Open-source networking software
2154 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2154 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| emp3r0r emp3r0r is an open-source post-exploitation framework and command-and-control (C2) system written in Go, targeting Linux and Windows hosts.… | 95 | 1790 | active |
| ReversecLabs/C3 C3 (Custom Command and Control) is a C++ framework for rapidly prototyping custom command and control (C2) channels for red team operations… | 61 | 1790 | active |
| Northstar Northstar is a community-made modding framework and custom client for Titanfall 2 that lets players host their own dedicated servers with c… | 96 | 1788 | active |
| immortalwrt-mt798x An ImmortalWrt (OpenWrt fork) variant targeting MediaTek MT798x family routers, providing a full embedded Linux firmware build system with … | 55 | 1788 | active |
| DanielLavrushin/b4 B4 (Bye Bye Big Bro) is a Linux service that bypasses Deep Packet Inspection (DPI) censorship by rewriting network packets via fragmentatio… | 81 | 1787 | active |
| libimobiledevice/usbmuxd usbmuxd is an open-source socket daemon that multiplexes TCP connections over USB between a host computer and iOS devices. It exposes a soc… | 44 | 1787 | active |
| GoSecure/pyrdp PyRDP is a Python Remote Desktop Protocol (RDP) Monster-in-the-Middle (MITM) tool and library. It intercepts RDP connections to capture cre… | 56 | 1786 | active |
| ogham/dog dog is a command-line DNS client written in Rust, serving as a modern alternative to dig. It supports DNS-over-TLS and DNS-over-HTTPS, colo… | 23 | 6691 | maintenance |
| jasonwong1991/easy_proxies Easy Proxies is a Go-based proxy pool manager built on sing-box that aggregates many upstream proxy nodes into a single stable, health-chec… | 84 | 1783 | active |
| TimothyYe/godns GoDNS is a self-hosted dynamic DNS (DDNS) client written in Go that automatically updates DNS records when your IP address changes. It supp… | 93 | 1780 | active |
| simsong/tcpflow tcpflow is a C++ command-line tool that captures TCP connection data and demultiplexes it into per-flow files, one per direction, for proto… | 48 | 1778 | active |
| Allenxuxu/gev gev is a lightweight, high-performance non-blocking TCP network library and WebSocket server for Go, built on the Reactor pattern with epol… | 30 | 1774 | active |
| openelb/openelb OpenELB is an open-source load balancer implementation for exposing Kubernetes LoadBalancer-type Services in bare-metal, edge, and virtuali… | 30 | 1774 | active |
| Septrum101/zteOnu A Go CLI tool that opens factory/telnet mode on ZTE ONU (fiber optic modem) devices via their webFac interface. It authenticates with facto… | 88 | 1767 | active |
| weaveworks/weave Weave Net is a container networking solution that creates a virtual overlay network connecting Docker containers across multiple hosts, clo… | 10 | 6610 | maintenance |
| lwip-tcpip/lwip lwIP is a lightweight, independent implementation of the TCP/IP protocol suite written in C, designed to minimize RAM and ROM usage. It pro… | 74 | 1764 | stable |
| ronf/asyncssh AsyncSSH is a Python library providing asynchronous client and server implementations of the SSHv2 protocol, including SFTP and SCP, built … | 76 | 1760 | stable |
| flik6/Free-Node A repository that aggregates free proxy node information from various public sources and publishes hourly-updated Clash and v2ray subscript… | 74 | 1757 | active |
| emqx/CocoaMQTT CocoaMQTT is an MQTT v3.1.1 and v5.0 client library for iOS, macOS, tvOS, and visionOS written in Swift 5. It supports TCP and WebSocket tr… | 95 | 1753 | active |
| tokio-rs/io-uring A Rust library providing a safe, low-level interface to the Linux io_uring asynchronous I/O kernel API. It exposes submission and completio… | 74 | 1751 | stable |
| ImMALWARE/bash-warp-generator A shell script that generates Cloudflare WARP VPN configuration files for AmneziaWG (WireGuard-based) and Clash (MASQUE-based) clients. It … | 66 | 1747 | active |
| thedev-id/thedev.id thedev.id is a free subdomain service that gives developers a personal identity like yourname.thedev.id for their static sites via CNAME DN… | 55 | 1747 | active |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 76 | 1745 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 99 | 1738 | active |
| samyk/poisontap PoisonTap is a USB-based attack tool built on a Raspberry Pi Zero and Node.js that exploits locked, password-protected computers by emulati… | 32 | 6476 | maintenance |
