Topics / #dns

DNS projects on GitHub

Domain name system tooling: resolvers, ad-blocking, and record management.

As of , the most-starred DNS projects on GitHub are the-book-of-secret-knowledge (250.7K stars), FreeDomain (204.5K stars) and free-for-dev (139.7K stars). GitHub.Locker tracks 90 DNS repositories with 2.1M stars combined. The fastest-growing on October 16 was the-book-of-secret-knowledge, with +311 stars in a day.

90Projects
2.1MStars in total
+1.4KStars in a day

Hot right now

Most stars gained in a day · Oct 16

The all-time top

90 projects · by stars

  1. #1 · trimstray/the-book-of-secret-knowledge

    the-book-of-secret-knowledge

    A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

    250.7K
  2. #2 · DigitalPlatDev/FreeDomain

    FreeDomain

    DigitalPlat FreeDomain is a free domain registration service paired with a practical, book-style DNS learning guide, taking you from claiming a domain all the way through setting up a website, email and DNS operations.

    204.5K
  3. #3 · ripienaar/free-for-dev

    free-for-dev

    A curated list of SaaS, PaaS, and IaaS offerings that have free tiers useful for DevOps engineers, sysadmins, and infrastructure developers.

    139.7K
  1. 4

    pi-hole

    61.3Kpi-hole/pi-hole · Shell

    Pi-hole is a DNS sinkhole that blocks ads and trackers for every device on your network, without needing any software installed on the devices themselves.

  2. 5

    trackerslist

    55.4Kngosang/trackerslist

    A collection of lists of public BitTorrent trackers that is checked and updated automatically every day, intended to be added to torrents or magnet links to improve peer discovery.

  3. 6

    acme.sh

    47.8Kacmesh-official/acme.sh · Shell

    acme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.

  4. 7

    what-happens-when

    43.4Kalex/what-happens-when

    A long-form, extremely detailed walkthrough answering the classic interview question of what happens when you type google.com into your browser and press enter, tracing the whole path from keypress to rendered page.

  5. 8

    Xray-core

    42.2KXTLS/Xray-core · Go

    Xray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.

  6. 9

    sing-box

    38.9KSagerNet/sing-box · Go

    sing-box describes itself as 'the universal proxy platform' — a single Go program meant to run and configure various proxy protocols instead of needing separate tools for each one.

  7. 10

    AdGuardHome

    37.5KAdguardTeam/AdGuardHome · TypeScript

    A free, open-source network-wide DNS server that blocks ads and trackers for every device on your home network: it re-routes tracking domains to a 'black hole', so no client-side software is needed on the devices themselves.

  8. 11

    Python

    35.4Kgeekcomputers/Python · Python

    A personal collection of small, standalone Python scripts covering automation, games, utilities, and web scraping, meant both to solve the author's own problems and to serve as learning examples for beginners.

  9. 12

    web-check

    35.1Klissy93/web-check · TypeScript

    Web-Check is an open-source OSINT dashboard that lets you analyse any website: it pulls IP info, SSL chain, DNS records, cookies, headers, server location, and more into one report so you can understand its tech stack and security posture.

  10. 13

    zapret-discord-youtube

    34.8KFlowseal/zapret-discord-youtube · Batchfile

    A free Windows toolkit of batch scripts around bol-van's zapret that runs DPI-bypass strategies to restore access to Discord and YouTube — no VPN or subscription involved.

  11. 14

    nps

    34.2Kehang-io/nps · Go

    NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server that exposes internal network services to the outside world. It forwards tcp, udp, http(s), socks5 and other protocols, and comes with a full-featured web admin panel.

  12. 15

    hosts

    31.2KStevenBlack/hosts · Python

    A community-maintained aggregator that merges many reputable hosts files into one unified blocklist with duplicates removed — the base variant combines adware and malware lists and holds 80,169 entries.

