Topics / #dns
DNS projects on GitHub
Domain name system tooling: resolvers, ad-blocking, and record management.
As of , the most-starred DNS projects on GitHub are the-book-of-secret-knowledge (250.7K stars), FreeDomain (204.5K stars) and free-for-dev (139.7K stars). GitHub.Locker tracks 90 DNS repositories with 2.1M stars combined. The fastest-growing on October 16 was the-book-of-secret-knowledge, with +311 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+311the-book-of-secret-knowledge
trimstray/the-book-of-secret-knowledge · ★ 250.7KA massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.
+143FreeDomain
DigitalPlatDev/FreeDomain · ★ 204.5KDigitalPlat FreeDomain is a free domain registration service paired with a practical, book-style DNS learning guide, taking you from claiming a domain all the way through setting up a website, email and DNS operations.
+94DNSHE-FreeDomains
dnshe/DNSHE-FreeDomains · ★ 20KDNSHE is a free domain registration and DNS resolution service run by a Singapore youth public-interest team, giving developers, students, and open-source projects free subdomains under suffixes like us.ci, cc.cd, de5.net, and bot.cd, with Anycast DNS and full record management.
+84esp32-c3-adblock
M-Abozaid/esp32-c3-adblock · ★ 3.2KIt is a Pi-hole-style DNS ad-blocker firmware that runs on a $2 ESP32-C3 chip with no PSRAM, storing up to 537k blocked domains as compact hashes in flash instead of RAM.
The all-time top
90 projects · by stars
- 250.7K
#1 · trimstray/the-book-of-secret-knowledgethe-book-of-secret-knowledge
A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.
- 204.5K
#2 · DigitalPlatDev/FreeDomainFreeDomain
DigitalPlat FreeDomain is a free domain registration service paired with a practical, book-style DNS learning guide, taking you from claiming a domain all the way through setting up a website, email and DNS operations.
- 139.7K
#3 · ripienaar/free-for-devfree-for-dev
A curated list of SaaS, PaaS, and IaaS offerings that have free tiers useful for DevOps engineers, sysadmins, and infrastructure developers.
- 4
pi-hole
61.3Kpi-hole/pi-hole · ShellPi-hole is a DNS sinkhole that blocks ads and trackers for every device on your network, without needing any software installed on the devices themselves.
- 5

trackerslist
55.4Kngosang/trackerslistA collection of lists of public BitTorrent trackers that is checked and updated automatically every day, intended to be added to torrents or magnet links to improve peer discovery.
- 6
acme.sh
47.8Kacmesh-official/acme.sh · Shellacme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.
- 7

what-happens-when
43.4Kalex/what-happens-whenA long-form, extremely detailed walkthrough answering the classic interview question of what happens when you type google.com into your browser and press enter, tracing the whole path from keypress to rendered page.
- 8
Xray-core
42.2KXTLS/Xray-core · GoXray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.
- 9

sing-box
38.9KSagerNet/sing-box · Gosing-box describes itself as 'the universal proxy platform' — a single Go program meant to run and configure various proxy protocols instead of needing separate tools for each one.
- 10
AdGuardHome
37.5KAdguardTeam/AdGuardHome · TypeScriptA free, open-source network-wide DNS server that blocks ads and trackers for every device on your home network: it re-routes tracking domains to a 'black hole', so no client-side software is needed on the devices themselves.
- 11

Python
35.4Kgeekcomputers/Python · PythonA personal collection of small, standalone Python scripts covering automation, games, utilities, and web scraping, meant both to solve the author's own problems and to serve as learning examples for beginners.
- 12
web-check
35.1Klissy93/web-check · TypeScriptWeb-Check is an open-source OSINT dashboard that lets you analyse any website: it pulls IP info, SSL chain, DNS records, cookies, headers, server location, and more into one report so you can understand its tech stack and security posture.
- 13

zapret-discord-youtube
34.8KFlowseal/zapret-discord-youtube · BatchfileA free Windows toolkit of batch scripts around bol-van's zapret that runs DPI-bypass strategies to restore access to Discord and YouTube — no VPN or subscription involved.
- 14

nps
34.2Kehang-io/nps · GoNPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server that exposes internal network services to the outside world. It forwards tcp, udp, http(s), socks5 and other protocols, and comes with a full-featured web admin panel.
- 15

hosts
31.2KStevenBlack/hosts · PythonA community-maintained aggregator that merges many reputable hosts files into one unified blocklist with duplicates removed — the base variant combines adware and malware lists and holds 80,169 entries.
- 16

algo
30.4Ktrailofbits/algo · PythonA set of Ansible scripts that spins up your own personal WireGuard and IPsec VPN server on a cloud provider, using the most secure defaults available.
- 17

awesome-osint
30.3Kjivoi/awesome-osintThis is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.
- 18
consul
30.1Khashicorp/consul · GoConsul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.
- 19
GitHub520
30K521xueweihan/GitHub520 · PythonGitHub520 publishes an up-to-date hosts file that maps GitHub's domains to fast, working IPs, fixing the broken images and slow loading that many users hit when browsing GitHub. It requires no software installation - you just update your system's hosts entries.
- 20