| SierraSoftworks/tailscale-unifi A set of shell scripts that install and run Tailscale as a persistent systemd service on UniFi OS devices such as UniFi Cloud Gateways. It … | 96 | 1734 | active |
| Whitelist Bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 81 | 1731 | active |
| Shadow Simulator Shadow is a discrete-event network simulator that directly executes real, unmodified application code as native Linux processes, interposin… | 68 | 1727 | active |
| davrodpin/mole Mole is a Go-based CLI application for creating SSH tunnels with a focus on resiliency and user experience. It supports automatic port sele… | 23 | 1727 | stable |
| mtheall/ftpd An FTP server application for Nintendo 3DS, Switch, NDS, and Linux that lets users transfer files to and from consoles over the network. It… | 54 | 1723 | active |
| ghaerr/elks ELKS is an embeddable subset of the Linux operating system targeting 16-bit Intel IA16 processors (8086, 8088, 80186, 80286, NEC V20/V30). … | 92 | 1719 | active |
| openucx/ucx Unified Communication X (UCX) is a production-grade, open-source communication framework for high-bandwidth, low-latency networks. It expos… | 90 | 1715 | stable |
| AdguardTeam/AdguardForiOS AdGuard for iOS is an open-source ad-blocking and privacy app for iPhone and iPad that blocks ads in Safari via content blocking rules. It … | 93 | 1711 | active |
| molenzwiebel/Deceive Deceive is a Windows tray application that lets players appear offline in League of Legends, VALORANT, and Legends of Runeterra by sitting … | 90 | 1711 | active |
| almeidapaulopt/tsdproxy TSDProxy is a self-hosted service that automatically exposes Docker containers on a Tailscale network via a single reverse proxy. Container… | 89 | 1710 | active |
| FastTunnel/FastTunnel FastTunnel is a high-performance, cross-platform intranet penetration (NAT traversal) tool written in C#/.NET that exposes local network se… | 90 | 1703 | active |
| tomerfiliba-org/rpyc RPyC (Remote Python Call) is a transparent and symmetric RPC library for Python that uses object proxying to let code manipulate remote obj… | 66 | 1703 | stable |
| nanomsg/nanomsg nanomsg is a C library implementing lightweight 'scalability protocols' for common messaging patterns such as request/reply, publish/subscr… | 90 | 6297 | maintenance |
| ellermister/mtproxy A one-click shell script and Docker image for installing MTProxy (MTProto proxy) with Fake TLS disguise for Telegram clients. It fronts MTP… | 70 | 1692 | active |
| rwbutler/Connectivity Connectivity is a Swift library that wraps Apple's Reachability to provide a reliable measure of actual Internet connectivity on iOS. It so… | 23 | 1687 | stable |
| IoTClient IoTClient is a C# (.NET Standard 2.0) library implementing clients for common industrial IoT communication protocols, including ModBus (TCP… | 56 | 1685 | active |
| alebeck/boring boring is a lightweight command-line SSH tunnel manager written in Go. It manages local, remote, and dynamic (SOCKS5) port forwarding tunne… | 89 | 1682 | active |
| NoDPI NoDPI is a Python utility that bypasses Deep Packet Inspection (DPI) censorship by running a local proxy server that fragments TLS ClientHe… | 78 | 1679 | active |
| alibaba/kt-connect KtConnect is a CLI toolkit that helps developers work with Kubernetes dev environments more efficiently. It lets you connect to remote clus… | 23 | 1677 | active |
| Home Assistant Community Apps The Home Assistant Community Add-ons repository, a curated collection of high-quality add-ons (apps) for Home Assistant installations. It s… | 77 | 1676 | stable |
| dirkjanm/krbrelayx A Python toolkit for abusing Kerberos in Active Directory environments, including Kerberos relaying and unconstrained delegation attacks. I… | 61 | 1676 | active |
| Asuswrt-Merlin Asuswrt-Merlin is an enhanced third-party firmware for Asus routers, based on Asus's stock Asuswrt firmware, focusing on bug fixes, tweaks,… | 75 | 6207 | maintenance |
| projectdiscovery/shuffledns shuffleDNS is a Go wrapper around massDNS for fast active subdomain enumeration via bruteforce and DNS resolution with smart wildcard filte… | 82 | 1672 | active |
| lwfinger/rtw88 A downstream backport of the Realtek rtw88 series WiFi 5 drivers from the Linux wireless-next repository, supporting PCIe, SDIO, and USB ch… | 66 | 1672 | active |
| Lozy/danted A shell script that automates installing and configuring the Dante SOCKS5 proxy server on Linux systems, with Docker support. It auto-detec… | 32 | 1672 | active |
