Tls projects on GitHub

1. 1
   #1 · localsend/localsend

   localsend

   LocalSend is a free, open-source app for securely sharing files and messages with nearby devices over your local network, without needing an internet connection - a cross-platform AirDrop alternative for Windows, macOS, Linux, Android and iOS.

   94.6K
2. 2
   #2 · caddyserver/caddy

   caddy

   Caddy is a fast, extensible web server written in Go that enables HTTPS automatically by default. It can act as an HTTP/1-2-3 server, reverse proxy, and general platform for running Go-based 'apps' (modules).

   78.1K
3. 3
   #3 · LadybirdBrowser/ladybird

   ladybird

   Ladybird is a truly independent web browser built on its own novel engine designed around web standards.

   66.5K

4. 4

   mkcert

   59.7KFiloSottile/mkcert · Go

   mkcert is a simple zero-config tool that creates locally-trusted TLS certificates for development, so your local HTTPS sites don't show browser warnings.

   • localhost
   • self-hosted-ai
   • https
   • firefox
5. 5

   requests

   54.5Kpsf/requests · Python

   It is a simple, yet elegant, HTTP library for Python that lets you send HTTP/1.1 requests extremely easily.

   • rest-client
   • sessions
   • client
   • ssl
6. 6

   etcd

   52.4Ketcd-io/etcd · Go

   A distributed, reliable key-value store for the most critical data of a distributed system, written in Go and kept consistent across machines with the Raft consensus algorithm.

   • raft
   • distributed-storage
   • etcd
   • key-value-store
7. 7

   kubernetes-the-hard-way

   50.4Kkelseyhightower/kubernetes-the-hard-way

   A step-by-step tutorial that walks you through bootstrapping a Kubernetes cluster manually, without any automation scripts, so you learn how every component actually works.

   • etcd
   • homelab
   • arm64
   • infrastructure
8. 8

   3x-ui

   48.1KMHSanaei/3x-ui · Go

   3X-UI is an open-source web control panel for managing Xray-core servers, letting you deploy, configure, and monitor many proxy and VPN protocols from one VPS or across multiple nodes.

   • post-quantum
   • reality
   • mtproto
   • hysteria2
9. 9

   acme.sh

   47.8Kacmesh-official/acme.sh · Shell

   acme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.

   • ssl-certificate
   • acme
   • posix
   • openbsd
10. 10

    okhttp

    47.1Klysine-dev/okhttp · Kotlin

    OkHttp is an efficient HTTP client for the JVM, Android, and GraalVM, handling HTTP/1.1, HTTP/2, websockets, and SSE with connection pooling and transparent GZIP.

    • websockets
    • http-client
    • kotlin
    • http
11. 11

    mitmproxy

    45.7Kmitmproxy/mitmproxy · Python

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSockets, used by penetration testers and developers to inspect and modify traffic. mitmdump is its CLI version, and mitmweb is a web-based interface.

    • http2
    • ssl
    • pentesting
    • debugging
12. 12

    Xray-core

    42.2KXTLS/Xray-core · Go

    Xray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.

    • xtls
    • reality
    • anticensorship
    • vision
13. 13

    filebrowser

    35.9Kfilebrowser/filebrowser · Go

    File Browser is a self-hosted file manager you point at a directory on your server, giving you a web interface to upload, delete, preview, and edit files inside it.

    • file-manager
    • file-sharing
    • jwt
    • material-design
14. 14

    certbot

    33.3Kcertbot/certbot · Python

    Certbot is EFF's command-line tool that automatically fetches a free TLS certificate from Let's Encrypt and deploys it to your web server to enable HTTPS, and it can also work with any other certificate authority that speaks the ACME protocol.

    • ssl-certificate
    • acme
    • certificate
    • letsencrypt
15. 15

    echo

    32.8Klabstack/echo · Go

    Echo is a high performance, minimalist web framework for Go, used to build web apps, RESTful APIs and microservices.

    • micro-framework
    • letsencrypt
    • http2
    • microservice
16. 16

    nginx

    31.9Knginx/nginx · C

    NGINX ('engine x') is a free, open source web server, load balancer, reverse proxy, API gateway and content cache — described as the world's most popular web server.

