Open-source networking software
2154 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2154 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| droe/sslsplit SSLsplit is a transparent SSL/TLS interception proxy for man-in-the-middle attacks against encrypted network connections. It terminates TLS… | 51 | 1877 | maintenance |
| trimstray/sandmap sandmap is a shell-based CLI wrapper around the Nmap engine that simplifies network and system reconnaissance. It offers 31 modules with 45… | 32 | 1866 | maintenance |
| SpoofMAC SpoofMAC is a Python command-line tool that changes (spoofs) your computer's MAC address in one command, handling the Wi-Fi disassociation … | 32 | 1865 | maintenance |
| net-creds A Python command-line tool that sniffs passwords, hashes, and other sensitive data from a live network interface or a pcap file. It reassem… | 32 | 1865 | maintenance |
| n0a/telegram-get-remote-ip A Python CLI script that reveals the IP address of a Telegram voice call interlocutor by capturing and analyzing traffic with tshark. It ex… | 32 | 1857 | maintenance |
| EsotericSoftware/kryonet KryoNet is a Java library providing a simple API for efficient TCP and UDP client/server communication built on NIO, using the Kryo seriali… | 23 | 1852 | maintenance |
| ztncui ztncui is a web-based user interface for managing a standalone ZeroTier network controller. It is a Node.js/Express application that talks … | 32 | 1851 | maintenance |
| cyweb/hammer A Python 3 command-line script for performing DDoS (denial-of-service) flood attacks against target servers. It is a simple offensive secur… | 44 | 1847 | maintenance |
| kbumsik/VirtScreen VirtScreen is a Linux GUI application that creates a virtual secondary display using XRandR and shares it over VNC, letting you use an iPad… | 23 | 1839 | maintenance |
| libquic libquic is a standalone C++ library packaging Chromium's QUIC implementation with minimal dependencies (only embedded BoringSSL), built via… | 23 | 1833 | maintenance |
| perlin-network/noise noise is an opinionated, easy-to-use peer-to-peer networking stack for decentralized applications and cryptographic protocols, written in G… | 23 | 1831 | maintenance |
| Ha3MrX/DDos-Attack A simple Python script for launching DDoS (denial of service) attacks against online targets. It is a command-line tool intended for learni… | 62 | 1815 | maintenance |
| jpbarrette/curlpp cURLpp is a C++ object-oriented wrapper around the libcURL client-side URL transfer library. It adds type safety, exception safety, and C++… | 49 | 1801 | maintenance |
| huolizhuminh/NetWorkPacketCapture An Android app that captures network packets using a local VPN service, showing live connections per app and parsing/saving HTTP (and parti… | 32 | 1799 | maintenance |
| enki/libev libev is a high-performance, full-featured event loop library for C, loosely modelled after libevent but faster, smaller, and more featuref… | 32 | 1789 | maintenance |
| sysdream/ligolo Ligolo is a lightweight Go tool for establishing SOCKS5 or TCP tunnels over reverse TLS connections, aimed at penetration testers pivoting … | 32 | 1786 | maintenance |
| mrh0wl/Cloudmare Cloudmare is a Python CLI tool that discovers the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula when their DNS i… | 10 | 1785 | maintenance |
| exentriquesolutions/nip.io NIP.IO is a wildcard DNS service that maps hostnames containing an embedded IP address (e.g. 10.0.0.1.nip.io) back to that IP address, impl… | 68 | 1774 | maintenance |
| lwfinger/rtl8188eu A stand-alone out-of-tree Linux kernel driver for Realtek RTL8188EU USB Wi-Fi adapters. It is built from source with make against installed… | 32 | 1770 | maintenance |
| felixge/node-ar-drone A Node.js client library implementing the networking protocols for Parrot AR Drone 2.0 quadcopters. It provides a high-level Client API for… | 32 | 1767 | maintenance |