| facebook/mvfst MVFST (move fast) is a C++ client and server implementation of the IETF QUIC transport protocol developed by Facebook. It provides a perfor… | 77 | 1667 | active |
| pkg/sftp A Go library providing SFTP client and server support on top of go.crypto/ssh. It enables file system operations on remote SSH servers and … | 80 | 1663 | stable |
| node-opcua/node-opcua node-opcua is a full OPC UA (IEC 62541) protocol stack for Node.js and the browser, written in TypeScript. It provides client, server, disc… | 97 | 1661 | stable |
| summitt/Nope-Proxy NoPE Proxy is a Burp Suite extension that adds TCP and UDP traffic interception, a configurable DNS server, and a non-HTTP man-in-the-middl… | 23 | 1660 | active |
| WangYihang/Platypus Platypus is a cross-platform reverse-shell and host management hub written in Go. Agents on managed machines dial back to a central server … | 68 | 1659 | active |
| sn4k3/NetSonar NetSonar is a cross-platform network diagnostics and monitoring application written in C#. It probes hosts and services over many protocols… | 88 | 1658 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6122 | maintenance |
| x-falcon/Virtual-Hosts An Android app that lets users customize the hosts file on their device without root access by implementing a local VPN service. It support… | 47 | 1655 | active |
| P1sec/QCSuper QCSuper is a Python CLI tool that communicates with Qualcomm-based phones and modems via the Diag (QCDM) protocol to capture raw 2G/3G/4G (… | 85 | 1653 | active |
| AltraMayor/gatekeeper Gatekeeper is the first open-source DDoS protection system, built on DPDK for high-performance packet processing. It uses a geographically … | 66 | 1649 | active |
| AdGuard Home For Android (Magisk Module) A Magisk module that runs AdGuard Home on rooted Android devices to block ads by redirecting and filtering DNS requests. It ships with buil… | 87 | 1638 | active |
| ViaVersion/ViaVersion ViaVersion is a Minecraft server plugin that allows newer client versions to connect to older server versions by translating protocol diffe… | 97 | 1637 | stable |
| WireGuard/wireguard-android The official Android GUI application for WireGuard, a fast and modern VPN. It opportunistically uses the in-kernel WireGuard implementation… | 69 | 1628 | stable |
| wiredoor/wiredoor Wiredoor is a self-hosted ingress-as-a-service platform that exposes services running in private or local networks to the internet via reve… | 85 | 1622 | active |
| ikemen-engine/Ikemen-GO Ikemen GO is an open-source fighting game engine written in Go that is backward-compatible with M.U.G.E.N 1.1 Beta resources while adding n… | 98 | 1620 | active |
| MayersScott/rkn-block-checker A Python CLI tool that diagnoses whether your connection is in an RKN/TSPU-blocked zone and classifies the type of block (DNS poisoning, TC… | 78 | 1620 | active |
| iotexproject/iotex-core The official Go implementation of the IoTeX blockchain protocol, a modular DePIN-focused Layer-1 EVM-compatible network. It provides the fu… | 99 | 1616 | active |
| jselbie/stunserver STUNTMAN is an open source STUN server and client implementation in C++, compliant with RFCs 5389, 5769, and 5780 with backwards compatibil… | 65 | 1616 | stable |
| fofapro/fapro FaPro is a free, cross-platform, single-file mass network protocol server simulator written in Python. It can start or stop many fake netwo… | 23 | 1614 | active |
| OpenAtomFoundation/TobudOS TobudOS (formerly TencentOS Tiny) is a real-time operating system for IoT devices, incubated by the OpenAtom Foundation after being donated… | 23 | 5939 | maintenance |
| SoCo SoCo is a Python library for programmatically controlling Sonos speakers over the local network, supporting device discovery, playback cont… | 93 | 1610 | active |
| xtaci/smux Smux is a stream multiplexing library for Go that runs many logical streams over a single reliable connection such as TCP or KCP. It minimi… | 63 | 1607 | stable |
| FireHOL FireHOL is a Linux firewall management tool built on iptables/ipsets, paired with a repository of IP blocklists dynamically updated via the… | 52 | 1604 | active |
| miniupnp/miniupnp MiniUPnP is a lightweight ANSI C implementation of the UPnP Internet Gateway Device (IGD) specifications, comprising a client library (mini… | 94 | 1602 | stable |
| blizzless/blizzless-diiis DiIiS (Blizzless) is a fully-functional open-source server emulator for Diablo III: Reaper of Souls, written in C# on .NET. It implements a… | 63 | 1602 | active |
