domain: networking
2089 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| TrustTunnel/TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 76 | 3431 | active |
| vulnersCom/nmap-vulners A collection of Nmap NSE scripts that enrich service scans with CVEs, CVSS scores and known exploits from the Vulners database. It fingerpr… | 98 | 3415 | active |
| ph4ntonn/Stowaway Stowaway is a multi-hop proxy tool written in Go, designed for penetration testers to route external traffic through chains of nodes into r… | 54 | 3411 | active |
| snort3/snort3 Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet p… | 83 | 3409 | active |
| openwrt-xiaomi/xmir-patcher XMiR-Patcher is a Python-based firmware patcher for Xiaomi routers that exploits vulnerabilities to unlock SSH and install custom firmware … | 77 | 3408 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 75 | 3401 | active |
| Moli-X/Resources A curated collection of rewrite configurations, JavaScript scripts, and plugins for the iOS proxy apps QuantumultX, Loon, and Surge. It agg… | 77 | 3394 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 77 | 3394 | active |
| http-party/node-http-proxy node-http-proxy is a programmable HTTP proxying library for Node.js that supports websockets, HTTPS, and request/response modification. It … | 67 | 14129 | maintenance |
| txthinking/google-hosts A set of shell scripts that find usable Google IP addresses by scanning CIDR ranges, testing SSL/ping, and generating a hosts file mapping … | 72 | 3363 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 67 | 3363 | active |
| sivel/speedtest-cli A Python-based command line interface for testing internet bandwidth using speedtest.net servers. It measures download and upload speeds an… | 10 | 14072 | maintenance |
| BloodHound Community Edition BloodHound Community Edition is a free, open-source application that uses graph theory to reveal hidden relationships and attack paths in A… | 91 | 3355 | active |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3343 | active |
| traviscross/mtr mtr is a network diagnostic tool that combines traceroute and ping, probing each hop along the route to a destination and printing live lat… | 71 | 3337 | stable |
| Zephyruso/zashboard Zashboard is a web-based dashboard for managing and monitoring Clash-based proxy clients, offering connection tables, proxy group managemen… | 84 | 3335 | active |
| zalando/skipper Skipper is an HTTP router and reverse proxy written in Go, designed for service composition with support for hundreds of thousands of dynam… | 95 | 3319 | stable |
| ergochat/ergo Ergo is a modern IRC server (ircd) written in Go that integrates services (NickServ, ChanServ, HostServ) and bouncer functionality such as … | 90 | 3307 | active |
| vishvananda/netlink A Go library providing a simple, high-level API for Linux netlink socket communication, modeled loosely on the iproute2 CLI. It lets user-s… | 66 | 3297 | stable |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 90 | 3287 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 93 | 3274 | active |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3266 | stable |
| tuic-protocol/tuic TUIC is a standardized, implementation-agnostic network proxy protocol specification for relaying TCP and UDP traffic over QUIC with 0-RTT … | 32 | 3263 | active |
| lsalzman/enet ENet is a C library providing reliable UDP networking with features like channels, reliability, and congestion control. It is designed for … | 72 | 3260 | stable |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3242 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3232 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 99 | 3229 | active |
| gozfree/gear-lib Gear-Lib is a collection of POSIX C libraries for IoT, embedded, and network service development, covering data structures, networking prot… | 23 | 3223 | active |
| moul/assh assh is a transparent wrapper around the SSH client written in Go that enhances SSH configuration with regex host matching, aliases, gatewa… | 93 | 3218 | active |
| appshubcc/Bettbox Bettbox is a multi-platform Mihomo (Clash Meta) proxy client rebuilt from an early version of FlClash, offering network debugging and rule-… | 83 | 3215 | active |
| D3Ext/WEF WEF is a Wi-Fi Exploitation Framework written in Bash that automates a wide range of wireless attacks against WPA/WPA2/WPA3, WPS, and WEP n… | 52 | 3209 | active |
| Hypostasis-Cat/HypoMux HypoMux is a Windows desktop application that aggregates multiple network adapters (Ethernet, Wi-Fi, mobile hotspots) to combine their band… | 80 | 3199 | active |
| qdm12/ddns-updater A lightweight universal dynamic DNS (DDNS) updater that periodically keeps DNS A/AAAA records updated across many DNS providers, with a bui… | 93 | 3192 | active |
| vnt-dev/vnt VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 94 | 3180 | active |
| amalshaji/portr Portr is a self-hosted open-source tunnel solution that exposes local HTTP, TCP, and WebSocket connections to the public internet using SSH… | 92 | 3180 | active |