| rtl88x2bu driver An out-of-tree Linux kernel driver for Realtek rtl88x2bu USB Wi-Fi adapters, updated from Realtek's vendor source to build against current … | 74 | 1756 | maintenance |
| gnab/rtl8812au A Linux kernel driver for Realtek rtl8812au-based 802.11ac dual-band USB wireless adapters, forked from Realtek's v4.2.2 source and patched… | 32 | 1745 | maintenance |
| jtesta/ssh-mitm A penetration testing tool that intercepts SSH connections by running a patched OpenSSH v7.5p1 server as a proxy between a victim and their… | 10 | 1743 | maintenance |
| gamelinux/passivedns PassiveDNS is a network sniffer written in C that passively collects DNS server replies from a live interface or pcap files and logs them i… | 77 | 1737 | maintenance |
| mstsc.js RDPY is a pure Python implementation of the Microsoft Remote Desktop Protocol (RDP) built on the Twisted event-driven network engine, suppo… | 32 | 1733 | maintenance |
| m57/dnsteal dnsteal is a fake DNS server written in Python that enables stealthy exfiltration of files from a victim machine via DNS requests. It suppo… | 32 | 1731 | maintenance |
| brektrou/rtl8821CU An out-of-tree Linux kernel driver for Realtek RTL8811CU/RTL8821CU USB Wi-Fi adapters, written in C. It supports DKMS-based automatic rebui… | 32 | 1724 | maintenance |
| antirez/hping hping3 is a command-line network tool that sends custom TCP/IP packets and displays target replies, similar to ping but supporting arbitrar… | 32 | 1721 | maintenance |
| lance-gg/lance Lance is a Node.js-based real-time multiplayer game server with a companion client-side library that synchronizes game state between server… | 23 | 1721 | maintenance |
| rufengsuixing/luci-app-adguardhome A LuCI web interface plugin for OpenWrt that manages AdGuardHome, a network-wide DNS-based ad blocker. It provides core download/update, DN… | 23 | 1708 | maintenance |
| ssb-server ssb-server is the gossip and replication server for Secure Scuttlebutt, a peer-to-peer append-only log store that acts as a database, ident… | 23 | 1707 | maintenance |
| dperson/samba A Docker container image that packages the Samba server, providing SMB/CIFS file and print sharing for Windows, Linux, and other clients. S… | 32 | 1706 | maintenance |
| swiftsocket/SwiftSocket SwiftSocket is a Swift library providing a simple interface for TCP and UDP socket connections on Apple platforms, supporting both client a… | 23 | 1692 | maintenance |
| igrigorik/em-websocket em-websocket is an async WebSocket server library for Ruby built on EventMachine. It supports all WebSocket protocol drafts in use (75, 76,… | 32 | 1689 | maintenance |
| krisnova/boopkit boopkit is a Linux rootkit and backdoor written in C that uses eBPF to enable remote command execution over raw TCP. It requires prior priv… | 23 | 1683 | maintenance |
| shayne/go-wsl2-host A Go program that installs as a Windows service and automatically updates the Windows hosts file with the WSL2 VM's IP address. It maps dis… | 23 | 1680 | maintenance |
| SECFORCE/sparta SPARTA is a Python GUI application that simplifies network infrastructure penetration testing by streamlining the scanning and enumeration … | 23 | 1671 | maintenance |
| securesocketfunneling/ssf Secure Socket Funneling (SSF) is a cross-platform network tool and toolkit that multiplexes TCP and UDP traffic through a single TLS-encryp… | 23 | 1669 | maintenance |
| NitroShare NitroShare is a cross-platform desktop application for transferring files between devices on a local network, built with C++ and Qt. It fea… | 33 | 1664 | maintenance |
| Adminisme/ServerScan ServerScan is a high-concurrency network scanning and service detection tool written in Go, designed for intranet lateral information gathe… | 23 | 1656 | maintenance |
