discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- google/syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
- datreeio/datree
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
- projectdiscovery/interactsh
An OOB interaction gathering server and client library
- irbis-sh/zen-desktop
System-wide ad-blocker and privacy guard for Windows, macOS and Linux.
- meshbird/meshbird
Distributed private networking
- activecm/rita-legacy
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- d3mondev/puredns
Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
- loxilb-io/loxilb
eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.
- antrea-io/antrea
Kubernetes networking based on Open vSwitch
- ajnart/self-host
Replace the SaaS you pay for. One binary installs and runs self-hosted apps at home, no Docker knowledge needed. Terminal dashboard for you, plain commands for your agent.
- RedTeamPentesting/pretender
Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.
- mehrdadrad/radvpn
Decentralized VPN
- google/agentmesh
Agent Mesh
- 291-Group/LAN-Orangutan
LAN-Orangutan is a self-hosted network discovery tool. Find every device on your LAN, label and group them, snapshot your network and compare it later, and get flagged when something unexpected shows up. Single binary, no setup, Tailscale built in. Built by 291 Group.
- sandialabs/wiretap
Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.
- seashell/drago
☁️ Securely connect anything with WireGuard® and manage all your networks from a single place.
- goshs-labs/goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- costela/wesher
wireguard overlay mesh network manager
- AdguardTeam/AdGuardDNS
Public DNS resolver that protects you from ad trackers
- c2FmZQ/photos
Securely encrypt, store, and share files, including but not limited to pictures and videos.
- afreidah/s3-orchestrator
Storage orchestration layer presenting many S3/blob providers as a single S3 endpoint, keeping a configurable number of copies across them with read failover, plus optional per-backend byte, request, ingress and egress limits, zstd compression and envelope encryption
- lenny-ts/caddy-analyzer
Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2
- ide-digital/nulltrace
Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never leaves your machine.
- masaleem-oss/Fengard
Kernel-enforced firewall and DNS filtering for any OpenWrt router. Parental controls, ad blocking and screen time. A Pi-hole alternative.
- cloud37/s3-encryption-gateway
A transparent HTTP proxy that provides client-side encryption for S3-compatible storage services.
- Convex-Works/tide
🌊 Simple, self-hostable video conference service. One Go binary with a built-in media server, server-side recording and OIDC sign-in. A Jitsi, Zoom and Google Meet alternative.
- hectorm/cardea
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.
- GuardianWAF/GuardianWAF
Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.
- blank-query/lazyVPN-for-Omarchy
LazyVPN is an Omarchy VPN manager for WireGuard connections. It replaces manual systemd-networkd configuration with a fast, keyboard-driven TUI featuring killswitch, auto-recovery, and Waybar integration.
- YourDoritos/pVPN
Proton VPN client for Linux — terminal UI, WireGuard & Stealth protocol, no NetworkManager required