GoodbyeDPI
28.8KValdikSS/GoodbyeDPI · CA free Windows utility that bypasses Deep Packet Inspection (DPI) systems ISPs use to block websites. It handles both passive DPI (optical splitter or port mirroring) and active DPI connected in sequence.
- 21

OpenClash
27.8Kvernesong/OpenClash · JavaScriptOpenClash is a Mihomo (Clash) client plugin for OpenWrt routers: it runs a policy-based proxy on the router, routing traffic through flexible rule configurations.
- 22
dns-blocklists
27.5Khagezi/dns-blocklists · TextA set of DNS blocklists that block ads, trackers, telemetry, phishing, malware, scams and other junk domains network-wide. They work for any region and with every common DNS server, ad blocker, and content blocker.
- 23

libuv
27.3Klibuv/libuv · Clibuv is a multi-platform C support library focused on asynchronous I/O. It was originally built for Node.js and is also used by Luvit, Julia and uvloop.
- 24

dev-sidecar
24.5Kdocmirror/dev-sidecar · VueDev-Sidecar (DS) is a local proxy desktop app that helps developers, especially in mainland China, reach GitHub, npm, Stack Overflow and similar services by optimizing DNS lookups and routing blocked or slow requests through acceleration mirrors.
- 25

awesome-sysadmin
24.4Kkahun/awesome-sysadminA curated, categorized list of open-source sysadmin tools and resources, covering backups, monitoring, configuration management, DNS, security, networking, and dozens of other admin topics.
- 26

macOS-Security-and-Privacy-Guide
22.6Kdrduh/macOS-Security-and-Privacy-Guide · ShellA community-maintained guide collecting techniques for improving security and privacy on macOS, written for Apple silicon Macs.
- 27

localtunnel
22.5Klocaltunnel/localtunnel · JavaScriptlocaltunnel exposes a localhost server to the public internet with a temporary public URL, without needing to configure DNS or deploy anywhere.
- 28

awesome-tunneling
21.9Kanderspitman/awesome-tunneling · PythonA curated list of tunneling tools and services (alternatives to ngrok, Cloudflare Tunnel, Tailscale, and ZeroTier) that let you expose a local server to the internet, with a focus on self-hosting.
- 29
v2ray-rules-dat
20.9KLoyalsoldier/v2ray-rules-datEnhanced drop-in replacements for the official V2Ray geoip.dat and geosite.dat routing rule files, used by V2Ray, Xray-core, mihomo (Clash-Meta), hysteria, Trojan-Go, leaf and GUI clients on those cores to decide which traffic goes direct, through the proxy, or gets blocked.
- 30

hosts
20.6Kgooglehosts/hostsGoogleHosts is a project that provides a hosts file mapping Google and other blocked domains to accessible IP addresses, so Chinese-speaking users can reach these services without DNS censorship interference.
- 31

DNSHE-FreeDomains
20Kdnshe/DNSHE-FreeDomains · JavaScriptDNSHE is a free domain registration and DNS resolution service run by a Singapore youth public-interest team, giving developers, students, and open-source projects free subdomains under suffixes like us.ci, cc.cd, de5.net, and bot.cd, with Anycast DNS and full record management.
- 32
nginx-proxy
19.9Knginx-proxy/nginx-proxy · PythonA Docker image that runs nginx plus docker-gen: when containers start or stop, docker-gen regenerates the reverse proxy config and reloads nginx, so routing updates itself.
- 33
gost
18.2Kginuerzh/gost · GoGOST (GO Simple Tunnel) is a secure, multi-protocol proxy and tunnel tool written in Go. It can act as an HTTP/SOCKS5 proxy, chain multiple proxies together, and forward local or remote TCP/UDP ports through encrypted channels.
- 34

optimizer
18.2Khellzerg/optimizer · C#A free, open-source Windows utility that locks down privacy and security: it turns off telemetry, Cortana, OneDrive and other built-in components. The author recommends running it right after a fresh Windows installation for maximum benefit.
- 35

theHarvester
18Klaramies/theHarvester · PythonAn open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.
- 36

ddns-go
17.4Kjeessy2/ddns-go · GoDDNS-GO is a dynamic DNS tool: it watches your public IPv4 or IPv6 address and automatically updates your DNS records whenever it changes, so your domain always points to your current IP.
- 37

goproxy
17.1Ksnail007/goproxy · Gogoproxy is a high-performance proxy server written in Go. A single binary handles HTTP(S), SOCKS5, SS, WebSocket, TCP and UDP proxying, plus TCP/UDP port forwarding and intranet penetration for exposing servers behind NAT.
- 38

