Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| tuanpmt/esp_mqtt A fully functional MQTT client library written in C for the ESP8266 microcontroller, ported from a Contiki MQTT client. It supports subscri… | 23 | 1171 | maintenance |
| kbandla/dpkt dpkt is a Python library for fast, simple network packet creation and parsing, with definitions for basic TCP/IP protocols. It is commonly … | 23 | 1164 | maintenance |
| ivanilves/xiringuito Xiringuito is a shell-script-based SSH tunneling tool that provides VPN-like access to remote networks without running a VPN server. It use… | 23 | 1163 | maintenance |
| d3ckx1/Fvuln Fvuln (Find-Vulnerability) is an automated security scanning tool for penetration testers and red teams. It combines live IP detection, por… | 23 | 1162 | maintenance |
| bittorrent/libutp libutp is a C++ library implementing the uTorrent Transport Protocol (uTP), a TCP-like reliable transport over UDP based on LEDBAT congesti… | 32 | 1159 | maintenance |
| oznu/docker-cloudflare-ddns A small Alpine Linux based Docker image that uses Cloudflare's DNS API as a Dynamic DNS (DDNS) provider, keeping DNS records updated with y… | 10 | 1148 | maintenance |
| arriven/db1000n db1000n is a simple distributed load generation tool written in Go that fetches a JSON config from a local or remote location and runs the … | 23 | 1147 | maintenance |
| basecamp/xip-pdns A PowerDNS pipe backend adapter written in Shell that powered xip.io, a wildcard DNS service resolving any hostname containing an IP addres… | 10 | 1146 | maintenance |
| nfqws nfqws-keenetic provides packages and installation scripts for deploying the nfqws DPI-bypass tool on Keenetic/Netcraze routers with Entware… | 80 | 1142 | maintenance |
| shunf4/proxychains-windows A Windows and Cygwin port of proxychains that forces dynamically linked Win32 or Cygwin programs' TCP connections through one or more SOCKS… | 23 | 1142 | maintenance |
| JPaulMora/Pyrit Pyrit is a WPA/WPA2-PSK precomputed cracker that builds massive databases of pre-computed Pairwise Master Keys using multi-core CPUs and GP… | 64 | 1140 | maintenance |
| cw1997/NATBypass NATBypass is a Go implementation of the lcx/htran port-forwarding tool that establishes TCP reverse tunnels for NAT traversal. It supports … | 60 | 1140 | maintenance |
| PHZ76/RtspServer A lightweight RTSP server and pusher library written in C++11. It supports H.264/H.265 video and G711A/AAC audio streaming over unicast (RT… | 23 | 1133 | maintenance |
| Disaster Radio Disaster Radio is a work-in-progress long-range, low-bandwidth wireless mesh network project for disaster recovery, powered by solar energy… | 57 | 1132 | maintenance |
| Kuingsmile/clash-core A backup fork of Clash, a rule-based network tunnel written in Go that proxies traffic through protocols like Shadowsocks, VMess, Trojan, a… | 18 | 1132 | maintenance |
| hash3liZer/WiFiBroot WiFiBroot is a Python 2 command-line tool for wireless (WPA/WPA2) penetration testing that captures and cracks 4-way handshakes and PMKID k… | 23 | 1131 | maintenance |
| Lawouach/WebSocket-for-Python ws4py is a Python library implementing the WebSocket protocol (RFC 6455) for both clients and servers, supporting Python 2, 3, and PyPy. It… | 67 | 1128 | maintenance |
| seashell/drago Drago is a flexible configuration manager for WireGuard that provides a unified control plane for building secure network overlays across h… | 23 | 1120 | maintenance |
| mzeeshanid/MZDownloadManager A Swift download manager library for iOS built on URLSession that supports concurrent, background, resumable, pausable, and retryable file … | 65 | 1118 | maintenance |
| emmericp/MoonGen MoonGen is a scriptable high-speed packet generator built on DPDK and LuaJIT that can saturate 10 Gbit/s Ethernet links with 64-byte packet… | 53 | 1118 | maintenance |