| yaoweibin/nginx_tcp_proxy_module A third-party Nginx module written in C that adds TCP proxying capabilities to Nginx, including upstream load balancing with ip_hash, activ… | 32 | 1646 | maintenance |
| contribsys/einhorn Einhorn is a language-independent shared socket manager that runs and supervises multiple copies of a long-lived process, opening server so… | 63 | 1645 | maintenance |
| specialunderwear/Hosts.prefpane A macOS System Preferences pane providing a Cocoa GUI for editing /etc/hosts, with input validation and per-entry enable/disable toggles. I… | 23 | 1631 | maintenance |
| bdamele/icmpsh icmpsh is a simple reverse ICMP shell tool with a Windows slave (client) written in C and a portable master (server) implemented in C, Perl… | 32 | 1627 | maintenance |
| frainzy1477/luci-app-clash A LuCI web interface plugin for OpenWrt routers that manages the Clash rule-based proxy client. It provides subscription handling, config e… | 23 | 1623 | maintenance |
| spolu/warp Warp is a Go-based CLI tool for securely sharing a live terminal session with others via a simple `warp open` command. Clients connect read… | 23 | 1618 | maintenance |
| funny/link A Go network-layer scaffolding library that provides session management primitives (Session, Manager, Server, Channel) decoupled from any s… | 23 | 1613 | maintenance |
| Mixiaoxiao/Arduino-HomeKit-ESP8266 An Arduino library implementing a native Apple HomeKit accessory server for the ESP8266 (with an ESP32 variant), allowing microcontroller p… | 23 | 1612 | maintenance |
| danderson/netboot A Go repository providing implementations of network boot protocols (DHCPv4, TFTP, pcap) plus Pixiecore, an all-in-one CLI tool for easily … | 58 | 1610 | maintenance |
| tenta-browser/tenta-dns Tenta DNS is a Go-based DNS server suite combining an authoritative DNS server, a recursive resolver with DNSSEC and DNS-over-TLS support, … | 32 | 1601 | maintenance |
| sairson/Yasso Yasso is a Go-based intranet penetration testing toolkit that combines service brute-forcing (RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, … | 23 | 1595 | maintenance |
| Shrine Shrine is a TempleOS distribution that adds networking, a Unix-like shell (Lambda Shell), and a package manager while staying 99% compatibl… | 10 | 1587 | maintenance |
| SuperHouse/esp-open-rtos An open source FreeRTOS-based software framework for the ESP8266 WiFi microcontroller, developed by the community as an alternative to Espr… | 23 | 1583 | maintenance |
| zidansec/CloudPeler CrimeFlare is a PHP command-line OSINT tool that attempts to reveal the real origin IP address behind websites protected by Cloudflare's WA… | 10 | 1575 | maintenance |
| Dr-Incognito/V2Ray-Desktop V2Ray Desktop is a cross-platform GUI proxy client built with Qt5 and QML2 that supports Shadowsocks(R), V2Ray, and Trojan protocols, using… | 23 | 1563 | maintenance |
| osy/Jitterbug Jitterbug is an iOS app that launches other iOS apps with a debugger attached from a second iOS device over WiFi, enabling JIT compilation … | 10 | 1559 | maintenance |
| xmtggh/VideoCalling An Android demo app for peer-to-peer audio and video calling over a local network, connecting directly via IP address and port. It demonstr… | 32 | 1554 | maintenance |
| csujedihy/proximac Proximac is an open-source command-line alternative to Proxifier that forces any application's traffic through a SOCKS5 proxy on macOS. It … | 23 | 1553 | maintenance |
| eclipse-paho/paho.mqtt.embedded-c The Eclipse Paho MQTT C/C++ client library for embedded platforms, offering low-level MQTT packet serialization plus higher-level C and C++… | 60 | 1545 | maintenance |
| indutny/node-ip A Node.js library providing IP address utilities for parsing, validating, comparing, and converting IPv4 and IPv6 addresses. It supports su… | 32 | 1542 | maintenance |
