network
Freely manage your devices. The open source, multi-platform, self-hosted, feature packed web site for remote device management.
WiFiman is here to save your network from sluggish surfing, endless buffering, and congested data channels.
- Detect available WiFi networks and Bluetooth LE devices instantly.
- Scan network subnets for additional details on detected devices, such as Bonjour, SNMP, NetBIOS, and Ubiquiti discovery protocols.
- Connect to your UniFi network remotely via Teleport - a free, zero-configuration VPN.
End-to-end encrypted IPv6 networking to connect worlds. Yggdrasil is an overlay network implementation of a new routing scheme for mesh networks. It is designed to be a future-proof decentralised alternative to the structured routing protocols commonly used today on the Internet and other networks.
a fully featured network monitoring system that provides a wealth of features and device support.
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems including Cisco, Linux, FreeBSD, Juniper, Brocade, Foundry, HP and many more.
Go CLI and Library for quickly mapping organization network ranges using ASN information.
Network recon framework.
IVRE is an open-source framework for network recon. It relies on open-source well-known tools (Nmap, Masscan, ZGrab2, ZDNS and Zeek (Bro)) to gather data (network intelligence), stores it in a database (MongoDB is the recommended backend), and provides tools to analyze it.
A Turn-key Suricata-based Network Detection and Response System. SELKS is now Clear NDR - Community
As the next generation open source turnkey Suricata implementation from Stamus Networks, the Clear NDR - Community edition is the successor to SELKS. We incorporated many lessons learned from the 10 years of SELKS innovation and user feedback into this platform.
TraceWrangler is a network capture file toolkit running on Windows (or on Linux, using WINE) that supports PCAP as well as the new PCAPng file format, which is now the standard file format used by Wireshark. The most prominent use case for TraceWrangler is the easy sanitization and anonymization of PCAP and PCAPng files (sometimes called "trace files", "capture files" or "packet captures"), removing or replacing sensitive data while being easy to use.
An open-source router that you can manage from a browser, a terminal CLI, or directly from your AI agents (Claude Desktop, OpenCode, Cline, GitHub Copilot). Born as a router-on-a-stick for the Le Potato (or any ARM SBC running Armbian/Ubuntu), it also installs and runs on x86 — mini-PCs, thin clients, and VMs — where it adapts the network topology to however many NICs the box actually has. Manages 802.1Q VLANs, DHCP, DNS, firewall rules, static routes, and VPN (Tailscale, WireGuard, Nebula) — all from a browser, over SSH, or through a standard MCP server. Still a potato at heart either way.
Related contents:
RDAP command line client. OpenRDAP is a command line client for the Registration Data Access Protocol, written in Go.
RDAP is a replacement for WHOIS, which provides domain name & IP address registration information in JSON format over HTTP.
Easy, direct connections that punch through NATs & stay connected as network conditions change.
Dumb pipes are Iroh Connections. The dumbpipe tool is a 200-line wrapper around the iroh rust crate. You can use the iroh Endpoint to create a connection to use as a dumb pipe in your own app.
Pings a number of targets at once, collecting their response times in histograms. Deploy at strategic points in your network to detect weak links and gain insight to your network's topology.
Network Analysis Tool.
BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack.
Programming Protocol-independent Packet Processors (P4) is a domain-specific language for network devices, specifying how data plane devices (switches, NICs, routers, filters, etc.) process packets.
Command-line utility for limiting an adapter's bandwidth.
Wonder Shaper is a script that allows the user to limit the bandwidth of one or more network adapters. It does so by using iproute's tc command, but greatly simplifies its operation.
A simple wrapper over nmcli using wifiscanner made in rust.
Any File. Any Device. Cross-platform Network File Transfer Application. A cross-platform network file transfer application designed to make transferring any file to any device as painless as possible.
Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN lookup.
Related contents:
An open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices.
Meshtastic® is a project that lets you use inexpensive LoRa radios as a long range off-grid communicator for areas without reliable cellular service. These radios are great for hiking, skiing, paragliding - essentially any hobby where you don't have reliable internet access. Each member of the mesh can send and view text messages and enable optional GPS based location features.