| google/ssl_logger A Python command-line tool that decrypts and logs a running process's SSL/TLS traffic, mimicking Echo Mirage's SSL logging on Linux and mac… | 10 | 1118 | maintenance |
| ihciah/clean-dns-bpf A Rust + eBPF/XDP tool that drops GFW DNS poisoning packets at the kernel level, allowing clean DNS resolution from 8.8.8.8 without a proxy… | 23 | 1115 | maintenance |
| francoismichel/ssh3 SSH3 is a research-driven reimplementation of the SSH protocol that runs remote terminal sessions over QUIC, TLS 1.3, and HTTP/3. It offers… | 18 | 5013 | experimental |
| 1n7erface/Template Template is a heuristic intranet scanning CLI tool built for red team operations, combining host discovery, port scanning, web fingerprinti… | 23 | 1114 | maintenance |
| piscisaureus/wepoll wepoll is a small C library that implements the Linux epoll API on Windows, enabling scalable socket event notification. It is distributed … | 32 | 1113 | maintenance |
| ProxyKit/ProxyKit ProxyKit is a .NET library for building code-first HTTP reverse proxies as ASP.NET Core middleware, supporting request/response interceptio… | 10 | 1113 | maintenance |
| saghul/pyuv pyuv is a Python binding for libuv, the high-performance asynchronous I/O and platform abstraction library behind Node.js. It exposes non-b… | 10 | 1107 | maintenance |
| iizukanao/node-rtsp-rtmp-server A Node.js streaming server that supports RTSP, RTMP (including RTMPE/RTMPT/RTMPTE), and HTTP protocols for serving H.264 video and AAC audi… | 49 | 1097 | maintenance |
| arboliva/AirChat AirChat is a free communication tool that transmits messages over radio waves or audio without requiring internet or cellular infrastructur… | 32 | 1087 | maintenance |
| Leeon123/CC-attack A Python3 command-line tool that performs Layer 7 HTTP/HTTPS flood (CC) attacks through SOCKS4/5 or HTTP proxies, with multithreading, rand… | 23 | 1085 | maintenance |
| sysdream/chashell Chashell is a Go-based reverse shell that tunnels communication over DNS, paired with a multi-client control server called chaserv. All tra… | 32 | 1083 | maintenance |
| njh/EtherCard EtherCard is an Arduino library providing an IPv4 Ethernet driver for the Microchip ENC28J60 chip over SPI. It offers high-level routines f… | 23 | 1082 | maintenance |
| ToyoDAdoubiBackup/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 1076 | maintenance |
| iphelix/dnschef DNSChef is a highly configurable DNS proxy (fake DNS) tool written in Python for penetration testers and malware analysts. It can forge DNS… | 32 | 1075 | maintenance |
| FeeiCN/ESD ESD is a Python-based subdomain enumeration tool that brute-forces and collects subdomains for a given domain. It uses AsyncIO/aioDNS for f… | 10 | 1068 | maintenance |
| gfodor/p2pcf P2PCF is a JavaScript library that provides low-cost, serverless WebRTC signalling using a Cloudflare Worker and R2 bucket. It offers room-… | 23 | 1064 | maintenance |
| nsacyber/GRASSMARLIN GRASSMARLIN is a Java-based desktop application from NSA that provides IP network situational awareness for Industrial Control Systems (ICS… | 10 | 1059 | maintenance |
| twitchyliquid64/subnet Subnet is a simple, auditable VPN server and client written in Go, using TLS mutual authentication and TUN interfaces to route traffic. It … | 10 | 1057 | maintenance |
| Mob2003/rakshasa Rakshasa is a cross-platform multi-level proxy and intranet tunneling tool written in Go. It forms a network of nodes that forward TCP traf… | 21 | 1056 | maintenance |
| Abacus-Group-RTO/legion Legion is an open-source, semi-automated network penetration testing framework with a graphical interface, forked from Sparta. It orchestra… | 10 | 1054 | maintenance |