  13. 16

    algo

    30.4Ktrailofbits/algo · Python

    A set of Ansible scripts that spins up your own personal WireGuard and IPsec VPN server on a cloud provider, using the most secure defaults available.

  14. 17

    awesome-osint

    30.3Kjivoi/awesome-osint

    This is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.

  15. 18

    consul

    30.1Khashicorp/consul · Go

    Consul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.

  16. 19

    GitHub520

    30K521xueweihan/GitHub520 · Python

    GitHub520 publishes an up-to-date hosts file that maps GitHub's domains to fast, working IPs, fixing the broken images and slow loading that many users hit when browsing GitHub. It requires no software installation - you just update your system's hosts entries.

  17. 20

    GoodbyeDPI

    28.8KValdikSS/GoodbyeDPI · C

    A free Windows utility that bypasses Deep Packet Inspection (DPI) systems ISPs use to block websites. It handles both passive DPI (optical splitter or port mirroring) and active DPI connected in sequence.

  18. 21

    OpenClash

    27.8Kvernesong/OpenClash · JavaScript

    OpenClash is a Mihomo (Clash) client plugin for OpenWrt routers: it runs a policy-based proxy on the router, routing traffic through flexible rule configurations.

  19. 22

    dns-blocklists

    27.5Khagezi/dns-blocklists · Text

    A set of DNS blocklists that block ads, trackers, telemetry, phishing, malware, scams and other junk domains network-wide. They work for any region and with every common DNS server, ad blocker, and content blocker.

  20. 23

    libuv

    27.3Klibuv/libuv · C

    libuv is a multi-platform C support library focused on asynchronous I/O. It was originally built for Node.js and is also used by Luvit, Julia and uvloop.

  21. 24

    dev-sidecar

    24.5Kdocmirror/dev-sidecar · Vue

    Dev-Sidecar (DS) is a local proxy desktop app that helps developers, especially in mainland China, reach GitHub, npm, Stack Overflow and similar services by optimizing DNS lookups and routing blocked or slow requests through acceleration mirrors.

  22. 25

    awesome-sysadmin

    24.4Kkahun/awesome-sysadmin

    A curated, categorized list of open-source sysadmin tools and resources, covering backups, monitoring, configuration management, DNS, security, networking, and dozens of other admin topics.

  23. 26

    macOS-Security-and-Privacy-Guide

    22.6Kdrduh/macOS-Security-and-Privacy-Guide · Shell

    A community-maintained guide collecting techniques for improving security and privacy on macOS, written for Apple silicon Macs.

  24. 27

    localtunnel

    22.5Klocaltunnel/localtunnel · JavaScript

    localtunnel exposes a localhost server to the public internet with a temporary public URL, without needing to configure DNS or deploy anywhere.

  25. 28

    awesome-tunneling

    21.9Kanderspitman/awesome-tunneling · Python

    A curated list of tunneling tools and services (alternatives to ngrok, Cloudflare Tunnel, Tailscale, and ZeroTier) that let you expose a local server to the internet, with a focus on self-hosting.

  26. 29

    v2ray-rules-dat

    20.9KLoyalsoldier/v2ray-rules-dat

    Enhanced drop-in replacements for the official V2Ray geoip.dat and geosite.dat routing rule files, used by V2Ray, Xray-core, mihomo (Clash-Meta), hysteria, Trojan-Go, leaf and GUI clients on those cores to decide which traffic goes direct, through the proxy, or gets blocked.

  27. 30

    hosts

    20.6Kgooglehosts/hosts

    GoogleHosts is a project that provides a hosts file mapping Google and other blocked domains to accessible IP addresses, so Chinese-speaking users can reach these services without DNS censorship interference.

  28. 31

    DNSHE-FreeDomains

    20Kdnshe/DNSHE-FreeDomains · JavaScript

    DNSHE is a free domain registration and DNS resolution service run by a Singapore youth public-interest team, giving developers, students, and open-source projects free subdomains under suffixes like us.ci, cc.cd, de5.net, and bot.cd, with Anycast DNS and full record management.