    • http3
    • quic
    • http2
    • http-proxy
17. 17

    openssl

    31Kopenssl/openssl · C

    OpenSSL is an open source toolkit for TLS, DTLS and QUIC, built on a full-strength general purpose cryptographic library you can also use on its own. It descends from the SSLeay library by Eric Young and Tim Hudson.

    • certificate
    • ssl
    • cryptography
    • encryption
18. 18

    consul

    30.1Khashicorp/consul · Go

    Consul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.

    • consul
    • ecs
    • service-mesh
    • service-discovery
19. 19

    deskflow

    29.8Kdeskflow/deskflow · C++

    A free, open-source app that lets the keyboard, mouse, or trackpad of one computer control several nearby computers, moving seamlessly between them — like a software KVM but without the video.

    • mouse
    • clipboard
    • kvm
    • wayland
20. 20

    v2ray

    29.7K233boy/v2ray · Shell

    A one-click install and management script for V2Ray proxy servers, letting you set up and run multiple VMess, VLESS, Trojan and Shadowsocks configurations on your own Linux server through a single command-line tool.

    • shell-script
    • xray
    • vmess
    • vless
21. 21

    nginxconfig.io

    28.3Kdigitalocean/nginxconfig.io · JavaScript

    A free web-based NGINX configuration generator by DigitalOcean: you pick what your server needs and it produces a tuned config for your use case.

    • ssl-certificate
    • webserver
    • letsencrypt
    • http2
22. 22

    pingora

    27.6Kcloudflare/pingora · Rust

    Pingora is a Rust framework by Cloudflare for building fast, reliable, and programmable network services and proxies. It is battle-tested, having served more than 40 million internet requests per second for years.

    • load-balancer
    • grpc
    • caching
    • reverse-proxy
23. 23

    valkey

    27.4Kvalkey-io/valkey · C

    Valkey is an open-source, high-performance data structure server for key/value workloads like caching and other realtime use cases. It ships a wide range of native structures plus a plugin system for adding new ones.

    • valkey
    • key-value-store
    • cache
    • distributed
24. 24

    request

    25.5Krequest/request · JavaScript

    Request is a simplified HTTP client for Node.js, built to make HTTP calls as simply as possible. It supports HTTPS and follows redirects by default.

    • form
    • https
    • http-client
    • oauth
25. 25

    actix-web

    24.9Kactix/actix-web · Rust

    Actix Web is a powerful, pragmatic and extremely fast web framework for Rust, used to build web servers, APIs and realtime services.

    • webserver
    • http2
    • ssl
    • websockets
26. 26

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

    • security-hardening
    • secret-management
    • zero-trust
    • checklist
27. 27

    localtunnel

    22.5Klocaltunnel/localtunnel · JavaScript

    localtunnel exposes a localhost server to the public internet with a temporary public URL, without needing to configure DNS or deploy anywhere.

    • promise
    • local
    • events
    • api-client
28. 28

    PHPMailer

    22.3KPHPMailer/PHPMailer · PHP

    PHPMailer is a full-featured email creation and transfer class for PHP — probably the world's most popular code for sending email from PHP, used by WordPress, Drupal, Joomla!, Yii, SugarCRM and many other open-source projects.

    • validations
    • login
    • local
    • mail
29. 29

    v2ray-agent

    22.1Kmack-a/v2ray-agent · Shell

    An all-in-one one-click script that installs and manages proxy services on your own server, built around the Xray-core and sing-box cores and driven from a terminal menu.

    • reality
    • hysteria2
    • xray-core
    • sing-box
30. 30

    trojan

    19.8Ktrojan-gfw/trojan · C++

    Trojan is a censorship-circumvention proxy — an 'unidentifiable mechanism' built to get your traffic across China's Great Firewall (GFW).

    • anticensorship
    • censorship
    • proxy-server
    • trojan
31. 31

    uWebSockets

    19KuNetworking/uWebSockets · C++

    μWebSockets is a simple, secure and standards-compliant web server for demanding applications, built as a C++ library — so optimized for speed and memory that its TLS 1.3 encrypted messaging outruns most servers' cleartext.

    • pubsub
    • websockets
    • web-server
    • router
32. 32

    ZeroNet

    18.8KHelloZeroNet/ZeroNet · JavaScript

    ZeroNet is open-source software for a decentralized web: it lets you publish and visit websites that use Bitcoin cryptography and the BitTorrent network for distribution instead of a traditional hosting provider.

