brainstate

AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT

PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig

  1. necronicle/keenetic-doq

    DNS-over-QUIC (RFC 9250) for Keenetic routers — instead of stock DoT/DoH, port 53 untouched

    Go★ 40GPL-3.0GitHub ↗

  2. RomanovCaesar/m-ui

    A simple Mihomo server manage panel supporting multi-protocol and multi-user (Vmess, Vless, Trojan, ShadowSocks, Snell, Hysteria2, Mixed, Socks, HTTP, Tuic, AnyTLS, Mieru, Sudoku, ShadowQuic, TrustTunnel, Hysteria2-Realm)

    Go★ 40GPL-3.0GitHub ↗

  3. cloud37/s3-encryption-gateway

    A transparent HTTP proxy that provides client-side encryption for S3-compatible storage services.

    Go★ 38MITGitHub ↗

  4. hectorm/cardea

    Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

    Go★ 37EUPL-1.2GitHub ↗

  5. GuardianWAF/GuardianWAF

    Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.

    Go★ 37MITGitHub ↗

  6. Will-Luck/iplayer-arr

    BBC iPlayer download manager with a web UI, Sonarr integration, and built-in VPN support

    Go★ 37GPL-3.0GitHub ↗

  7. pingular/pingularity

    Self-hosted internet monitoring: speed, latency, uptime and outage detection from a single Go binary.

    Go★ 36MITGitHub ↗

  8. NOVA-X-PANEL/NOVA-X-PANEL

    An advanced, open-source web control panel for Xray-core — multi-protocol inbounds, REALITY/XTLS, AmneziaWG, TUIC v5 and MTProto, per-client accounting and multi-node management, wrapped in a bespoke glass UI.

    Go★ 36GPL-3.0GitHub ↗

  9. blank-query/lazyVPN-for-Omarchy

    LazyVPN is an Omarchy VPN manager for WireGuard connections. It replaces manual systemd-networkd configuration with a fast, keyboard-driven TUI featuring killswitch, auto-recovery, and Waybar integration.

    Go★ 34MITGitHub ↗

  10. atvirokodosprendimai/wgmesh

    WireGuard mesh builder - static and distributed via DHT discovery

    Go★ 34GitHub ↗

  11. WhitenWhiten/topophany

    Self-hosted network topology and service availability monitoring with a terminal UI — single Go binary, zero dependencies

    Go★ 34MITGitHub ↗

  12. smalex-z/gopher

    (Cloudflare Tunnel / ngrok alternative) Self-hosted edge server with built-in tunneling. Expose services behind NAT or CGNAT at your own domain — automatic HTTPS, subdomain routing, edge filtering.

    Go★ 33Apache-2.0GitHub ↗

  13. YourDoritos/pVPN

    Proton VPN client for Linux — terminal UI, WireGuard & Stealth protocol, no NetworkManager required

    Go★ 33GPL-3.0GitHub ↗

  14. NubleX/ID-Spoofer

    Cross-platform identity spoofing toolkit - MAC randomization + wire-level Windows TCP/IP persona via NFQUEUE packet rewriting. For authorized pentesting.

    Go★ 32GPL-3.0GitHub ↗

  15. sketchain/Nfuse

    Per-port traffic metering & circuit breaker via nftables | 端口流量统计与配额熔断

    Go★ 30Apache-2.0GitHub ↗

  16. fastcat/wirelink

    Experimental P2P configuration plane for Wireguard

    Go★ 28AGPL-3.0GitHub ↗

  17. nasnet-community/nasnet-panel

    MikroTik RouterOS management platform, deployable on router using Docker with very small Docker Image

    Go★ 27MITGitHub ↗

  18. jytt8u/Marvia

    Marvia — open-source VPN clients for Android and Windows, self-hosted panel, nodes and VP1 transport

    Go★ 27AGPL-3.0GitHub ↗

  19. gnacho/netgrip

    Lightweight companion panel for OpenWrt routers: a clean dashboard that complements LuCI, not a replacement. Service toggles, WiFi, VPN, VLANs, live traffic and diagnostics. Go + React, self-hosted.

    Go★ 25AGPL-3.0GitHub ↗

  20. dannysheehan/nft-blocklist

    Atomic nftables IP blocklist manager in Go — curated threat feeds, allowlist protection, shrink guard, systemd timers, fail2ban-friendly dynamic sets, pluggable notifications. Successor to the iptables/ipset blacklists script.

    Go★ 24MITGitHub ↗

  21. MorpheusAIs/Morpheus-Lumerin-Node

    Enable interaction with distributed, decentralized LLMs on the Morpheus network through a desktop chat experience

    Go★ 24MITGitHub ↗

  22. Yacin1102/Knoten

    Connect everything with direct, encrypted WireGuard tunnels. Self-hostable, with no central traffic point.

    Go★ 24MITGitHub ↗

  23. newcdl/fn-WireGuard

    飞牛 fnOS 上的 WireGuard 可视化管理工具,扫码即连安全回家 · Visual WireGuard manager for fnOS NAS — site-to-site mesh, LAN access, peer isolation, topology map. Never touches system network settings.

    Go★ 24GPL-3.0GitHub ↗

  24. jmrplens/cs-routeros-bouncer

    CrowdSec bouncer for MikroTik RouterOS: manages address lists and firewall rules via the RouterOS API

    Go★ 22MITGitHub ↗

  25. littlewolf9527/xdrop

    Distributed XDP/eBPF firewall with wire-speed packet filtering and a central management controller.

    Go★ 22MITGitHub ↗

  26. wentf9/xops-cli

    基于 Go 的高性能、跨平台运维 CLI 工具。提供主机管理、SSH 连接、文件传输、批量执行和 Playbook 任务编排,也可通过 Model Context Protocol (MCP) 接入 AI 客户端,配置操作审批和审计。

    Go★ 21MITGitHub ↗

  27. AetherAI3/AntiFlock

    Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.

    Go★ 21Apache-2.0GitHub ↗

  28. rknightion/tailscale2otel

    Tailscale exporter for OpenTelemetry and Prometheus. Device fleet, network flow logs and audit logs as OTLP metrics & logs. Single Go binary, Grafana Cloud ready. Headscale supported.

    Go★ 20Apache-2.0GitHub ↗

  29. GlassOnTin/openwrt-mcp

    An always-on MCP server hosted on your OpenWrt router: six generic tools over ubus, standing-policy authorisation, and config changes with an armed rollback timer.

    Go★ 20MITGitHub ↗

  30. ArtixSx/RAZVILKA

    Локальная панель управления обходами и маршрутами для Keenetic/Netcraze с Entware

    Go★ 20MITGitHub ↗

more →