| atrandys/trojan A one-click shell script for deploying the Trojan proxy protocol on Linux VPS servers, wrapping trojan-gfw with TLS certificate setup and c… | 23 | 1053 | maintenance |
| HatBoy/Pcap-Analyzer A Python-based visual offline pcap packet analyzer with a web interface built on Flask. It parses pcap files to show protocol and traffic s… | 32 | 1051 | maintenance |
| mwitkow/grpc-proxy A Go library providing a transparent gRPC reverse proxy handler that routes gRPC calls to backends without knowledge of their service seman… | 61 | 1048 | maintenance |
| OffensivePython/Saddam Saddam is a Python command-line tool that performs DDoS amplification attacks using DNS, NTP, SNMP, and SSDP reflection vectors. It can als… | 32 | 1048 | maintenance |
| shimmeris/SCFProxy SCFProxy is a CLI tool that deploys HTTP, SOCKS, and reverse proxies on cloud functions and API gateways across Alibaba Cloud, Tencent Clou… | 23 | 1047 | maintenance |
| luantak/ToRat ToRat is a cross-platform remote administration tool written in Go that uses the Tor network as its transport mechanism and RPC for communi… | 10 | 1038 | maintenance |
| falling-sky/source Falling Sky is the source code for the test-ipv6.com website, a browser-based IPv6 connectivity testing service built mostly with HTML and … | 67 | 1036 | maintenance |
| marco-lancini/goscan GoScan is an interactive network scanner client written in Go that provides abstraction and automation over nmap, with auto-completion and … | 23 | 1036 | maintenance |
| socketio/socket.io-p2p A JavaScript library that sets up WebRTC peer-to-peer connections between browsers using the Socket.IO event protocol, with Socket.IO handl… | 32 | 1035 | maintenance |
| igrigorik/em-synchrony A Ruby library providing Fiber-aware EventMachine clients and convenience primitives such as connection pools, iterators, and synchronizati… | 32 | 1035 | maintenance |
| WithSecureLabs/doublepulsar-detection-script A Python 2 script that sweeps networks to detect Windows systems compromised with the DOUBLEPULSAR implant (SMB and RDP variants) released … | 32 | 1030 | maintenance |
| xdtianyu/scripts A personal collection of shell scripts for various work and sysadmin tasks by xdtianyu, including things like dynamic DNS updates, SSL cert… | 32 | 1022 | maintenance |
| secretsquirrel/BDFProxy BDFProxy is a man-in-the-middle proxy that patches downloaded binaries on the fly by embedding payloads, combining the Backdoor Factory wit… | 32 | 1016 | maintenance |
| RangeNetworks/openbts OpenBTS is an open-source C++ implementation of a GSM and GPRS radio access network node that uses software-defined radios to create a cell… | 32 | 1012 | maintenance |
| pboehm/ddns A self-hosted Dynamic DNS service similar to DynDNS or NO-IP, built in Go on top of the PowerDNS Remote Backend. It exposes a small web ser… | 32 | 1005 | maintenance |
| gotthardp/lorawan-server An open-source LoRaWAN server written in Erlang that combines network-server and application-server functionality for private LoRaWAN netwo… | 23 | 1005 | maintenance |
| TheCaduceus/WARP-UNLIMITED-ADVANCED A Python script that repeatedly calls Cloudflare's official WARP API to generate unlimited WARP+ data quota for a given WARP client ID. It … | 23 | 995 | maintenance |
| kognise/arpchat A Rust-based chat application that sends text messages between computers on the same local network using ARP packets instead of standard ne… | 23 | 2544 | experimental |
| openairplay/airplay2-receiver A Python implementation of an AirPlay 2 receiver that can accept audio streams from Apple devices and other AirPlay senders. It supports Ho… | 69 | 2421 | experimental |
