Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| imsnif/bandwhich bandwhich is a Rust CLI utility that sniffs a network interface and displays current bandwidth utilization by process, connection, and remo… | 62 | 12007 | maintenance |
| favonia/cloudflare-ddns A small, feature-rich, and robust Cloudflare DDNS updater written in Go, distributed as a lightweight Docker image. It detects the machine'… | 93 | 2933 | active |
| holepunchto/hypercore Hypercore is a JavaScript library implementing a secure, distributed append-only log that uses signed merkle trees to verify data integrity… | 99 | 2917 | active |
| kanoqwq/UFI-TOOLS UFI-TOOLS is a multi-functional management and extension tool for ZTE portable WiFi devices (F50, U30 Air) and other Unisoc/Spreadtrum Andr… | 70 | 2913 | active |
| destan19/OpenAppFilter OpenAppFilter (OAF) is a parental control and application filtering plugin for OpenWrt routers, built as a kernel module, service daemon, a… | 91 | 2904 | active |
| Patterniha Internet Freedom Suite A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 69 | 2890 | active |
| sindresorhus/fast-cli A Node.js CLI tool that measures internet download and upload speeds using fast.com. It supports JSON output, verbose latency and location … | 63 | 2883 | active |
| projectdiscovery/dnsx dnsx is a fast, multi-purpose DNS toolkit from ProjectDiscovery for running DNS queries (A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA) with u… | 84 | 2880 | active |
| Danie1s/Tiercel Tiercel is a pure Swift iOS download framework built on URLSession that provides native-level background downloads, resumable transfers, an… | 85 | 2872 | active |
| pythops/impala Impala is a terminal user interface (TUI) application written in Rust for managing Wi-Fi connections on Linux via the iwd daemon. It suppor… | 87 | 2867 | active |
| defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 99 | 2866 | active |
| LimerBoy/Impulse Impulse is a Python-based denial-of-service toolkit that bundles multiple attack methods including SYN, UDP, ICMP, HTTP floods, Slowloris, … | 35 | 2864 | active |
| srl-labs/containerlab Containerlab is a CLI tool for orchestrating container-based networking labs. It deploys containerized Network Operating Systems, wires the… | 96 | 2857 | active |
| Shadowsocks A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 60 | 2847 | active |
| eooce/python-ws A lightweight Python implementation of VLESS, Trojan, and Shadowsocks proxy protocols designed to run on serverless/PaaS platforms without … | 53 | 2844 | active |
| acme-dns acme-dns is a simplified DNS server with a RESTful HTTP API designed to automate ACME DNS challenges for Let's Encrypt and other ACME certi… | 77 | 2838 | active |
| gkbrk/slowloris A Python rewrite of the Slowloris low-bandwidth HTTP Denial of Service attack tool. It holds many connections open to threaded web servers … | 32 | 2838 | stable |
| eycorsican/leaf Leaf is a versatile and efficient proxy framework written in Rust, supporting multiple proxy protocols such as Shadowsocks, Trojan, VMess, … | 86 | 2833 | active |
| PJON PJON is an experimental, multi-master, software-defined network protocol stack for microcontrollers and general-purpose systems, supporting… | 43 | 2832 | active |
| knadh/dns.toys dns.toys is a DNS server written in Go that repurposes the DNS protocol to serve handy utilities like weather, world time, unit and currenc… | 61 | 2831 | active |
| GUI-for-Cores/GUI.for.Clash A modern, lightweight cross-platform desktop GUI for managing Clash/mihomo (and sing-box) proxy cores, built with Wails (Go) and Vue 3. It … | 88 | 2827 | active |
| PowerDNS-Admin/PowerDNS-Admin PowerDNS-Admin is a self-hosted web interface for managing the PowerDNS Authoritative Server. It provides DNS zone and record management wi… | 96 | 2819 | active |
| zema1/suo5 Suo5 is a high-performance HTTP tunneling tool that creates a local SOCKS5 forward proxy by tunneling traffic through a compromised web ser… | 80 | 2815 | active |
| maxmcd/webtty A Go CLI tool that shares a terminal session over WebRTC, letting a remote peer connect via a pasted SDP exchange or a static browser page … | 23 | 2813 | active |
| phpipam/phpipam phpIPAM is an open-source web-based IP address management (IPAM) application written in PHP with a MySQL/MariaDB backend. It provides IPv4/… | 96 | 2812 | active |
| node-webrtc node-webrtc is a Node.js native addon (N-API) providing bindings to Google's WebRTC M106 stack. It aims for spec compliance with the WebRTC… | 52 | 2803 | active |
