#network-security (30 Repositories)
Ranked open-source repositories tagged with #network-security, scored by pull request acceptance likelihood and maintainer engagement velocity.
44.2%
36.5h
30 repositories tagged #network-security
firezone/firezone
Blazing-fast remote access
Security-Onion-Solutions/securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
Vigil-SOC/vigil
Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
batfish/batfish
Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
google/sam
The Open-Source Agent Mesh
Harry-kp/vortix
Terminal UI for WireGuard and OpenVPN with multi-tunnel control, real-time telemetry, and leak guarding.
telekom-security/tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
leiweibau/Pi.Alert
Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.
biandratti/huginn-net
Multi-protocol passive fingerprinting library: TCP/HTTP (p0f-style) + TLS (JA4-style) analysis in Rust
x90skysn3k/brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
helixmap/sigwood
Local-first, transparent threat hunting for the logs you already have: Zeek, Pi-hole, syslog, CloudTrail. Named technique behind every finding. No SIEM, no agent, no black box.
bx33661/Wireshark-MCP
Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
JarryShaw/PyPCAPKit
Python-based Comprehensive Network Packet Analysis Library
kOlapsis/maintenant
Self-hosted monitoring for Docker, Kubernetes and uptime. Single Go binary, no agent config, live alerts. Drop a container, your stack is monitored.
ivre/ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Kookiejarz/Auto_XDP
Lightweight eBPF/XDP stateful firewall that auto-syncs listening ports and preserves return traffic. Zero-config, maximum defense.
emanuele-em/proxelar
Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.
cyberark/zBang
zBang is a risk assessment tool that detects potential privileged account threats
owasp-amass/amass
In-depth attack surface mapping and asset discovery
ifritnoises/sara
RouterOS Security Assessment Toolkit
dedsec1121fk/DedSec
Official repository of the DedSec Project.
andrewjlamarche/PSKracker
An all-in-one WPA/WPS toolkit
SmileZXLee/ZXRequestBlock
基于NSURLProtocol一句话实现iOS应用底层所有网络请求拦截(含网页ajax请求拦截【不支持WKWebView】)、一句话实现防抓包(使Thor，Charles，Burp等代理抓包方式全部失效，且即使开启了代理，也不影响App内部的正常请求)。包含http-dns解决方法，有效防止DNS劫持。用于分析http，https请求等
rubyfu/RubyFu
Rubyfu, where Ruby goes evil!
codeexpress/respounder
Respounder detects presence of responder in the network.
caster0x00/Sara
MikroTik RouterOS Security Inspector
s0md3v/Smap
a drop-in replacement for Nmap powered by shodan.io
x011/smtp-tunnel-proxy
A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.