| memorysafety/river River is a reverse proxy application written in Rust, built on Cloudflare's Pingora library and developed under ISRG's Prossimo initiative … | 17 | 2353 | experimental |
| Jigsaw-Code/Intra Intra is an experimental Android app from Jigsaw (Google) that routes DNS lookups over DNS-over-HTTPS to encrypt them and prevent network-l… | 75 | 2221 | experimental |
| OpenWrt Domain Routing Suite Podkop is an open-source traffic routing tool for OpenWrt routers, built on sing-box, that lets users send selected resources through a tun… | 85 | 2189 | experimental |
| GFW-knocker/gfw_resist_tls_proxy A set of Python proof-of-concept scripts (notably pyprox and randchunk) that fragment TLS Client Hello packets to evade SNI-based deep pack… | 30 | 1710 | experimental |
| benjojo/dnsfs dnsfs is a Go-based FUSE filesystem that stores data in the caches of third-party DNS resolvers, using DNS records as a storage medium. It … | 32 | 1473 | experimental |
| buckyos/CYFS CYFS (CYberFileSystem) is a Rust-implemented protocol stack that upgrades the Web's basic protocols (TCP/IP+DNS+HTTP) to enable fully decen… | 23 | 1442 | experimental |
| microsoft/demikernel Demikernel is a library operating system (LibOS) architecture from Microsoft Research for kernel-bypass I/O devices like DPDK and RDMA. It … | 61 | 1239 | experimental |
| hanselime/paqet paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pca… | 80 | 1191 | experimental |
| robert/PySkyWiFi PySkyWiFi is a humorous Python proof-of-concept that tunnels internet requests through the free-to-edit 'name' field of an airline airmiles… | 25 | 1185 | experimental |
| tailscale/tailscale-rs A work-in-progress Rust implementation of Tailscale, providing a library for building tailnet-connected applications with bindings to C, El… | 80 | 1173 | experimental |
| dennis-tra/pcp pcp is a command-line peer-to-peer file transfer tool built on libp2p that transfers data directly between peers without relying on central… | 10 | 1100 | experimental |
| koutto/jok3r Jok3r is a Python3 CLI framework that automates network and web black-box penetration testing by chaining 50+ open-source security tools. I… | 32 | 1089 | experimental |
| curl Docker images curl is a cross‑platform command‑line tool and library for transferring data with URL syntax. It supports a wide range of protocols such as… | 91 | 109 | active |
| SockJS SockJS-client is a browser JavaScript library that provides a WebSocket-like object for low-latency, full-duplex, cross-domain communicatio… | 65 | 203 | maintenance |
| inconshreveable/ngrok ngrok is a command‑line tool that creates secure, public URLs for local services by acting as a reverse proxy and tunnel. It also provides … | 10 | 24404 | abandoned |
| Qv2ray Qv2ray is a cross-platform V2Ray GUI client built with C++ and Qt, supporting VMess, VLESS, SSR, Trojan, NaiveProxy, HTTP/SOCKS5 via an ext… | 41 | 16900 | abandoned |
| MatsuriDayo/nekoray NekoBox for PC (nekoray) is a Qt-based cross-platform GUI proxy configuration manager backed by sing-box, supporting protocols like SOCKS, … | 10 | 15290 | abandoned |
| byt3bl33d3r/CrackMapExec CrackMapExec is a Python-based command-line swiss army knife for pentesting Windows and Active Directory networks, supporting protocols lik… | 10 | 9157 | abandoned |
| apenwarr/sshuttle sshuttle is a Python command-line tool that creates a transparent proxy over SSH, acting like a lightweight VPN without admin rights on the… | 32 | 8853 | abandoned |
| Shadowsocks-Qt5 Shadowsocks-Qt5 is a native cross-platform GUI client for the Shadowsocks proxy protocol, written in C++ with Qt 5. It supports multiple se… | 10 | 7917 | abandoned |
| shadowsocks/shadowsocks-go A Go port of the Shadowsocks lightweight encrypted tunnel proxy, providing local SOCKS5 client and remote server binaries to bypass firewal… | 10 | 6545 | abandoned |