- Meshtastic @ GitHub.
- Episode 584 - Captain Meshtastic and the Solar Cowboy @ Linux Unplugged.
- Episode 125 - Tiny Mini Micro Systems FTW @ Self Hosted Podcast.
- France public channel @ Meshtastic's Discourse.
- Connaissez-vous le réseau MESHTASTIC ? et sa version GAULIX ? @ Framboise 314 :fr:.
- Episode #117: Retreat to attack @ Changelog & Friends.
- Meshtastic - Le réseau mesh radio qui fonctionne même quand tout s'effondre @ Korben :fr:.
- Gadgets For People Who Don't Trust The Government @ Benn Jordan's YouTube.
- Quand LORA relie le monde @ Blog Tech :fr:.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.
RouterOS is the operating system of RouterBOARD
It can also be installed on a PC and will turn it into a router with all the necessary features - routing, firewall, bandwidth management, wireless access point, backhaul link, hotspot gateway, VPN server and more.
Network & IT Training Courses Network Walks offers a wide range of IT & Network Training Courses spanning from Cisco CCNA, CCNP, CCIE till Huawei HCNA, HCNP...
Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.
A multi-platform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use.
Cloonix is an AGPLv3 software that constitute a tool to create networks of kvm virtual machines or crun containers. It provides a graphical interactive canvas showing the topology for your network, cloonix is a virtualisation hypervisor.
Open Source Network Management System.
OpenWISP is a modular network management system built on top of OpenWRT (but designed to allow supporting multiple embedded operating systems) that allows managing and automating several aspects of IT network deployment, monitoring and management.
Exploitation Framework for Embedded Devices. It consists of various modules that aid penetration testing operations.
Network Analysis & Packet Capture. It's amazing what you discover when you start looking.
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
This tool automates Cisco Catalyst SD-WAN lab deployment inside Cisco Modeling Labs (CML).
Wireguard GUI is a graphic tool that helps you to edit existing confs of Wireguard. A GUI a manage Wireguard connections on Linux.
The ZMap Project is a collection of open source measurement tools for performing large-scale studies of the hosts and services that compose the public Internet.
ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
Related contents:
A self-hosted, real-time port monitoring and discovery tool.
By auto-discovering services on your systems, portracker provides a live, accurate map of your network. It helps eliminate manual tracking in spreadsheets and prevents deployment failures caused by port conflicts.
Related contents:
The Emulated Virtual Environment For Network, Security and DevOps Professionals.
Real Intelligence Threat Analytics (R-I-T-A) is an open-source framework for detecting command and control communication through network traffic analysis. The RITA framework ingests Zeek logs or PCAPs converted to Zeek logs for analysis.
🤖 The Modern Port Scanner 🤖.
RustScan is a modern take on the port scanner. Sleek & fast. All while providing extensive extendability to you.
Not to mention RustScan uses Adaptive Learning to improve itself over time, making it the best port scanner for you.
OpenZiti is a free and open source project focused on bringing zero trust networking principles directly into any application. The project provides all the pieces required to implement a zero trust overlay network and provides all the tools necessary to integrate zero trust into your existing solutions. The OpenZiti project believes the principles of zero trust shouldn't stop at your network, those ideas belong in your application.
Open Network Linux (ONL) is an open-source, foundational platform software layer for next-generation, modular NOS architecture on open networking hardware.
A "public suffix" is one under which Internet users can (or historically could) directly register names. Some examples of public suffixes are com, co.uk and pvt.k12.ma.us. The Public Suffix List is a list of all known public suffixes.
The Public Suffix List is an initiative of Mozilla, but is maintained as a community resource. It is available for use in any software, but was originally created to meet the needs of browser manufacturers.
Network Monitor and Application Firewall for macOS.
The Little Snitch Network Monitor shows you where your Mac connects to on the Internet. You decide what you want to allow or deny.