| gtxaspec/wz_mini_hacks A firmware modification toolkit for Ingenic T20/T31 based Wyze IP cameras that provides root access and extra features via a micro-SD card,… | 67 | 1533 | maintenance |
| ChirpStack v3 ChirpStack Network Server is an open-source LoRaWAN network server written in Go, responsible for handling and de-duplicating uplink data f… | 10 | 1513 | maintenance |
| hatRiot/zarp Zarp is a Python-based network attack tool focused on exploiting local networks by abusing networking protocols rather than systems. It pro… | 23 | 1510 | maintenance |
| Kevin-Robertson/Powermad Powermad is a set of PowerShell functions for exploiting Active Directory's default MachineAccountQuota and Active Directory-Integrated DNS… | 32 | 1508 | maintenance |
| oooldking/script A collection of Linux shell scripts for VPS server benchmarking, including SuperBench (download, I/O, and network speed tests), SuperSpeed … | 33 | 1503 | maintenance |
| opcua-asyncio A pure Python implementation of the OPC-UA (IEC 62541) protocol providing both client and server libraries with high-level and low-level AP… | 95 | 1497 | maintenance |
| housleyjk/ws-rs WS-RS is a lightweight, event-driven WebSocket library for Rust implementing RFC 6455 on top of MIO. It handles multiple connections on a s… | 32 | 1495 | maintenance |
| tj/axon Axon is a message-oriented socket library for Node.js heavily inspired by ZeroMQ. It provides lightweight messaging patterns such as push/p… | 32 | 1491 | maintenance |
| antonioCoco/RemotePotato0 RemotePotato0 is a Windows privilege escalation exploit that abuses the DCOM activation service to trigger NTLM authentication from privile… | 23 | 1471 | maintenance |
| TrueTime TrueTime is an (S)NTP client library for Android that provides the true current time, immune to manual device clock changes. It is written … | 23 | 1470 | maintenance |
| FlashDetector Daedalus is an Android app that modifies DNS resolution without root access by creating a local VPN tunnel to intercept DNS requests. It su… | 66 | 1467 | maintenance |
| devopsgroup-io/vagrant-hostmanager A Vagrant plugin that automatically manages the hosts file on guest machines and optionally the host machine. It enables hostname resolutio… | 23 | 1460 | maintenance |
| mrash/fwknop fwknop implements Single Packet Authorization (SPA), a next-generation port knocking scheme that conceals services behind a default-drop fi… | 57 | 1459 | maintenance |
| SySS-Research/Seth Seth is a Python and Bash proof-of-concept tool that performs a man-in-the-middle attack on RDP connections via ARP spoofing, downgrading t… | 52 | 1457 | maintenance |
| rxi/dyad Dyad.c is a lightweight, portable asynchronous networking library for C, distributed as just two source files. It supports building small T… | 10 | 1457 | maintenance |
| pytorch/gloo Gloo is a C++ collective communications library providing primitives like barrier, broadcast, and allreduce for multi-machine machine learn… | 75 | 1456 | maintenance |
| mafintosh/chromecasts A Node.js library for discovering Chromecast devices on the local network and controlling media playback on them. It provides an event-base… | 32 | 1448 | maintenance |
| Harvey-OS/harvey Harvey OS is a re-release of the final 4th Edition of Plan 9 from Bell Labs, a distributed operating system originally released in 2002. It… | 10 | 1444 | maintenance |
| PowerTunnel PowerTunnel is an extensible local proxy server built on LittleProxy that bypasses government censorship by evading Deep Packet Inspection,… | 23 | 1442 | maintenance |
| Mange/rtl8192eu-linux-driver A Linux kernel driver for the Realtek rtl8192eu wireless chipset, based on official Realtek/D-Link sources with community patches to keep i… | 74 | 1436 | maintenance |