| yuiamoroll/EldenRingSeamlessCoopRelease A release mirror for the Elden Ring Seamless Co-op mod, which enables seamless multiplayer co-op in Elden Ring without summon restrictions.… | 94 | 1600 | active |
| embox/embox Embox is a highly configurable POSIX-compliant real-time operating system for resource-constrained embedded systems and microcontrollers. I… | 89 | 1599 | active |
| HelenOS/helenos HelenOS is a portable microkernel-based multiserver operating system written from scratch in C, decomposing OS functionality like file syst… | 67 | 1599 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 50 | 1599 | active |
| Clats97/ClatScope ClatScope Info Tool is a Python-based OSINT utility offering 70+ reconnaissance features including geolocation, DNS, WHOIS, phone, email, a… | 43 | 1598 | active |
| libssh2/libssh2 libssh2 is a client-side C library implementing the SSH2 protocol, licensed under the revised BSD license. It provides session establishmen… | 68 | 1596 | stable |
| tendermint/tendermint Tendermint Core is a Byzantine Fault Tolerant (BFT) consensus engine and blockchain application platform written in Go. It securely replica… | 66 | 5864 | maintenance |
| linuxmint/warpinator Warpinator is a Linux Mint application for sending and receiving files across a local network. It discovers nearby machines automatically v… | 86 | 1595 | active |
| EmbarkStudios/quilkin Quilkin is a non-transparent UDP proxy built in Rust for large-scale multiplayer dedicated game server deployments. It adds security, acces… | 92 | 1594 | active |
| FDio/vpp FD.io's Vector Packet Processing (VPP) is an extensible, high-performance packet-processing framework providing production-quality switch a… | 77 | 1587 | stable |
| mk6i/open-oscar-server Open OSCAR Server is a self-hostable instant messaging server written in Go that implements the OSCAR, TOC1, and TOC2 protocols, making it … | 93 | 1585 | active |
| lmc999/auto-add-routes A set of Windows batch scripts and route tables that add China IP/domain split routing to full-tunnel VPN clients like WireGuard and OpenVP… | 76 | 1583 | active |
| Waujito/youtubeUnblock A C-based tool that bypasses YouTube's SNI-based detection systems, originally created to work around YouTube throttling in Russia. It runs… | 74 | 1582 | active |
| ZhiXuanWang/cf-speed-dns A Python tool that dynamically discovers the fastest Cloudflare CDN IPs by running CloudflareSpeedTest on a schedule (every 5 minutes via G… | 72 | 1582 | active |
| homeassistant-apps/app-cloudflared A Home Assistant add-on that runs Cloudflared to create a secure Cloudflare Tunnel to your Home Assistant instance. It enables remote acces… | 99 | 1578 | active |
| hakluke/hakrevdns hakrevdns is a small, fast Go CLI tool that performs reverse DNS (PTR) lookups on large batches of IP addresses. It maps IPs to hostnames, … | 72 | 1577 | stable |
| aleskxyz/reality-ezpz A single-command bash installer that deploys sing-box or xray proxy servers (vless, TUIC, hysteria2, shadowtls) with reality or TLS encrypt… | 54 | 1573 | active |
| moq-dev/moq An open-source implementation of Media over QUIC (MoQ), a next-generation live media protocol delivering WebRTC-like real-time latency at m… | 96 | 1571 | active |
| hcavarsan/kftray kftray is a cross-platform Kubernetes port-forward manager with a desktop tray GUI (Tauri) and a companion terminal UI (kftui), built in Ru… | 91 | 1571 | active |
| anderspitman/SirTunnel SirTunnel is a minimal, self-hosted, zero-configuration alternative to ngrok built on Caddy, OpenSSH, and a 50-line Python script. It expos… | 32 | 1571 | stable |
| Leon406/SubCrawler A Kotlin-based tool that automatically crawls and health-checks (via Google ping) free public proxy nodes for protocols like V2Ray, Shadows… | 77 | 1570 | active |
| wikiZ/RedGuard RedGuard is a C2 front flow control tool written in Go that acts as a filtering reverse proxy in front of command-and-control servers. It h… | 23 | 1569 | active |
| zhanghanyun/backtrace A Go-based command-line tool that tests return (backhaul) routing paths across China's three major ISPs (China Telecom, China Unicom, China… | 31 | 1568 | active |
| SagerNet/SagerNet SagerNet is a universal proxy toolchain application for Android, written in Kotlin, supporting multiple proxy protocols for circumventing i… | 10 | 5733 | maintenance |
| system-linux/FazJammer FazJammer is an ESP8266-based firmware project that turns a NodeMCU plus an NRF24L01+ radio module into a device that jams Wi-Fi, BLE, and … | 39 | 1562 | active |