#1Tools for analyzing, monitoring, and securing network infrastructure and protocols.
Kitploit recommended
opennhp/opennhpCryptography-driven Zero Trust toolkit implementing NHP and DHP protocols to hide network infrastructure, encrypt data, and enforce default-deny…
tailscale/tailscaleThe easiest, most secure way to use WireGuard and 2FA.
nextdns/nextdnsCommand-line DNS-over-HTTPS client and proxy for encrypted, tamper-resistant DNS resolution; works with any DoH provider and supports split-horizon…
kismetwireless/kismetGithub mirror of official Kismet repository
nzymeorg/nzymeWiFi, Bluetooth and Ethernet Threat Detection.
ssc-ict-innovatie/nl-kat-coordinationModular network scanning framework that integrates diverse tools and external databases to detect vulnerabilities and configuration errors, producing…
antoniomika/sishHTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
yarrick/iodineTunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
purplei2p/i2pd🛡 I2P: End-to-End encrypted and anonymous Internet
oyesanyf/oshoosiclawAutonomous Rust endpoint security agent combining Ring-0 Windows driver and Linux eBPF pre-execution blocking, YARA detection, MITRE ATT&CK mapping,…
derv82/wifit3Wifite but USB-only & cross-platform.
irbis-sh/zen-desktopSystem-wide ad-blocker and privacy guard for Windows, macOS and Linux.
muhammad-usama-sardar/intra-handshake-failIETF Internet-Draft analyzing early attestation risks in attested TLS handshakes, documenting CVE-2026-33697 and proposing protocol mitigations for…
mitchellkrogza/nginx-ultimate-bad-bot-blockerNginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS,…
hydradragonantivirus/hydradragonantivirusDynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X,…
luckypipewrench/pipelockOpen-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…
duggytuxy/data-shield_ipv4_blocklistCurated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…
