting multiple nodes to build chained proxies through internal … | 23 | 2163 | maintenance |
| Kkevsterrr/geneva Geneva is a research tool from the University of Maryland that uses a genetic algorithm to automatically evolve packet-manipulation strateg… | 76 | 2144 | maintenance |
| mtcp-stack/mtcp mTCP is a highly scalable user-level TCP stack for multicore systems, implemented in C with kernel-bypass packet I/O via DPDK, netmap, or P… | 23 | 2138 | maintenance |
| snooda/net-speeder net-speeder is a C-based Linux tool that speeds up single-threaded downloads on high-latency, unstable network links by duplicating outgoin… | 32 | 2137 | maintenance |
| armon/go-socks5 A Go library that implements a SOCKS5 proxy server, supporting No-Auth and User/Password authentication and the CONNECT command. It offers … | 32 | 2121 | maintenance |
| quericy/one-key-ikev2-vpn A one-click bash script that installs and configures an IKEv2/L2TP VPN server using strongSwan on Ubuntu, CentOS, or Debian. It handles cer… | 32 | 2104 | maintenance |
| traefik/mesh Traefik Mesh is a simple, full-featured service mesh for Kubernetes that implements the Service Mesh Interface (SMI) specification. It uses… | 52 | 2102 | maintenance |
| sheepla/pingu pingu is a ping command implementation written in Go that adds colorful output and Pingu penguin ASCII art to ICMP echo results. It support… | 23 | 2077 | maintenance |
| moxie0/sslstrip sslstrip is a Python command-line tool that implements Moxie Marlinspike's SSL stripping man-in-the-middle attack, downgrading HTTPS links … | 32 | 2075 | maintenance |
| NagiosEnterprises/nagioscore Nagios Core is a host, service, and network monitoring program written in C, with CGI-based web interface for viewing status and history. I… | 87 | 2044 | maintenance |
| alibaba/LVS Alibaba's distribution of Linux Virtual Server (LVS) adding advanced features to the kernel IPVS load balancer. It introduces the FULLNAT p… | 32 | 2043 | maintenance |
| veggiedefender/torrent-client A tiny BitTorrent client written in Go that implements the original 2001 BitTorrent protocol spec. It was built as an educational weekend p… | 32 | 2041 | maintenance |
| google/martian Martian is a programmable HTTP/S proxy library written in Go, designed primarily for testing. It lets developers intercept, inspect, and mo… | 10 | 2040 | maintenance |
| Cenmrev/V2RayW V2RayW is a Windows GUI client for v2ray-core that generates config files and manages proxy servers from the system tray. It also handles W… | 10 | 2024 | maintenance |
| Lora-net/LoRaMac-node A reference implementation of a LoRaWAN end-device (node) stack written in C, with example projects for various MCU platforms. It implement… | 23 | 1997 | maintenance |
| mozilla/cipherscan Cipherscan is a command-line tool that tests which SSL/TLS ciphersuites a target server supports and in what order, wrapping the openssl s_… | 40 | 1995 | maintenance |
| yyyar/gobetween gobetween is a modern, minimalistic L4 load balancer and reverse proxy written in Go, distributed as a single binary. It supports TCP, TLS … | 36 | 1988 | maintenance |
| samyk/slipstream NAT Slipstreaming is a security research tool by Samy Kamkar that demonstrates remotely opening arbitrary firewall pinholes through a victi… | 32 | 1984 | maintenance |
| mafintosh/torrent-stream torrent-stream is a low-level Node.js streaming torrent client that exposes files inside a torrent as readable streams, downloading pieces … | 32 | 1974 | maintenance |
| cytopia/pwncat pwncat is a Python-based netcat replacement and reverse/bind shell handler with firewall and IDS/IPS evasion, self-injecting shells, and po… | 23 | 1962 | maintenance |
| KANIKIG/Multi-EasyGost A beginner-friendly interactive shell script that wraps the gost tunnel program to manage encrypted port forwarding and relay tunnels on Li… | 32 | 1948 | maintenance |
| Und3rf10w/kali-anonsurf A port of ParrotSec's anonsurf and pandora modules to Kali Linux, packaged as a deb installer. It routes all system traffic through TOR via… | 84 | 1934 | maintenance |
| OpenDrop OpenDrop is an open-source command-line tool written in Python that implements the Apple AirDrop protocol for sharing files directly over W… | 63 | 9752 | experimental |
| dirkjanm/mitm6 mitm6 is a Python pentesting tool that exploits Windows' default IPv6 configuration by answering DHCPv6 requests, assigning victims a link-… | 23 | 1926 | maintenance |
| 40t/go-sniffer A Go-based command-line packet sniffer that captures network traffic and parses database and application protocols (MySQL, Redis, HTTP, Mon… | 32 | 1900 | maintenance |