| skydive-project/skydive Skydive is an open source real-time network topology and protocols analyzer that captures network topology and traffic flows across hosts, … | 38 | 2799 | active |
| yiyuan-jichang/dizhi A repository serving as the official website mirror for Yiyuan Airport (一元机场), a commercial VPN/proxy subscription service. It primarily ex… | 37 | 2788 | active |
| dmotz/trystero Trystero is a JavaScript/TypeScript library that adds serverless WebRTC peer discovery and communication to web apps, using BitTorrent, Nos… | 98 | 2781 | active |
| reactor/reactor-netty Reactor Netty is a JVM library providing non-blocking, backpressure-ready TCP, HTTP, UDP, and QUIC clients and servers built on the Netty f… | 95 | 2776 | active |
| open5gs/open5gs Open5GS is an open-source C-language implementation of the 5G Core (5GC) and Evolved Packet Core (EPC), the core network of LTE and NR mobi… | 85 | 2776 | active |
| cobbler/cobbler Cobbler is a Linux installation and provisioning server that automates network-based OS deployment via PXE, DHCP, TFTP, and templated kicks… | 97 | 2773 | active |
| pucherot/Pi.Alert Pi.Alert is a self-hosted WIFI/LAN intruder detector that scans the local network for connected devices using arp-scan, Pi-hole, and dnsmas… | 23 | 2768 | active |
| glados-network/GLaDOS GLaDOS is a commercial networking/VPN service (Generic Local and Destination Operating System) that helps users manage and secure their net… | 56 | 2758 | active |
| trzsz/trzsz-ssh trzsz-ssh (tssh) is an SSH client written in Go designed as a drop-in replacement for the OpenSSH client, aiming for full compatibility wit… | 89 | 2756 | active |
| nbio NBIO is a pure Go non-blocking, event-driven network I/O library supporting TLS, HTTP/1.x, and WebSocket, largely compatible with net/http.… | 95 | 2755 | active |
| paullouisageneau/libdatachannel libdatachannel is a standalone C++17 library (with C bindings) implementing WebRTC Data Channels, WebRTC Media Transport, and WebSockets wi… | 87 | 2749 | stable |
| calebmadrigal/trackerjacker A Python CLI tool that maps nearby WiFi networks and their connected devices via raw 802.11 monitor-mode packet capture, similar to nmap bu… | 52 | 2743 | active |
| bloomberg/goldpinger Goldpinger is a Kubernetes debugging tool that runs as a DaemonSet and makes calls between its instances to test and visualize network conn… | 98 | 2741 | active |
| mas-bandwidth/yojimbo yojimbo is a C++ network library for client/server multiplayer games, designed around the needs of competitive games like first-person shoo… | 96 | 2739 | stable |
| ankit0183/Wifi-Hacking A Python-based menu-driven CLI tool that automates Wi-Fi penetration testing by wrapping built-in Kali Linux wireless tools. It supports mo… | 56 | 2733 | active |
| 233boy/Xray A one-click installation and management shell script for the Xray proxy core on Linux servers. It automates TLS setup and lets users add, c… | 88 | 2732 | active |
| I2P I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 91 | 2730 | stable |
| gurucomputing/headscale-ui Headscale-UI is a web frontend for the headscale Tailscale-compatible coordination server, built with SvelteKit and Tailwind CSS. It is dis… | 68 | 2730 | active |
| Unpoller Unpoller is a Go application that polls UniFi network controllers for site, device, and client metrics and exports them to InfluxDB or Prom… | 96 | 2728 | active |
| patterniha/SNI-Spoofing A Python CLI tool that bypasses Deep Packet Inspection (DPI) by manipulating IP and TCP headers, such as spoofing SNI fields. It is used to… | 48 | 2719 | active |
| mubeng/mubeng mubeng is a fast CLI tool written in Go that checks the availability of proxies from a list and rotates your IP address per request via a l… | 72 | 2713 | active |
| 7h30th3r0n3/Evil-M5Project Evil-M5Project is a C++ firmware/tool for M5Stack devices (Cardputer, AtomS3, Fire, Core2) that scans, monitors, and interacts with WiFi ne… | 71 | 2703 | active |
| Submariner Submariner is a CNCF sandbox tool that interconnects the overlay networks of multiple Kubernetes clusters, enabling direct Pod-to-Pod and S… | 98 | 2697 | active |
| pjsip/pjproject PJSIP is an open-source multimedia communication library written in C that implements SIP, SDP, RTP, STUN, TURN, and ICE protocols with hig… | 82 | 2697 | stable |