MHDDoS
16.9KMatrixTM/MHDDoS · PythonMHDDoS is a Python 3 DDoS testing toolkit with 57 attack methods spanning Layer 7 (HTTP floods, Cloudflare/OVH bypasses) and Layer 4/3 (TCP, UDP, SYN, amplification attacks), meant for authorized security testing and research.
- 39
how-web-works
16.8Kvasanthk/how-web-worksA detailed walkthrough of everything that happens behind the scenes between typing 'google.com' into a browser and the page rendering on screen, covering keyboard input, URL parsing, DNS, TLS, HTTP, and browser rendering internals.
- 40

cfnew
16.4KbyJoey/cfnewCFnew is a Cloudflare Workers/Pages proxy panel that generates VLESS, Trojan and xhttp nodes, converts them into subscription formats for clients like Clash, Surge, Sing-box, Loon, Quantumult X, V2ray and Shadowrocket, and lets you manage everything through a web config page backed by Cloudflare KV.
- 41

openvpn-install
16.2Kangristan/openvpn-install · ShellAn installer script that sets up and manages your own OpenVPN server on a Linux machine you control — a VPS, a dedicated server or even a home computer — and generates client config files for every device you want to connect.
- 42

evilginx2
15.7Kkgretzky/evilginx2 · GoEvilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.
- 43

mailinabox
15.4Kmail-in-a-box/mailinabox · PythonIt turns a fresh machine into a complete, self-hosted email server — SMTP, IMAP, webmail, contacts and calendar sync, DNS, spam filtering and backups — with a single install command, so individuals can run their own email instead of relying on providers.
- 44

amass
15.4Kowasp-amass/amass · GoAmass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.
- 45

workflow
14.4Ksogou/workflow · C++Sogou C++ Workflow is an enterprise-grade C++ engine for asynchronous networking and parallel computing, used internally by Sogou to power search, cloud input method, and ad services, handling billions of requests daily.
- 46

coredns
14.4Kcoredns/coredns · GoA fast and flexible DNS server and forwarder written in Go, built as a chain of plugins — each plugin performs one DNS function. It is a graduated Cloud Native Computing Foundation (CNCF) project.
- 47

gobuster
14.2KOJ/gobuster · GoGobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.
- 48

openresty
14.1Kopenresty/openresty · COpenResty is a full-fledged web application server: it bundles the standard nginx core, lots of 3rd-party nginx modules, and most of their external dependencies into one package.
- 49

portmaster
13.9Ksafing/portmaster · GoPortmaster is a free, open-source application firewall for Windows and Linux that intercepts all network traffic on your machine, letting you monitor and block connections per app, filter DNS, and block trackers and malware with good defaults out of the box.
- 50

fancyss
13.8Khq450/fancyss · ShellFancyss is a plugin that adds transparent proxy and GFW-circumvention tools (SS/SSR/VMess/VLESS/Trojan/NaiveProxy/TUIC/Hysteria2/Xray) to Asuswrt-Merlin or official-modded router firmware with a software center.
- 51

dnscrypt-proxy
13.7KDNSCrypt/dnscrypt-proxy · Godnscrypt-proxy is a flexible DNS proxy that supports modern encrypted DNS protocols like DNSCrypt v2, DNS-over-HTTPS (DoH), Anonymized DNSCrypt and ODoH, so your DNS queries can't be read or tampered with in transit.
- 52

FreeDomains
13.1Kstackryze/FreeDomains · JavaScriptStackryze Domains is a free managed subdomain service that lets developers, students, and open-source projects claim a free subdomain (like yourname.indevs.in) and point it to any hosting provider or their own infrastructure.
- 53
iroh
12.7Kn0-computer/iroh · RustIroh is a Rust library that lets you connect to other devices by dialing their public key instead of an IP address; it automatically finds and maintains the fastest connection—direct via hole-punching, or falling back to a relay—built on QUIC.
- 54

portless
12.7Kvercel-labs/portless · TypeScriptPortless is a CLI tool that replaces unstable local dev port numbers with stable, named .localhost URLs, with HTTPS and HTTP/2 enabled by default.
- 55