| smartping/smartping SmartPing is an open-source, cross-platform network quality monitoring tool written in Go that measures forward and reverse PING latency be… | 23 | 1897 | maintenance |
| inbug-team/InScan InScan is a Go-based automated intranet penetration testing tool designed for use after breaching a network boundary. It provides port scan… | 32 | 1879 | maintenance |
| droe/sslsplit SSLsplit is a transparent SSL/TLS interception proxy for man-in-the-middle attacks against encrypted network connections. It terminates TLS… | 51 | 1877 | maintenance |
| trimstray/sandmap sandmap is a shell-based CLI wrapper around the Nmap engine that simplifies network and system reconnaissance. It offers 31 modules with 45… | 32 | 1866 | maintenance |
| net-creds A Python command-line tool that sniffs passwords, hashes, and other sensitive data from a live network interface or a pcap file. It reassem… | 32 | 1865 | maintenance |
| SpoofMAC SpoofMAC is a Python command-line tool that changes (spoofs) your computer's MAC address in one command, handling the Wi-Fi disassociation … | 32 | 1865 | maintenance |
| eldraco/domain_analyzer Domain Analyzer is a Python-based security analysis tool that automatically discovers and reports information about a given domain, includi… | 32 | 1863 | maintenance |
| ztncui ztncui is a web-based user interface for managing a standalone ZeroTier network controller. It is a Node.js/Express application that talks … | 32 | 1851 | maintenance |
| cyweb/hammer A Python 3 command-line script for performing DDoS (denial-of-service) flood attacks against target servers. It is a simple offensive secur… | 44 | 1847 | maintenance |
| libquic libquic is a standalone C++ library packaging Chromium's QUIC implementation with minimal dependencies (only embedded BoringSSL), built via… | 23 | 1833 | maintenance |
| perlin-network/noise noise is an opinionated, easy-to-use peer-to-peer networking stack for decentralized applications and cryptographic protocols, written in G… | 23 | 1831 | maintenance |
| Ha3MrX/DDos-Attack A simple Python script for launching DDoS (denial of service) attacks against online targets. It is a command-line tool intended for learni… | 62 | 1815 | maintenance |
| acecilia/OpenWRTInvasion A Python/Docker-based exploit script that gains a root shell on several Xiaomi routers (4A Gigabit, 4A 100M, 4, 4C, 3Gv2, 4Q, miWifi 3C) vi… | 23 | 1815 | maintenance |
| huolizhuminh/NetWorkPacketCapture An Android app that captures network packets using a local VPN service, showing live connections per app and parsing/saving HTTP (and parti… | 32 | 1799 | maintenance |
| google/stenographer Stenographer is a high-performance full-packet-capture utility that spools network packets to disk at up to ~10Gbps and manages disk usage … | 10 | 1796 | maintenance |
| sysdream/ligolo Ligolo is a lightweight Go tool for establishing SOCKS5 or TCP tunnels over reverse TLS connections, aimed at penetration testers pivoting … | 32 | 1786 | maintenance |
| 1tayH/noisy A Python script that generates random HTTP and DNS traffic noise in the background to obscure your real browsing patterns. It crawls config… | 32 | 1780 | maintenance |
| exentriquesolutions/nip.io NIP.IO is a wildcard DNS service that maps hostnames containing an embedded IP address (e.g. 10.0.0.1.nip.io) back to that IP address, impl… | 68 | 1774 | maintenance |
| apenwarr/blip Blip is a browser-based tool that visualizes Internet latency in real time by plotting ping times as blips on a graph. It runs on any devic… | 36 | 1768 | maintenance |
| jtesta/ssh-mitm A penetration testing tool that intercepts SSH connections by running a patched OpenSSH v7.5p1 server as a proxy between a victim and their… | 10 | 1743 | maintenance |
| gamelinux/passivedns PassiveDNS is a network sniffer written in C that passively collects DNS server replies from a live interface or pcap files and logs them i… | 77 | 1737 | maintenance |
| mstsc.js RDPY is a pure Python implementation of the Microsoft Remote Desktop Protocol (RDP) built on the Twisted event-driven network engine, suppo… | 32 | 1733 | maintenance |
| m57/dnsteal dnsteal is a fake DNS server written in Python that enables stealthy exfiltration of files from a victim machine via DNS requests. It suppo… | 32 | 1731 | maintenance |
| antirez/hping hping3 is a command-line network tool that sends custom TCP/IP packets and displays target replies, similar to ping but supporting arbitrar… | 32 | 1721 | maintenance |
| lance-gg/lance Lance is a Node.js-based real-time multiplayer game server with a companion client-side library that synchronizes game state between server… | 23 | 1721 | maintenance |