| FunnyWolf/pystinger Pystinger is a Python tool that establishes a SOCKS4a proxy and port mapping through a webshell (PHP, JSP, or ASPX) on a compromised server… | 23 | 1425 | maintenance |
| Kitura BlueSocket is a Swift socket framework for TCP and UDP networking, packaged via Swift Package Manager. It provides a cross-platform abstrac… | 23 | 1417 | maintenance |
| aregm/nff-go NFF-Go is a set of Go libraries for building and deploying high-performance, cloud-native network functions (NFs) on top of DPDK and AF_XDP… | 23 | 1416 | maintenance |
| diracdeltas/FastestWebsiteEver A novelty website that fits entirely within a single TCP packet, served by a bespoke webserver written in C. It uses aggressive tricks like… | 32 | 1411 | maintenance |
| juhovh/shairplay A portable open-source AirPlay/RAOP server that emulates an AirPort Express, allowing iOS and macOS devices to stream audio to it. It is wr… | 32 | 1406 | maintenance |
| google/crfs CRFS is a read-only FUSE filesystem that mounts container images directly from a container registry without pulling them locally first. It … | 10 | 1405 | maintenance |
| Twister Twister is an experimental peer-to-peer microblogging application with a core daemon (twisterd). It uses a Bitcoin-like blockchain for dece… | 32 | 1404 | maintenance |
| 649/Memcrashed-DDoS-Exploit A Python CLI exploit tool that finds exposed Memcached servers via the Shodan API and sends forged UDP packets to them to amplify DDoS atta… | 32 | 1398 | maintenance |
| hashicorp/mdns A simple mDNS (Multicast DNS) client and server library written in Go. It enables publishing and discovering services on a local network wi… | 82 | 1391 | maintenance |
| NytroRST/NetRipper NetRipper is a Windows post-exploitation tool that uses API hooking to intercept network traffic, capturing both plain-text and encrypted d… | 32 | 1389 | maintenance |
| Reinisch/Darkest-Dungeon-Unity A Unity engine port of the game Darkest Dungeon, recreating nearly all of the original's features including heroes, combat, dungeon generat… | 23 | 1382 | maintenance |
| freelan-developers/freelan FreeLAN is an open-source, peer-to-peer VPN application written in C++ that creates secure virtual networks over the internet. It supports … | 23 | 1378 | maintenance |
| fnmsd/MySQL_Fake_Server A pure Python3 fake MySQL server used in penetration testing to exploit MySQL client file reading and trigger Java deserialization attacks … | 32 | 1377 | maintenance |
| spacehuhn/esp8266_beaconSpam An Arduino sketch for the ESP8266 that broadcasts fake WiFi beacon frames, making scanners show up to a thousand access points with custom … | 23 | 1377 | maintenance |
| DNSPod/dnspod-sr dnspod-sr is a high-performance recursive DNS server written in C by DNSPod, designed for Linux. It claims roughly double the throughput of… | 57 | 1375 | maintenance |
| Terminals-Origin/Terminals Terminals is a secure, multi-tab remote desktop and terminal services client for Windows that supports RDP, VNC, VMRC, SSH, Telnet, ICA Cit… | 52 | 1367 | maintenance |
| cisco/joy Joy is a libpcap-based C package that captures network traffic and extracts flow and intraflow features (packet timing, byte distributions,… | 10 | 1367 | maintenance |
| eycorsican/go-tun2socks A tun2socks implementation written in Go that routes traffic from a TUN network interface through a SOCKS proxy. It can be used as a comman… | 10 | 1366 | maintenance |
| koolshare/ledesoft Softcenter, the Koolshare plugin/software center for LEDE (OpenWrt-based) x64 router firmware. It hosts and manages third-party router plug… | 50 | 1331 | maintenance |
| nmathewson/libevent_obsolete An obsolete mirror of Nick Mathewson's libevent repository; the official libevent project lives at github.com/libevent/libevent. Libevent i… | 32 | 1330 | maintenance |