| IntersectMBO/cardano-node The core Cardano full-node executable that integrates the ledger, consensus (Ouroboros), and networking layers to participate in the Cardan… | 93 | 3176 | active |
| microsoft/retina Retina is an open-source, eBPF-based Kubernetes network observability platform that collects customizable telemetry, Prometheus metrics, an… | 92 | 3166 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3163 | stable |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 72 | 3163 | active |
| xxf098/shadowsocksr-v2ray-trojan-android A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3161 | active |
| nwtgck/piping-server Piping Server is a streaming data transfer server over pure HTTP/HTTPS that relays data between devices using the same path, without storin… | 52 | 3155 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 82 | 3146 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 97 | 3137 | active |
| am-cf-tunnel A JavaScript script deployed on Cloudflare Workers and Pages that generates free VLESS and Trojan proxy nodes and converts their configurat… | 73 | 3135 | active |
| seladb/PcapPlusPlus PcapPlusPlus is a multiplatform C++ library for capturing, parsing, and crafting network packets. It wraps popular packet processing engine… | 86 | 3131 | stable |
| chronoxor/NetCoreServer NetCoreServer is an ultra fast, low latency asynchronous socket server and client library for C# .NET Core. It supports TCP, SSL, UDP, Unix… | 61 | 3129 | stable |
| nirui/sshwifty Sshwifty is a self-hosted web application that provides SSH and Telnet client access directly from a browser. It ships as prebuilt executab… | 98 | 3116 | active |
| libp2p libp2p is a modular peer-to-peer networking stack and protocol suite, originally extracted from IPFS, with implementations in Go, Rust, Jav… | 69 | 3116 | stable |
| acl-dev/acl Acl is a cross-platform C/C++ network communication library and server programming framework supporting Linux, Windows, macOS, FreeBSD, And… | 90 | 3100 | stable |
| Pouzor/homelable Homelable is a self-hosted web application for visualizing homelab infrastructure on interactive network, electrical, and 19-inch rack canv… | 81 | 3100 | active |
| youshandefeiyang/sub-web-modify An enhanced frontend for the Subconverter subscription conversion tool, built with Vue, adding nearly a hundred remote configs, dark mode, … | 76 | 3096 | active |
| Barabama/FreeNodes A Python crawler that aggregates free proxy nodes (v2ray, Clash, vmess, vless, trojan, ss) from public websites and publishes them as auto-… | 73 | 3096 | active |
| facebook/wangle Wangle is a C++ networking library providing composable client/server abstractions for building protocols, application clients, and servers… | 95 | 3094 | active |
| wgtunnel/android WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 96 | 3085 | active |
| xingpingcn/enhanced-FaaS-in-China A service providing optimized CNAME records (e.g., vercel-cname.xingpingcn.top) that improve access speed and stability of sites hosted on … | 70 | 3072 | active |
| squid-cache/squid Squid is a mature, full-featured caching web proxy supporting HTTP, HTTPS, and FTP, with extensive access controls, content adaptation via … | 95 | 3071 | stable |
| bb-qq/r8152 A Synology DSM driver package (kernel module) for Realtek RTL8152/8153/8156/8157/8159 based USB Ethernet adapters, enabling 1G to 10G USB n… | 89 | 3065 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 68 | 3064 | active |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 91 | 3061 | active |
| golang/net golang/net (golang.org/x/net) is the official supplementary networking library for Go, maintained by the Go team. It provides packages beyo… | 77 | 3037 | stable |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 35 | 3033 | active |
| 6Kmfi6HP/EDtunnel EDtunnel is a proxy tool deployed on Cloudflare Workers and Pages that supports VLESS and Trojan protocols with configurable proxy IPs, SOC… | 58 | 3029 | active |
| Kevin-Robertson/Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 53 | 3014 | active |
| thinkst/opencanary OpenCanary is a modular, multi-protocol network honeypot daemon written in Python, designed to detect attackers after they breach internal … | 86 | 3003 | active |
| ophub/amlogic-s9xxx-openwrt A build and firmware distribution project that runs OpenWrt on Amlogic, Rockchip, and Allwinner TV boxes and single-board computers. It pro… | 98 | 2995 | active |
| envoyproxy/gateway Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kuber… | 99 | 2990 | stable |
| gnmyt/MySpeed MySpeed is a self-hosted speed test analysis application that automatically runs internet speed tests and records results over a configurab… | 67 | 2990 | active |
| kubernetes-sigs/gateway-api Kubernetes Gateway API is the official successor to Ingress, providing a role-oriented, expressive specification and CRDs for L4/L7 routing… | 93 | 2978 | stable |
| ntop/PF_RING PF_RING is a Linux kernel module and user-space framework for high-speed packet capture and processing, offering a consistent API for netwo… | 73 | 2965 | stable |