| yinghuocho/firefly-proxy Firefly is a cross-platform proxy client written in Go designed to circumvent the Great Firewall of China, with builds for Windows, macOS, … | 23 | 4811 | abandoned |
| ToyoDAdoubi/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 4685 | abandoned |
| oblique/create_ap A shell script that turns a Linux machine's WiFi adapter into a NATed or bridged wireless access point using hostapd. It supports WPA/WPA2 … | 10 | 4512 | abandoned |
| shadowsocksr-backup/shadowsocksr-csharp ShadowsocksR is a Windows proxy client written in C# that tunnels traffic through ShadowsocksR servers via a local SOCKS5/HTTP proxy with s… | 23 | 4484 | abandoned |
| shadowsocksr-backup/shadowsocks-rss ShadowsocksR (SSR) is a fork of Shadowsocks providing an encrypted SOCKS/HTTP proxy client and server with additional protocol obfuscation … | 32 | 4434 | abandoned |
| facebookarchive/augmented-traffic-control Augmented Traffic Control (ATC) is a tool for simulating network conditions such as bandwidth, latency, packet loss, and packet reordering,… | 10 | 4314 | abandoned |
| jpetazzo/pipework Pipework is a shell-based Software-Defined Networking tool for connecting Linux containers (LXC and Docker) into arbitrary network topologi… | 32 | 4250 | abandoned |
| Chikage0o0/Linux-NetSpeed A shell script that integrates commonly used Linux TCP network acceleration options (BBR, BBR Plus, BBR2, and related kernel modules) into … | 10 | 3746 | abandoned |
| cSploit cSploit is an open-source Android network analysis and penetration testing suite for rooted devices, integrating Metasploit RPC, MITM attac… | 23 | 3665 | abandoned |
| byt3bl33d3r/MITMf MITMf is a Python framework for performing Man-In-The-Middle and network attacks, featuring built-in SMB, HTTP, and DNS servers, an SSLStri… | 10 | 3641 | abandoned |
| Mellow Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux, functioning as a Proxifier alternative that routes all… | 23 | 3536 | abandoned |
| dispatch A Node.js command-line utility that runs a SOCKS5 or HTTP proxy balancing traffic across multiple internet connections (Wi-Fi, Ethernet, 3G… | 10 | 3487 | abandoned |
| shadowsocksr-backup/shadowsocksr-android A ShadowsocksR (SSR) proxy client for Android that tunnels traffic through ShadowsocksR servers. It is a community backup of the original s… | 23 | 3430 | abandoned |
| facebookarchive/RakNet RakNet is a cross-platform, open-source C++ networking engine designed for game programmers, providing reliable UDP transport, replication,… | 10 | 3422 | abandoned |
| boramalper/magnetico magnetico is a self-hosted BitTorrent DHT search engine suite consisting of magneticod, an autonomous DHT crawler and metadata fetcher, and… | 10 | 3131 | abandoned |
| jiangxufeng/v2rayL v2rayL is a Linux GUI client for V2Ray built with PyQt5, supporting vmess and shadowsocks protocols with subscription management, QR code c… | 10 | 3113 | abandoned |
| fivesheep/chnroutes chnroutes is a set of Python scripts that generate route table commands from the APNIC delegated list, so VPN users in China can route only… | 23 | 3098 | abandoned |
| MKSG-MugunthKumar/MKNetworkKit MKNetworkKit is an Objective-C networking framework for iOS 8+ built on NSURLSession, providing built-in authentication and HTTP 1.1 cachin… | 10 | 3024 | abandoned |
| NewEraCracker/LOIC LOIC (Low Orbit Ion Cannon) is an open-source network stress testing tool written in C#, based on Praetox's original LOIC. It supports TCP/… | 10 | 2969 | abandoned |
| zhuhaow/SpechtLite SpechtLite is a rule-based proxy application for macOS written in Swift. It has been archived because its underlying library, NEKit, is dep… | 10 | 2906 | abandoned |