  29. 32

    nginx-proxy

    19.9Knginx-proxy/nginx-proxy · Python

    A Docker image that runs nginx plus docker-gen: when containers start or stop, docker-gen regenerates the reverse proxy config and reloads nginx, so routing updates itself.

  30. 33

    gost

    18.2Kginuerzh/gost · Go

    GOST (GO Simple Tunnel) is a secure, multi-protocol proxy and tunnel tool written in Go. It can act as an HTTP/SOCKS5 proxy, chain multiple proxies together, and forward local or remote TCP/UDP ports through encrypted channels.

  31. 34

    optimizer

    18.2Khellzerg/optimizer · C#

    A free, open-source Windows utility that locks down privacy and security: it turns off telemetry, Cortana, OneDrive and other built-in components. The author recommends running it right after a fresh Windows installation for maximum benefit.

  32. 35

    theHarvester

    18Klaramies/theHarvester · Python

    An open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.

  33. 36

    ddns-go

    17.4Kjeessy2/ddns-go · Go

    DDNS-GO is a dynamic DNS tool: it watches your public IPv4 or IPv6 address and automatically updates your DNS records whenever it changes, so your domain always points to your current IP.

  34. 37

    goproxy

    17.1Ksnail007/goproxy · Go

    goproxy is a high-performance proxy server written in Go. A single binary handles HTTP(S), SOCKS5, SS, WebSocket, TCP and UDP proxying, plus TCP/UDP port forwarding and intranet penetration for exposing servers behind NAT.

  35. 38

    MHDDoS

    16.9KMatrixTM/MHDDoS · Python

    MHDDoS is a Python 3 DDoS testing toolkit with 57 attack methods spanning Layer 7 (HTTP floods, Cloudflare/OVH bypasses) and Layer 4/3 (TCP, UDP, SYN, amplification attacks), meant for authorized security testing and research.

  36. 39

    how-web-works

    16.8Kvasanthk/how-web-works

    A detailed walkthrough of everything that happens behind the scenes between typing 'google.com' into a browser and the page rendering on screen, covering keyboard input, URL parsing, DNS, TLS, HTTP, and browser rendering internals.

  37. 40

    cfnew

    16.4KbyJoey/cfnew

    CFnew is a Cloudflare Workers/Pages proxy panel that generates VLESS, Trojan and xhttp nodes, converts them into subscription formats for clients like Clash, Surge, Sing-box, Loon, Quantumult X, V2ray and Shadowrocket, and lets you manage everything through a web config page backed by Cloudflare KV.

  38. 41

    openvpn-install

    16.2Kangristan/openvpn-install · Shell

    An installer script that sets up and manages your own OpenVPN server on a Linux machine you control — a VPS, a dedicated server or even a home computer — and generates client config files for every device you want to connect.

  39. 42

    evilginx2

    15.7Kkgretzky/evilginx2 · Go

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

  40. 43

    mailinabox

    15.4Kmail-in-a-box/mailinabox · Python

    It turns a fresh machine into a complete, self-hosted email server — SMTP, IMAP, webmail, contacts and calendar sync, DNS, spam filtering and backups — with a single install command, so individuals can run their own email instead of relying on providers.

  41. 44

    amass

    15.4Kowasp-amass/amass · Go

    Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.

  42. 45

    workflow

    14.4Ksogou/workflow · C++

    Sogou C++ Workflow is an enterprise-grade C++ engine for asynchronous networking and parallel computing, used internally by Sogou to power search, cloud input method, and ad services, handling billions of requests daily.

  43. 46

    coredns

    14.4Kcoredns/coredns · Go

    A fast and flexible DNS server and forwarder written in Go, built as a chain of plugins — each plugin performs one DNS function. It is a graduated Cloud Native Computing Foundation (CNCF) project.