Share-SSR-V2ray
12.6Kselierlin/Share-SSR-V2ray · PythonThis is a free Chinese-language guide that recommends paid proxy subscription services ('airports') and walks you through setting up Clash, Shadowsocks and V2ray clients to get around internet censorship.
- 56

MyIP
12.1Kjason5ng32/MyIP · JavaScriptMyIP is a self-hostable, all-in-one IP toolbox: it checks your IP and geolocation from multiple sources, tests for WebRTC and DNS leaks, runs IP quality and browser fingerprint checks, speed tests, global latency and MTR tests, Whois lookups, censorship checks, and more.
- 57

sliver
12.1KBishopFox/sliver · GoSliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.
- 58
netmaker
11.8Kgravitl/netmaker · GoNetmaker is a tool that automates creating and managing virtual networks (mesh VPNs, remote access gateways, site-to-site links) using WireGuard.
- 59
immortalwrt
11.8Kimmortalwrt/immortalwrt · CImmortalWrt is a fork of OpenWrt (a Linux-based router firmware) with more packages ported, more devices supported, optimized default profiles, and localization specifically for mainland China users.
- 60
docker-pi-hole
11.7Kpi-hole/docker-pi-hole · ShellThis is the official Docker image for Pi-hole, a network-wide ad blocker, letting you run Pi-hole as a container on your own Linux hardware instead of installing it directly on the OS.
- 61

EmailValidator
11.6Kegulias/EmailValidator · PHPA PHP library that validates email addresses against several RFCs — 5321, 5322, 6530, 6531, 6532 and 1035.
- 62

register
11.6Kis-a-dev/register · JavaScriptis-a.dev lets any developer claim a free, personalized '.is-a.dev' subdomain for their website by submitting a pull request to this GitHub repository; Cloudflare then publishes the DNS records for free.
- 63

smartdns
11.3Kpymumu/smartdns · CSmartDNS is a local DNS server that forwards each query to multiple upstream DNS servers, measures which resolved IP responds fastest, and returns that IP to the client for a faster browsing experience. It also supports DoT, DoH, DoQ and DoH3 for privacy and can act as an ad filter by mapping specific domains to chosen IPs.
- 64
awesome-hacker-search-engines
11.3Kedoardottt/awesome-hacker-search-engines · ShellA curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.
- 65

netshoot
11Knicolaka/netshoot · Shellnetshoot is a Docker and Kubernetes network troubleshooting container, a 'swiss-army' image packed with networking, DNS, performance, and security tools for debugging container and host network issues.
- 66
Checkmate
11Kbluewave-labs/Checkmate · TypeScriptCheckmate is an open-source, self-hosted tool that monitors server uptime, response times, hardware (CPU, RAM, disk), and incidents in real time with dashboards and status pages.
- 67

anti-AD
10.9Kprivacy-protection-tools/anti-ADanti-AD is a curated ad-blocking and privacy filter list for the Chinese internet, built by merging and deduplicating major hosts/EasyList/adblock lists to block ads, telemetry and tracking domains at the network level.
- 68
chia-blockchain
10.8KChia-Network/chia-blockchain · PythonChia-blockchain is the official Python implementation of the Chia cryptocurrency, bundling full node, farmer, harvester, timelord, and wallet software.
- 69
bbot
10.7Kblacklanternsecurity/bbot · PythonBBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.
- 70

proxychains-ng
10.7Krofl0r/proxychains-ng · CProxyChains-NG is a UNIX program that hooks network-related libc functions in dynamically linked programs via LD_PRELOAD and redirects their TCP connections through SOCKS4a/5 or HTTP proxies. It is the continuation of the unmaintained proxychains project.
- 71

DnsServer
10.1KTechnitiumSoftware/DnsServer · C#Technitium DNS Server is an open source, self-hosted DNS server that works as both an authoritative server and a recursive resolver. Its headline use is blocking ads and malware at the DNS level for an entire home or organization network, with configuration done in a web console.
- 72

deploy-your-own-saas
10.1KAtarity/deploy-your-own-saas · PythonIt is a curated, categorized list of self-hosted, open-source alternatives to popular cloud services - VPN, music streaming, photo hosting, notes, bookmarks, email, chat, backups and more - so you can run 'your own' version of each instead of relying on a commercial provider.
- 73
OneForAll
10.1Kshmilylty/OneForAll · PythonOneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.
- 74
flowsint
9.8Kreconurge/flowsint · TypeScriptFlowsint is an open-source, graph-based OSINT investigation tool that lets analysts explore relationships between people, domains, IPs, organizations and more through a visual graph interface with automated enrichers.
- 75

tailcat
8.4Ktailscale/tailcat · GoTailcat is like netcat but running over Tailscale's encrypted data plane (WireGuard + magicsock + DERP) without needing Tailscale's control plane or a Tailscale account. One side runs a tailcat server and gets a short address; the other side connects to it, and traffic is end-to-end encrypted and NAT-traversed automatically.
- 76