    • tor
    • anticensorship
    • bitcoin
    • bittorrent
33. 33

    gost

    18.2Kginuerzh/gost · Go

    GOST (GO Simple Tunnel) is a secure, multi-protocol proxy and tunnel tool written in Go. It can act as an HTTP/SOCKS5 proxy, chain multiple proxies together, and forward local or remote TCP/UDP ports through encrypted channels.

    • sni
    • quic
    • http2
    • udp
34. 34

    node-redis

    17.6Kredis/node-redis · TypeScript

    Node-Redis is a modern, high performance Redis client for Node.js — the library your JavaScript or TypeScript app uses to talk to a Redis server, with support for Redis Stack modules like JSON, Search and Time-Series.

    • redis-client
    • redis-cluster
    • in-memory
    • pubsub
35. 35

    sqlx

    17.6Ktransact-rs/sqlx · Rust

    SQLx is an async, pure Rust SQL toolkit for talking to databases, with compile-time checked queries and no DSL. It supports PostgreSQL, MySQL, MariaDB, and SQLite.

    • database-client
    • mariadb
    • postgres
    • toolkit
36. 36

    goproxy

    17.1Ksnail007/goproxy · Go

    goproxy is a high-performance proxy server written in Go. A single binary handles HTTP(S), SOCKS5, SS, WebSocket, TCP and UDP proxying, plus TCP/UDP port forwarding and intranet penetration for exposing servers behind NAT.

    • ssh-tunnel
    • transparent-proxy
    • socket
    • udp
37. 37

    cpp-httplib

    16.9Kyhirose/cpp-httplib · C++

    A C++11 single-file header-only HTTP/HTTPS server and client library — you add networking to a C++ program by including one header, httplib.h.

    • single-header-lib
    • cpp11
    • header-only
    • client
38. 38

    emqx

    16.8Kemqx/emqx · Erlang

    EMQX is an MQTT broker and messaging platform for IoT: it connects millions of devices, routes messages in real time, and bridges them into backend data systems. Aimed at AI, IoT, IIoT, connected vehicles and smart cities.

    • erlang
    • broker
    • manufacturing
    • pubsub
39. 39

    how-web-works

    16.8Kvasanthk/how-web-works

    A detailed walkthrough of everything that happens behind the scenes between typing 'google.com' into a browser and the page rendering on screen, covering keyboard input, URL parsing, DNS, TLS, HTTP, and browser rendering internals.

    • system-design
    • dns
    • curriculum
    • interview-preparation
40. 40

    chisel

    16.7Kjpillora/chisel · Go

    Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH — a single executable that runs as either client or server, mainly used for passing through firewalls or providing a secure endpoint into your network.

    • tcp
    • socks5
    • tunnel
    • reverse-proxy
41. 41

    Cloudflare-vless-trojan

    16.6Kyonggekkk/Cloudflare-vless-trojan · JavaScript

    Scripts that deploy free VLESS-WS(TLS) and Trojan-WS(TLS) proxy nodes on Cloudflare Workers/Pages, plus a local Socks5/HTTP proxy script with ECH-TLS, normal TLS or no-TLS modes for devices like soft routers.

    • argo
    • reality
    • cloudflare-pages
    • clash-meta
42. 42

    cfnew

    16.4KbyJoey/cfnew

    CFnew is a Cloudflare Workers/Pages proxy panel that generates VLESS, Trojan and xhttp nodes, converts them into subscription formats for clients like Clash, Surge, Sing-box, Loon, Quantumult X, V2ray and Shadowrocket, and lets you manage everything through a web config page backed by Cloudflare KV.

    • edge-computing
    • http-proxy
    • key-value
    • vless
43. 43

    ecapture

    15.5Kgojue/ecapture · C

    An open-source command-line security tool that uses eBPF to capture SSL/TLS traffic in plaintext — no CA certificate installation or MITM proxy needed. It can also audit shell commands and database queries on the host.

    • packet-capture
    • network-analysis
    • ebpf
    • ssl
44. 44

    mailinabox

    15.4Kmail-in-a-box/mailinabox · Python

    It turns a fresh machine into a complete, self-hosted email server — SMTP, IMAP, webmail, contacts and calendar sync, DNS, spam filtering and backups — with a single install command, so individuals can run their own email instead of relying on providers.