  44. 47

    gobuster

    14.2KOJ/gobuster · Go

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

  45. 48

    openresty

    14.1Kopenresty/openresty · C

    OpenResty is a full-fledged web application server: it bundles the standard nginx core, lots of 3rd-party nginx modules, and most of their external dependencies into one package.

  46. 49

    portmaster

    13.9Ksafing/portmaster · Go

    Portmaster is a free, open-source application firewall for Windows and Linux that intercepts all network traffic on your machine, letting you monitor and block connections per app, filter DNS, and block trackers and malware with good defaults out of the box.

  47. 50

    fancyss

    13.8Khq450/fancyss · Shell

    Fancyss is a plugin that adds transparent proxy and GFW-circumvention tools (SS/SSR/VMess/VLESS/Trojan/NaiveProxy/TUIC/Hysteria2/Xray) to Asuswrt-Merlin or official-modded router firmware with a software center.

  48. 51

    dnscrypt-proxy

    13.7KDNSCrypt/dnscrypt-proxy · Go

    dnscrypt-proxy is a flexible DNS proxy that supports modern encrypted DNS protocols like DNSCrypt v2, DNS-over-HTTPS (DoH), Anonymized DNSCrypt and ODoH, so your DNS queries can't be read or tampered with in transit.

  49. 52

    FreeDomains

    13.1Kstackryze/FreeDomains · JavaScript

    Stackryze Domains is a free managed subdomain service that lets developers, students, and open-source projects claim a free subdomain (like yourname.indevs.in) and point it to any hosting provider or their own infrastructure.

  50. 53

    iroh

    12.7Kn0-computer/iroh · Rust

    Iroh is a Rust library that lets you connect to other devices by dialing their public key instead of an IP address; it automatically finds and maintains the fastest connection—direct via hole-punching, or falling back to a relay—built on QUIC.

  51. 54

    portless

    12.7Kvercel-labs/portless · TypeScript

    Portless is a CLI tool that replaces unstable local dev port numbers with stable, named .localhost URLs, with HTTPS and HTTP/2 enabled by default.

  52. 55

    Share-SSR-V2ray

    12.6Kselierlin/Share-SSR-V2ray · Python

    This is a free Chinese-language guide that recommends paid proxy subscription services ('airports') and walks you through setting up Clash, Shadowsocks and V2ray clients to get around internet censorship.

  53. 56

    MyIP

    12.1Kjason5ng32/MyIP · JavaScript

    MyIP is a self-hostable, all-in-one IP toolbox: it checks your IP and geolocation from multiple sources, tests for WebRTC and DNS leaks, runs IP quality and browser fingerprint checks, speed tests, global latency and MTR tests, Whois lookups, censorship checks, and more.

  54. 57

    sliver

    12.1KBishopFox/sliver · Go

    Sliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.

  55. 58

    netmaker

    11.8Kgravitl/netmaker · Go

    Netmaker is a tool that automates creating and managing virtual networks (mesh VPNs, remote access gateways, site-to-site links) using WireGuard.

  56. 59

    immortalwrt

    11.8Kimmortalwrt/immortalwrt · C

    ImmortalWrt is a fork of OpenWrt (a Linux-based router firmware) with more packages ported, more devices supported, optimized default profiles, and localization specifically for mainland China users.

  57. 60

    docker-pi-hole

    11.7Kpi-hole/docker-pi-hole · Shell

    This is the official Docker image for Pi-hole, a network-wide ad blocker, letting you run Pi-hole as a container on your own Linux hardware instead of installing it directly on the OS.

  58. 61

    EmailValidator

    11.6Kegulias/EmailValidator · PHP

    A PHP library that validates email addresses against several RFCs — 5321, 5322, 6530, 6531, 6532 and 1035.

