#1Tools for analyzing, monitoring, and securing network infrastructure and protocols.
Kitploit recommended
paramiko/paramikoThe leading native Python SSHv2 protocol library.
gojue/ecaptureCapture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
cisofy/lynisAgentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
dnscrypt/dnscrypt-proxyFlexible DNS proxy with encrypted protocol support (DNSCrypt v2, DoH, ODoH, Anonymized DNS), caching, filtering, load balancing, and cloaking for…
objective-see/luluOpen-source macOS firewall that monitors and controls network connections, blocking unauthorized outbound and inbound traffic with per-application…
tencentcloud/cubesandboxInstant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
traccar/traccarTraccar GPS Tracking System
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
sshuttle/sshuttleTransparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS…
rofl0r/proxychains-ngproxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
aircrack-ng/aircrack-ngComplete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…
testssl/testssl.shTesting TLS/SSL encryption anywhere on any port
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