    • mailserver
    • mail
    • imap
    • smtp
45. 45

    ioredis

    15.3Kredis/ioredis · TypeScript

    ioredis is a Redis client library for Node.js, built to be robust, performance-focused, and full-featured, covering Cluster, Sentinel, Streams, Pipelining, Lua scripting and Pub/Sub.

    • redis-client
    • redis-cluster
    • pubsub
    • key-value
46. 46

    brook

    15.2Ktxthinking/brook · Go

    Brook is a cross-platform programmable network tool that works as both a server and a client, giving you SOCKS5 proxying, TLS encryption, traffic decryption/MITM inspection, and packet capture in one toolkit.

    • packet-capture
    • network-programming
    • network-analysis
    • zero-configuration
47. 47

    openship

    14.8Koblien/openship · TypeScript

    Openship is an open-source, self-hostable deployment platform with built-in CI/CD: point it at a repo and it builds, ships, routes and TLS-terminates your app, driven from a desktop app, web dashboard or CLI.

    • paas
    • letsencrypt
    • ci-cd
    • reverse-proxy
48. 48

    openvpn

    14.7KOpenVPN/openvpn · C

    OpenVPN is an open-source VPN daemon — a background service that creates a secure, encrypted tunnel over the public internet, so your device can reach a private network as if it were directly connected.

    • openvpn
    • vpn-server
    • daemon
    • ssl
49. 49

    coturn

    14.5Kcoturn/coturn · C

    coturn is a free, open-source implementation of a TURN and STUN server, used as a VoIP media relay and NAT traversal gateway, commonly deployed alongside WebRTC applications.

    • voip
    • nat-traversal
    • load-balancer
    • webrtc
50. 50

    rathole

    14.3Krathole-org/rathole · Rust

    Rathole is a secure, stable, high-performance reverse proxy written in Rust that exposes a service running on a device behind NAT to the Internet through a server with a public IP, similar to frp and ngrok.

    • nat
    • nat-traversal
    • firewall
    • network
51. 51

    nginx-admins-handbook

    14.3Ktrimstray/nginx-admins-handbook · Shell

    A free, community-maintained handbook of personal notes, tips, and gotchas for administering, securing, and tuning NGINX (and OpenResty/Tengine) in production.

    • handbook
    • snippets
    • notes
    • https
52. 52

    memcached

    14.3Kmemcached/memcached · C

    Memcached is a high-performance, multithreaded, event-based key/value cache store designed for use in distributed systems.

    • in-memory
    • daemon
    • cache
    • key-value
53. 53

    cert-manager

    14.1Kcert-manager/cert-manager · Go

    cert-manager adds certificates and certificate issuers as resource types in Kubernetes, automating the process of obtaining, renewing, and using TLS certificates for workloads in a cluster.

    • certificate
    • letsencrypt
    • cncf
    • infrastructure
54. 54

    libsodium

    14Kjedisct1/libsodium · C

    Libsodium is an easy-to-use software library providing cryptographic operations like encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable fork of NaCl that keeps API compatibility while improving usability.

    • crypto
    • compression
    • cryptography
    • oauth2
55. 55

    SoftEtherVPN

    13.7KSoftEtherVPN/SoftEtherVPN · C

    SoftEther VPN is a free, open-source, cross-platform VPN program where a single server can speak SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP.

    • wireguard-vpn
    • openvpn
    • vpn-server
    • wireguard
56. 56

    mailcow-dockerized

    13.6Kmailcow/mailcow-dockerized · JavaScript

    Mailcow is a self-hosted, dockerized mail server suite - it bundles Postfix (SMTP), Dovecot (IMAP), SOGo (webmail/groupware), Rspamd (spam filtering), ClamAV (antivirus) and ACME certificate automation into a set of containers you run yourself.

    • mailserver
    • acme
    • mail
    • imap
57. 57

    tengine

    13.4Kalibaba/tengine · C

    Tengine is a high-performance web server and reverse proxy originated by Taobao, built as a fork of nginx that stays 100% compatible with it while adding extra enterprise features.

    • load-testing
    • http3
    • quic
    • load-balancer
58. 58

    Halfrost-Field

    13.2Khalfrost/Halfrost-Field · Go

    Halfrost-Field is a personal technical blog archive by halfrost containing long-form deep-dive articles on source code analysis, system design, and engineering topics such as Go internals, vLLM/LLM serving, machine learning notes, and network protocols.