MasterDnsVPN
7.1Kmasterking32/MasterDnsVPN · GoMasterDnsVPN is a DNS tunneling VPN that smuggles TCP traffic inside DNS queries and responses to get online when regular connections are blocked, aiming for the same goal as DNSTT or SlipStream but using its own lower-overhead protocol.
- 77

fq-book
7Khoochanlon/fq-book · ShellA free open-source Chinese-language book, 《这本书能让你连接互联网》 (This Book Can Get You Online), about getting online under censorship: hands-on setup for popular circumvention tools plus the principles behind proxies, tunnels, VPNs and GFW blocking.
- 78

web-to-app
6.8Kshiaho777/web-to-app · KotlinWebToApp is an Android app that builds installable APKs from web projects entirely on your phone — no PC and no remote build server. Beyond wrapping URLs, it runs real server runtimes, ships an anti-censorship network stack, signs for Google Play and supports browser extensions.
- 79

zenc
4.3Kzenc-lang/zenc · CZen C is a modern systems programming language with high-level ergonomics (type inference, pattern matching, generics, traits, async/await) that compiles to human-readable GNU C/C11 while maintaining 100% C ABI compatibility.
- 80

esp32-c3-adblock
3.2KM-Abozaid/esp32-c3-adblock · C++It is a Pi-hole-style DNS ad-blocker firmware that runs on a $2 ESP32-C3 chip with no PSRAM, storing up to 537k blocked domains as compact hashes in flash instead of RAM.
- 81

Open-Box
2.2Kliandu2024/Open-Box · ShellOpen-Box is an all-in-one transparent proxy solution for OpenWrt routers: it installs the sing-box core plus a web management panel with a single command, so you can set up proxy routing from a browser without hand-editing any config files.
- 82

CFNext
1.9KPAICNI/CFNext · JavaScriptCFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.
- 83

golive-skill
1.3Kmikehasa/golive-skill · TypeScriptGoLive is an open-source Agent Skill plus a zero-dependency Node CLI that takes an agent-built app live by detecting what it needs, planning the exact changes, asking for your approval, applying them with your own accounts, and verifying what actually works - covering hosting, databases, domains, email and payments.
- 84

motor-os
1.1Kmoturus/motor-os · RustMotor OS is a simple, fast, and secure operating system built for the cloud. It targets virtualized workloads — web serving, serverless computing, and edge caching — and is written entirely in Rust, kernel to shell.
- 85
ps5-webkit-autoloader
1.1KitsPLK/ps5-webkit-autoloader · JavaScriptIt is an automated payload loader for exploited (jailbroken) PS5 consoles: it boots the WebKit exploit chain and then sends your ELF payloads automatically, all triggered from a homescreen shortcut on the console itself.
- 86

local_roborock_server
935Python-roborock/local_roborock_server · PythonA self-hosted local HTTPS and MQTT server that emulates Roborock's cloud backend on your own LAN, letting your Roborock vacuum keep live maps and local control without reaching the internet, and without rooting or modifying hardware.
- 87
runs-on.dev
447zordhalo/runs-on.dev · JavaScriptA free subdomain registry — claim a 'yourname.runs-on.dev' subdomain in seconds and point it wherever you like, with the claim itself stored as a file in this GitHub repo.
- 88

is-a-software
191is-a-software/is-a-software · JavaScriptis-a-software lets developers claim a free custom subdomain under .is-a.software (like myproject.is-a.software) and point it at their site using custom DNS records such as A, AAAA, CNAME, TXT, MX, and NS.
- 89

nyx
158thecynetx/nyx · TypeScriptNyx Panel is a self-hosted web management suite for Xray-core proxy servers, built to resist heavy censorship (Iran-focused) using VLESS+REALITY, XHTTP/SplitHTTP, packet fragmentation and Cloudflare WARP.
- 90

xdp-dns-evadeproxy
131Oihalitz/xdp-dns-evadeproxy · RustA DNS proxy in Rust that sidesteps blanket ISP IP blocks: when an operator cuts off an anycast address shared by hundreds of Cloudflare sites, it rewrites that IP in the DNS response to an unblocked neighbor of the same prefix.
Related topics
Often tagged together