| lissy93/networking-toolbox Networking Toolbox is a collection of 100+ free, open-source networking utilities for system administrators and network engineers, covering… | 67 | 2696 | active |
| hashicorp/yamux Yamux is a Go library for stream-oriented connection multiplexing over reliable transports like TCP or Unix domain sockets. It enables thou… | 67 | 2694 | stable |
| Packet Sender Packet Sender is a free, open-source cross-platform utility for sending and receiving TCP, UDP, SSL, and DTLS packets, plus HTTP/HTTPS requ… | 83 | 2684 | active |
| rthalley/dnspython dnspython is a DNS toolkit for Python supporting nearly all record types, queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, an… | 87 | 2680 | stable |
| ihciah/shadow-tls ShadowTLS is a TLS camouflage proxy written in Rust that relays a real TLS handshake with a valid certificate of your choice to the firewal… | 27 | 2680 | active |
| Moham3dRiahi/Th3inspector Th3inspector is an all-in-one Perl CLI tool for information gathering (OSINT reconnaissance). It bundles lookups such as website info, whoi… | 36 | 2668 | active |
| kboghdady/youTube_ads_4_pi-hole A shell script and maintained DNS blocklist for blocking YouTube ads via Pi-hole. It provides a regularly updated blacklist file to add to … | 77 | 2660 | active |
| musana/CF-Hero CF-Hero is a Go-based reconnaissance CLI tool that discovers the real origin IP addresses of Cloudflare-protected web applications. It aggr… | 63 | 2640 | active |
| brianshea2/addr.tools A collection of free DNS-based Internet utilities (dynamic DNS, public IP lookup, ACME dns-01 challenge helper, DNS resolver testing) plus … | 69 | 2637 | active |
| honmashironeko/ProxyCat ProxyCat is a self-hosted tunnel proxy pool middleware that turns short-lived proxy IPs into a stable fixed tunnel endpoint over HTTP/SOCKS… | 86 | 2632 | active |
| rbsec/sslscan sslscan is a command-line tool that tests SSL/TLS enabled services to discover supported cipher suites, protocols, key exchange groups, and… | 88 | 2628 | active |
| jacobalberty/unifi-docker A Dockerized packaging of Ubiquiti's UniFi Controller, bundling the controller, Java runtime, and OS dependencies into a single container. … | 79 | 2625 | active |
| theopfr/somo somo is a Rust-based CLI tool that serves as a human-friendly alternative to netstat for inspecting socket and port connections on Linux an… | 90 | 2621 | active |
| pmusolino/Wormholy Wormholy is an iOS library that records all app network traffic made through NSURLSession (including Alamofire and AFNetworking) and lets d… | 82 | 2617 | active |
| FreeRADIUS/freeradius-server FreeRADIUS is a high-performance, highly configurable multi-protocol policy server supporting RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, wr… | 84 | 2614 | stable |
| zhboner/realm Realm is a simple, high-performance network relay server written in Rust that forwards TCP and UDP traffic between endpoints. It supports z… | 94 | 2612 | active |
| PasarGuard PasarGuard is a self-hosted web panel for managing large numbers of proxy accounts, built with Python and React.js. It supports Xray-core a… | 82 | 2608 | active |
| ymyuuu/IPDB IPDB is a hosted API service that provides curated lists of Cloudflare official and reverse-proxy (preferred) IP addresses, updated in real… | 72 | 2604 | active |
| mas-bandwidth/netcode A C library implementing a secure, connection-oriented client/server protocol on top of UDP for real-time multiplayer games. It handles enc… | 96 | 2596 | active |
| clj-commons/aleph Aleph is a Clojure library for asynchronous network communication built on Netty, providing an HTTP server and client plus raw TCP and UDP … | 73 | 2592 | active |
| libpnet/libpnet libpnet is a cross-platform Rust library for low-level networking, providing safe packet construction and parsing, transport protocol imple… | 55 | 2591 | stable |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2587 | active |
| hmgle/graftcp graftcp is a Linux command-line tool that redirects TCP, UDP, and DNS traffic of arbitrary processes to SOCKS5 or HTTP proxies using ptrace… | 91 | 2587 | active |
| pythops/oryx Oryx is a terminal user interface (TUI) application for sniffing and inspecting network traffic in real time using eBPF on Linux. It also p… | 70 | 2581 | active |
| webserver-llc/angie Angie is a high-performance web server and reverse proxy forked from nginx by former nginx developers, designed as a drop-in replacement re… | 97 | 2578 | active |
