discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- NubleX/ID-Spoofer
Cross-platform identity spoofing toolkit - MAC randomization + wire-level Windows TCP/IP persona via NFQUEUE packet rewriting. For authorized pentesting.
- dannysheehan/nft-blocklist
Atomic nftables IP blocklist manager in Go — curated threat feeds, allowlist protection, shrink guard, systemd timers, fail2ban-friendly dynamic sets, pluggable notifications. Successor to the iptables/ipset blacklists script.
- Yacin1102/Knoten
Connect everything with direct, encrypted WireGuard tunnels. Self-hostable, with no central traffic point.
- jmrplens/cs-routeros-bouncer
CrowdSec bouncer for MikroTik RouterOS: manages address lists and firewall rules via the RouterOS API
- littlewolf9527/xdrop
Distributed XDP/eBPF firewall with wire-speed packet filtering and a central management controller.
- AetherAI3/AntiFlock
Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.
- networking-incubator/coraza-kubernetes-operator
Web Application Firewall (WAF) for Kubernetes Gateways
- 0xciph3r/ARFL
Privacy-respecting bandwidth marketplace — A decentralised VPN protocol powered by Bitcoin.
- jp1337/easywall
Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock yourself out. Debian & Docker install.
- mehdieidi/tunelo
tunelo encrypts and tunnels UDP traffic (e.g. WireGuard) over a transport protocol like websocket or TCP. Helping to use VPNs in restricted areas.
- CodesWhat/sockguard
Docker socket proxy. Filter API requests by method and path with default-deny posture, structured audit logging, and Tecnativa drop-in compatibility.