| rufengsuixing/luci-app-adguardhome A LuCI web interface plugin for OpenWrt that manages AdGuardHome, a network-wide DNS-based ad blocker. It provides core download/update, DN… | 23 | 1708 | maintenance |
| ssb-server ssb-server is the gossip and replication server for Secure Scuttlebutt, a peer-to-peer append-only log store that acts as a database, ident… | 23 | 1707 | maintenance |
| dperson/samba A Docker container image that packages the Samba server, providing SMB/CIFS file and print sharing for Windows, Linux, and other clients. S… | 32 | 1706 | maintenance |
| Peng-YM/QuanX A collection of JavaScript scripts and a cross-platform OpenAPI for proxy apps like Quantumult X, Loon, Surge, ShadowRocket, and JSBox. It … | 32 | 1705 | maintenance |
| vx3r/wg-gen-web A self-hosted web application that generates WireGuard client and server configuration files without managing the WireGuard service itself.… | 32 | 1705 | maintenance |
| henson/proxypool A Golang IP proxy pool service that scrapes free proxy sources, validates them, stores them in a database, and exposes a JSON API for crawl… | 32 | 1701 | maintenance |
| swiftsocket/SwiftSocket SwiftSocket is a Swift library providing a simple interface for TCP and UDP socket connections on Apple platforms, supporting both client a… | 23 | 1692 | maintenance |
| SECFORCE/sparta SPARTA is a Python GUI application that simplifies network infrastructure penetration testing by streamlining the scanning and enumeration … | 23 | 1671 | maintenance |
| securesocketfunneling/ssf Secure Socket Funneling (SSF) is a cross-platform network tool and toolkit that multiplexes TCP and UDP traffic through a single TLS-encryp… | 23 | 1669 | maintenance |
| Adminisme/ServerScan ServerScan is a high-concurrency network scanning and service detection tool written in Go, designed for intranet lateral information gathe… | 23 | 1656 | maintenance |
| henrywhitaker3/Speedtest-Tracker A self-hosted Docker application that runs an Ookla speedtest every hour and graphs the results over time. Built with a Laravel backend and… | 23 | 1650 | maintenance |
| yaoweibin/nginx_tcp_proxy_module A third-party Nginx module written in C that adds TCP proxying capabilities to Nginx, including upstream load balancing with ip_hash, activ… | 32 | 1646 | maintenance |
| specialunderwear/Hosts.prefpane A macOS System Preferences pane providing a Cocoa GUI for editing /etc/hosts, with input validation and per-entry enable/disable toggles. I… | 23 | 1631 | maintenance |
| byt3bl33d3r/DeathStar DeathStar is a Python CLI tool that automates gaining Domain and Enterprise Admin privileges in Active Directory environments by chaining c… | 32 | 1629 | maintenance |
| malfunkt/hyperfox Hyperfox is a Go-based security auditing tool that acts as a man-in-the-middle proxy for HTTP and HTTPS traffic, recording all intercepted … | 23 | 1629 | maintenance |
| bdamele/icmpsh icmpsh is a simple reverse ICMP shell tool with a Windows slave (client) written in C and a portable master (server) implemented in C, Perl… | 32 | 1627 | maintenance |
| frainzy1477/luci-app-clash A LuCI web interface plugin for OpenWrt routers that manages the Clash rule-based proxy client. It provides subscription handling, config e… | 23 | 1623 | maintenance |
| funny/link A Go network-layer scaffolding library that provides session management primitives (Session, Manager, Server, Channel) decoupled from any s… | 23 | 1613 | maintenance |
| websockets-rs/rust-websocket Rust-WebSocket is a Rust library implementing the WebSocket protocol (RFC6455) for both client and server connections, with message-level a… | 63 | 1612 | maintenance |
| danderson/netboot A Go repository providing implementations of network boot protocols (DHCPv4, TFTP, pcap) plus Pixiecore, an all-in-one CLI tool for easily … | 58 | 1610 | maintenance |
| savio-code/fern-wifi-cracker Fern Wifi Cracker is a Python/Qt GUI application for wireless security auditing that can crack and recover WEP, WPA/WPA2, and WPS keys. It … | 64 | 1604 | maintenance |
| tenta-browser/tenta-dns Tenta DNS is a Go-based DNS server suite combining an authoritative DNS server, a recursive resolver with DNSSEC and DNS-over-TLS support, … | 32 | 1601 | maintenance |
| sairson/Yasso Yasso is a Go-based intranet penetration testing toolkit that combines service brute-forcing (RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, … | 23 | 1595 | maintenance |
| cjb/serverless-webrtc A tech demo of WebRTC peer-to-peer chat and file transfer with no signaling server, where users manually exchange offer/answer SDP. It ship… | 32 | 1565 | maintenance |