| lgandx/PCredz PCredz is a Python CLI tool that extracts credentials and authentication tokens (NTLM, Kerberos, HTTP Basic, FTP, SMTP, IMAP, POP3, LDAP, S… | 60 | 2577 | active |
| s0lst1c3/eaphammer EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks, including credential stealing and hostil… | 23 | 2572 | active |
| madeye/proxydroid ProxyDroid is an Android app that routes all device traffic through an upstream SOCKS5 or HTTP proxy without root, using a VpnService-based… | 64 | 2566 | active |
| Polaris Service Discovery & Governance Polaris is an open-source service discovery and governance platform for microservice and distributed architectures, developed by Tencent. I… | 42 | 2564 | active |
| agronholm/anyio AnyIO is a high-level asynchronous concurrency and networking library for Python that runs on top of either asyncio or Trio. It provides Tr… | 93 | 2556 | stable |
| cisagov/Malcolm Malcolm is a containerized network traffic analysis tool suite that ingests full packet capture (PCAP) files, Zeek logs, and Suricata alert… | 98 | 2544 | active |
| Autobahn Autobahn|Python is an open-source library implementing the WebSocket protocol and the Web Application Messaging Protocol (WAMP) for Python … | 99 | 2541 | active |
| x90skysn3k/brutespray Brutespray is a fast, multi-protocol credential brute-forcing tool written in Go. It parses scan output from Nmap, Nessus, Nexpose, JSON, a… | 92 | 2541 | active |
| ntex ntex is a Rust framework for building composable asynchronous network services, supporting HTTP and WebSockets. It is runtime-agnostic, let… | 93 | 2538 | active |
| markqvist/NomadNet Nomad Network is a Python terminal application for encrypted, off-grid mesh communication built on the Reticulum and LXMF protocols. It pro… | 81 | 2538 | active |
| Barre/privaxy Privaxy is a MITM HTTP(S) proxy written in Rust that blocks ads and trackers at the network level, supporting Adblock Plus and uBlock Origi… | 23 | 2537 | active |
| epsylon/ufonet UFONet is a free, P2P and cryptographic 'disruptive toolkit' written in Python for performing DoS and DDoS attacks at Layer 7 (HTTP) via Op… | 79 | 2535 | active |
| iiordanov/remote-desktop-clients Source code for bVNC, aRDP, aSPICE, and Opaque, remote desktop clients for Android supporting VNC, RDP, SPICE, and oVirt/RHEV/Proxmox proto… | 92 | 2529 | active |
| eRPC eRPC is an efficient, extensible, and easy-to-use RPC framework written in Go. It provides a unified peer API for servers and clients, mult… | 23 | 2526 | active |
| Box for Magisk Box for Root (BFR) is a Magisk/KernelSU/APatch module that bundles proxy cores such as clash, sing-box, v2ray, hysteria, and xray to set up… | 77 | 2523 | active |
| pwittchen/ReactiveNetwork ReactiveNetwork is an Android library for observing network connection state and Internet connectivity via RxJava Observables. It supports … | 23 | 2523 | active |
| natesales/q q is a tiny, feature-rich command line DNS client written in Go. It supports querying over UDP, TCP, DNS-over-TLS, DNS-over-HTTPS, DNS-over… | 79 | 2522 | active |
| Termshark Termshark is a terminal user interface for tshark, the Wireshark command-line packet analyzer, offering Wireshark-like packet inspection in… | 23 | 10040 | maintenance |
| sjlleo/netflix-verify A Go-based CLI script that checks whether a server's network (IPv4/IPv6) can access Netflix, including region and unlock-level detection. I… | 33 | 2519 | active |
| OpenMPTCProuter OpenMPTCProuter is an OpenWrt-based router distribution that aggregates multiple internet connections (fiber, ADSL, 4G/5G, etc.) using Mult… | 75 | 2513 | active |
| cloudnativelabs/kube-router Kube-router is a turnkey Kubernetes networking solution that combines pod networking (CNI), an IPVS/LVS-based service proxy, NetworkPolicy … | 96 | 2508 | active |
| NAPALM NAPALM is a Python library that provides a unified API for interacting with network devices from multiple vendors, such as routers and swit… | 79 | 2505 | active |
| h9zdev/WireTapper WireTapper is a wireless OSINT tool that passively detects and maps nearby radio-emitting devices such as Wi-Fi access points, Bluetooth de… | 56 | 2504 | active |
| corundum/corundum Corundum is an open-source FPGA-based network interface card (NIC) and platform for in-network compute, written in Verilog/SystemVerilog. I… | 32 | 2489 | active |
| sabri-zaki/EasY_HaCk EasY_HaCk is a Termux-based penetration testing menu tool that bundles and installs tools like Metasploit, Nmap, SQLmap, and recon-ng for n… | 39 | 2487 | active |