| matrix-org/synapse Synapse is the reference Matrix homeserver, an open-source server implementing the Matrix protocol for federated, end-to-end-encrypted comm… | 10 | 12103 | maintenance |
| strongswan/strongswan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 87 | 2954 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 86 | 2951 | active |
| achillean/shodan-python The official Python library and command-line interface for the Shodan search engine, which indexes Internet-connected devices and services.… | 23 | 2950 | stable |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 98 | 2941 | active |
| k8snetworkplumbingwg/multus-cni Multus CNI is a CNI meta-plugin for Kubernetes that enables attaching multiple network interfaces to pods, creating multi-homed pods. It wo… | 91 | 2938 | active |
| kamailio/kamailio Kamailio is an open source SIP signaling server (RFC3261) written in C, designed for large-scale VoIP and real-time communication platforms… | 95 | 2928 | stable |
| imsnif/bandwhich bandwhich is a Rust CLI utility that sniffs a network interface and displays current bandwidth utilization by process, connection, and remo… | 66 | 11924 | maintenance |
| palahsu/DDoS-Ripper DDoS-Ripper (DRipper) is a Python command-line tool that floods a target IP with traffic to simulate a distributed denial-of-service attack… | 72 | 2914 | active |
| holepunchto/hypercore Hypercore is a JavaScript library implementing a secure, distributed append-only log that uses signed merkle trees to verify data integrity… | 99 | 2903 | active |
| tale/headplane Headplane is a feature-complete web UI for Headscale, the self-hosted alternative to Tailscale's WireGuard-based VPN coordination server. I… | 85 | 2897 | active |
| sindresorhus/fast-cli A Node.js CLI tool that measures internet download and upload speeds using fast.com. It supports JSON output, verbose latency and location … | 69 | 2874 | active |
| favonia/cloudflare-ddns A small, feature-rich, and robust Cloudflare DDNS updater written in Go, distributed as a lightweight Docker image. It detects the machine'… | 97 | 2870 | active |
| Danie1s/Tiercel Tiercel is a pure Swift iOS download framework built on URLSession that provides native-level background downloads, resumable transfers, an… | 91 | 2867 | active |
| patterniha/MITM-DomainFronting A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 74 | 2848 | active |
| projectdiscovery/dnsx dnsx is a fast, multi-purpose DNS toolkit from ProjectDiscovery for running DNS queries (A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA) with u… | 86 | 2846 | active |
| shadowsocks/v2ray-plugin A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 64 | 2846 | active |
| LimerBoy/Impulse Impulse is a Python-based denial-of-service toolkit that bundles multiple attack methods including SYN, UDP, ICMP, HTTP floods, Slowloris, … | 39 | 2840 | active |
| elseif/MikroTikPatch A Python-based tool that patches MikroTik RouterOS public keys and generates licenses, enabling shell access, container mode, and highest-l… | 87 | 2833 | active |
| knadh/dns.toys dns.toys is a DNS server written in Go that repurposes the DNS protocol to serve handy utilities like weather, world time, unit and currenc… | 65 | 2821 | active |
| eycorsican/leaf Leaf is a versatile and efficient proxy framework written in Rust, supporting multiple proxy protocols such as Shadowsocks, Trojan, VMess, … | 85 | 2820 | active |
| gkbrk/slowloris A Python rewrite of the Slowloris low-bandwidth HTTP Denial of Service attack tool. It holds many connections open to threaded web servers … | 32 | 2820 | stable |
| GUI-for-Cores/GUI.for.Clash A modern, lightweight cross-platform desktop GUI for managing Clash/mihomo (and sing-box) proxy cores, built with Wails (Go) and Vue 3. It … | 91 | 2819 | active |
| gioblu/PJON PJON is an experimental, multi-master, software-defined network protocol stack for microcontrollers and general-purpose systems, supporting… | 47 | 2816 | active |
| acme-dns/acme-dns acme-dns is a simplified DNS server with a RESTful HTTP API designed to automate ACME DNS challenges for Let's Encrypt and other ACME certi… | 83 | 2814 | active |
| maxmcd/webtty A Go CLI tool that shares a terminal session over WebRTC, letting a remote peer connect via a pasted SDP exchange or a static browser page … | 23 | 2813 | active |
| DefGuard/defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 98 | 2809 | active |
| node-webrtc/node-webrtc node-webrtc is a Node.js native addon (N-API) providing bindings to Google's WebRTC M106 stack. It aims for spec compliance with the WebRTC… | 56 | 2805 | active |
| PowerDNS-Admin/PowerDNS-Admin PowerDNS-Admin is a self-hosted web interface for managing the PowerDNS Authoritative Server. It provides DNS zone and record management wi… | 98 | 2803 | active |
| pythops/impala Impala is a terminal user interface (TUI) application written in Rust for managing Wi-Fi connections on Linux via the iwd daemon. It suppor… | 91 | 2798 | active |
| zema1/suo5 Suo5 is a high-performance HTTP tunneling tool that creates a local SOCKS5 forward proxy by tunneling traffic through a compromised web ser… | 85 | 2796 | active |