  59. 62

    register

    11.6Kis-a-dev/register · JavaScript

    is-a.dev lets any developer claim a free, personalized '.is-a.dev' subdomain for their website by submitting a pull request to this GitHub repository; Cloudflare then publishes the DNS records for free.

  60. 63

    smartdns

    11.3Kpymumu/smartdns · C

    SmartDNS is a local DNS server that forwards each query to multiple upstream DNS servers, measures which resolved IP responds fastest, and returns that IP to the client for a faster browsing experience. It also supports DoT, DoH, DoQ and DoH3 for privacy and can act as an ad filter by mapping specific domains to chosen IPs.

  61. 64

    awesome-hacker-search-engines

    11.3Kedoardottt/awesome-hacker-search-engines · Shell

    A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.

  62. 65

    netshoot

    11Knicolaka/netshoot · Shell

    netshoot is a Docker and Kubernetes network troubleshooting container, a 'swiss-army' image packed with networking, DNS, performance, and security tools for debugging container and host network issues.

  63. 66

    Checkmate

    11Kbluewave-labs/Checkmate · TypeScript

    Checkmate is an open-source, self-hosted tool that monitors server uptime, response times, hardware (CPU, RAM, disk), and incidents in real time with dashboards and status pages.

  64. 67

    anti-AD

    10.9Kprivacy-protection-tools/anti-AD

    anti-AD is a curated ad-blocking and privacy filter list for the Chinese internet, built by merging and deduplicating major hosts/EasyList/adblock lists to block ads, telemetry and tracking domains at the network level.

  65. 68

    chia-blockchain

    10.8KChia-Network/chia-blockchain · Python

    Chia-blockchain is the official Python implementation of the Chia cryptocurrency, bundling full node, farmer, harvester, timelord, and wallet software.

  66. 69

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

  67. 70

    proxychains-ng

    10.7Krofl0r/proxychains-ng · C

    ProxyChains-NG is a UNIX program that hooks network-related libc functions in dynamically linked programs via LD_PRELOAD and redirects their TCP connections through SOCKS4a/5 or HTTP proxies. It is the continuation of the unmaintained proxychains project.

  68. 71

    DnsServer

    10.1KTechnitiumSoftware/DnsServer · C#

    Technitium DNS Server is an open source, self-hosted DNS server that works as both an authoritative server and a recursive resolver. Its headline use is blocking ads and malware at the DNS level for an entire home or organization network, with configuration done in a web console.

  69. 72

    deploy-your-own-saas

    10.1KAtarity/deploy-your-own-saas · Python

    It is a curated, categorized list of self-hosted, open-source alternatives to popular cloud services - VPN, music streaming, photo hosting, notes, bookmarks, email, chat, backups and more - so you can run 'your own' version of each instead of relying on a commercial provider.

  70. 73

    OneForAll

    10.1Kshmilylty/OneForAll · Python

    OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

  71. 74

    flowsint

    9.8Kreconurge/flowsint · TypeScript

    Flowsint is an open-source, graph-based OSINT investigation tool that lets analysts explore relationships between people, domains, IPs, organizations and more through a visual graph interface with automated enrichers.

  72. 75

    tailcat

    8.4Ktailscale/tailcat · Go

    Tailcat is like netcat but running over Tailscale's encrypted data plane (WireGuard + magicsock + DERP) without needing Tailscale's control plane or a Tailscale account. One side runs a tailcat server and gets a short address; the other side connects to it, and traffic is end-to-end encrypted and NAT-traversed automatically.

  73. 76

    MasterDnsVPN

    7.1Kmasterking32/MasterDnsVPN · Go

    MasterDnsVPN is a DNS tunneling VPN that smuggles TCP traffic inside DNS queries and responses to get online when regular connections are blocked, aiming for the same goal as DNSTT or SlipStream but using its own lower-overhead protocol.

  74. 77

    fq-book

    7Khoochanlon/fq-book · Shell

    A free open-source Chinese-language book, 《这本书能让你连接互联网》 (This Book Can Get You Online), about getting online under censorship: hands-on setup for popular circumvention tools plus the principles behind proxies, tunnels, VPNs and GFW blocking.