Netronome is a modern network speed testing and monitoring tool built with Go and React.
A complete network performance monitoring solution with distributed agents, real-time metrics, and beautiful visualizations.
Related contents:
vTunnel is a tool that proxies IP traffic between guest and host networks by using the VSOCK protocol.
This project provides the ability to tunnel IP traffic through the hypervisor so that connections can be proxied into or out of virtual machines.
Related contents:
Fast and friendly network scanner. the original IP scanner for Windows, Mac and Linux.
Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports as well as has many other features.
Related contents:
NetBox - The Premier Network Source of Truth.
NetBox is the source of truth for everything on your network, from physical components like power systems and cabling to virtual assets like IP addresses and VLANs. Network automation and observability tools depend on NetBox’s authoritative data to roll out configurations, monitor changes, and accelerate operations across the enterprise.
A Simple & Powerful Network Tracing Tool.
Visualize the time packets spend in the kernel, watch & analyze in command line. Capture http/redis/mysql requests/responses in command line.
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine.
Related contents:
Network Top -- Help you monitor network traffic with bpf.
netop is a terminal command line interface that can customize the
network traffic bpf filter rule 🎯.
Related contents:
The software that empowers network professionals.
Build, Design and Test your network in a risk-free virtual environment and access the largest networking community to help. Whether you are studying for your first networking exam or building out a state-wide telecommunications network, GNS3 offers an easy way to design and build networks of any size without the need for hardware. And the best part is it's free!
A modern load testing framework.
An open source load testing tool. Define user behaviour with Python code, and swarm your system with millions of simultaneous users.
Related contents:
Optimized Node Monitoring for Network Analysis.
SONAR is designed to simplify network configuration audits in critical environments. With a clean interface and a robust architecture, it enables any personnel — even non-technical — to understand and document network flows independently.
🛜 100+ offline-first networking tools and utilities.
Related contents:
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
DNS-collector is a lightweight tool that captures DNS queries and responses from your DNS servers, processes them intelligently, and sends clean data to your monitoring or analytics systems.
Related contents:
Wireshark forDocker containers. See all incoming and outgoing requests in Docker containers with just one command.
Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.
Mesh network sidecars for NixOS Services.
meshSidecar provides a flexible way to integrate mesh networking capabilities with NixOS services. It allows services to participate in mesh networks without requiring direct modification of the service itself.
Related contents:
Block Unauthorized Network Communication via Command Line, Instantly. Instantly Block Network Access by PID/EXE.
ProcNetBlocker (Process Network Blocker) is a lightweight Windows command-line utility designed for system administrators, developers, and power users who need granular, real-time control over application network access. Stop unauthorized communication, sandbox suspicious programs, or manage bandwidth—all with a simple command.
Related contents:
Mercator is a Web application for managing the mapping of an information system as described in the Mapping the Information System Guide from ANSSI.
Mercator's objective is to enable a team to manage the mapping of an information system in a complete and consistent way, and to automatically generate the various reports needed to facilitate the maintenance and communication of this mapping.
Related contents:
- Mapping the information system @ ANSSI.
- Cartographie du système d'information @ ANSSI :fr:.
- Mercator - La cartographie du système d'information @ LinuxFr.org :fr:.
- Episode #513 consacré à Mercator @ NoLimitSecu :fr:.
- Mercator @ Sourcentis.
- Guide de l'ANSSI : Cartographie Du Système D'information by Chistine Dessus @ Calaméo :fr:.
A cross-platform network monitoring terminal UI tool built with Rust.
RustNet provides real-time visibility into network connections with detailed state information, connection lifecycle management, deep packet inspection, and a terminal user interface.
Related contents:
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by the process. This application makes process network monitoring hella' easy.
An open source network configuration analysis tool
Batfish finds errors and guarantees the correctness of planned or current network configurations. It enables safe and rapid network evolution, without the fear of outages or security breaches.
WoLi WebGUI is an extremely lightweight (under 8MB) container image for sending WoL Magic Packets easily to a public WoL proxy of your choice.