  75. 78

    web-to-app

    6.8Kshiaho777/web-to-app · Kotlin

    WebToApp is an Android app that builds installable APKs from web projects entirely on your phone — no PC and no remote build server. Beyond wrapping URLs, it runs real server runtimes, ships an anti-censorship network stack, signs for Google Play and supports browser extensions.

  76. 79

    zenc

    4.3Kzenc-lang/zenc · C

    Zen C is a modern systems programming language with high-level ergonomics (type inference, pattern matching, generics, traits, async/await) that compiles to human-readable GNU C/C11 while maintaining 100% C ABI compatibility.

  77. 80

    esp32-c3-adblock

    3.2KM-Abozaid/esp32-c3-adblock · C++

    It is a Pi-hole-style DNS ad-blocker firmware that runs on a $2 ESP32-C3 chip with no PSRAM, storing up to 537k blocked domains as compact hashes in flash instead of RAM.

  78. 81

    Open-Box

    2.2Kliandu2024/Open-Box · Shell

    Open-Box is an all-in-one transparent proxy solution for OpenWrt routers: it installs the sing-box core plus a web management panel with a single command, so you can set up proxy routing from a browser without hand-editing any config files.

  79. 82

    CFNext

    1.9KPAICNI/CFNext · JavaScript

    CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.

  80. 83

    golive-skill

    1.3Kmikehasa/golive-skill · TypeScript

    GoLive is an open-source Agent Skill plus a zero-dependency Node CLI that takes an agent-built app live by detecting what it needs, planning the exact changes, asking for your approval, applying them with your own accounts, and verifying what actually works - covering hosting, databases, domains, email and payments.

  81. 84

    motor-os

    1.1Kmoturus/motor-os · Rust

    Motor OS is a simple, fast, and secure operating system built for the cloud. It targets virtualized workloads — web serving, serverless computing, and edge caching — and is written entirely in Rust, kernel to shell.

  82. 85

    ps5-webkit-autoloader

    1.1KitsPLK/ps5-webkit-autoloader · JavaScript

    It is an automated payload loader for exploited (jailbroken) PS5 consoles: it boots the WebKit exploit chain and then sends your ELF payloads automatically, all triggered from a homescreen shortcut on the console itself.

  83. 86

    local_roborock_server

    935Python-roborock/local_roborock_server · Python

    A self-hosted local HTTPS and MQTT server that emulates Roborock's cloud backend on your own LAN, letting your Roborock vacuum keep live maps and local control without reaching the internet, and without rooting or modifying hardware.

  84. 87

    runs-on.dev

    447zordhalo/runs-on.dev · JavaScript

    A free subdomain registry — claim a 'yourname.runs-on.dev' subdomain in seconds and point it wherever you like, with the claim itself stored as a file in this GitHub repo.

  85. 88

    is-a-software

    191is-a-software/is-a-software · JavaScript

    is-a-software lets developers claim a free custom subdomain under .is-a.software (like myproject.is-a.software) and point it at their site using custom DNS records such as A, AAAA, CNAME, TXT, MX, and NS.

  86. 89

    nyx

    158thecynetx/nyx · TypeScript

    Nyx Panel is a self-hosted web management suite for Xray-core proxy servers, built to resist heavy censorship (Iran-focused) using VLESS+REALITY, XHTTP/SplitHTTP, packet fragmentation and Cloudflare WARP.

  87. 90

    xdp-dns-evadeproxy

    131Oihalitz/xdp-dns-evadeproxy · Rust

    A DNS proxy in Rust that sidesteps blanket ISP IP blocks: when an operator cuts off an anycast address shared by hundreds of Cloudflare sites, it rewrites that IP in the DNS response to an unblocked neighbor of the same prefix.

Often tagged together