    • source-code-analysis
    • technical-writing
    • protobuf
    • http2
59. 59

    hydradb

    13.1Khydra-db/hydradb · Rust

    HydraDB is an object-store-native distributed graph database written in Rust: the graph lives in S3-compatible storage, queried over OpenCypher with Neo4j-compatible Bolt connectivity and an HTTPS JSON/NDJSON API.

    • neo4j
    • object-storage
    • graph-database
    • helm
60. 60

    grpcurl

    12.9Kfullstorydev/grpcurl · Go

    A command-line tool for interacting with gRPC servers — basically curl for gRPC. gRPC speaks binary protobuf on the wire, which regular curl can't produce, so grpcurl takes your request as JSON and converts it to protobuf before sending.

    • protobuf
    • grpc
    • homebrew
    • json
61. 61

    clip-as-service

    12.8Kjina-ai/clip-as-service · Python

    CLIP-as-service is a low-latency, high-scalability service for embedding images and text with CLIP models, so you can plug it into neural search or cross-modal retrieval apps as a microservice.

    • neural-search
    • bert
    • grpc
    • vector-search
62. 62

    quiche

    12.8Kcloudflare/quiche · Rust

    quiche is Cloudflare's implementation of the QUIC transport protocol and HTTP/3, as specified by the IETF.

    • network-programming
    • http3
    • curl
    • quic
63. 63

    iroh

    12.7Kn0-computer/iroh · Rust

    Iroh is a Rust library that lets you connect to other devices by dialing their public key instead of an IP address; it automatically finds and maintains the fastest connection—direct via hole-punching, or falling back to a relay—built on QUIC.

    • quic
    • peer-to-peer
    • realtime
    • decentralized
64. 64

    portless

    12.7Kvercel-labs/portless · TypeScript

    Portless is a CLI tool that replaces unstable local dev port numbers with stable, named .localhost URLs, with HTTPS and HTTP/2 enabled by default.

    • localhost
    • worktrees
    • certificate
    • http2
65. 65

    grpc-rust

    12.5Kgrpc/grpc-rust · Rust

    tonic — a native Rust gRPC client and server implementation. It runs over HTTP/2 with first-class async/await support and is built as a core building block for production systems written in Rust.

    • protocol-buffers
    • protobuf
    • http2
    • client
66. 66

    sliver

    12.1KBishopFox/sliver · Go

    Sliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.

    • adversarial-attacks
    • command-and-control
    • dns-server
    • red-teaming
67. 67

    kubeshark

    12.1Kkubeshark/kubeshark · Go

    Kubeshark is an eBPF-powered network observability tool for Kubernetes that captures and indexes L4/L7 traffic with full Kubernetes context, decrypts TLS without managing keys, and lets both humans and AI agents query the data.

    • network-analysis
    • ebpf
    • sre
    • incident-response
68. 68

    synapse

    12.1Kmatrix-org/synapse · Python

    Synapse is an open-source Matrix homeserver written in Python/Twisted - server software that lets you run your own chat server on the decentralized, federated Matrix network, with support for encryption and VoIP.

    • matrix
    • xss
    • voip
    • federation
69. 69

    grpc-java

    12.1Kgrpc/grpc-java · Java

    gRPC-Java is the official Java implementation of gRPC, Google's RPC framework built on top of HTTP/2. It lets Java and Android clients and servers call each other through typed, binary service stubs instead of hand-rolled REST/JSON APIs.

    • bazel
    • protocol-buffers
    • http2
    • rpc
70. 70

    reqwest

    11.9Kseanmonstar/reqwest · Rust

    Reqwest is an easy and powerful HTTP client library for Rust — ergonomic and batteries-included, so the common things an HTTP client needs work out of the box.

    • https
    • http-client
    • async
    • wasm
71. 71

    talos

    11.4Ksiderolabs/talos · Go

    Talos is a modern Linux-based operating system built specifically for running Kubernetes: secure, immutable, and minimal, with all system management done through an API instead of a shell.

    • containerd
    • linux-distribution
    • bare-metal
    • infrastructure-as-code
72. 72

    smartdns

    11.3Kpymumu/smartdns · C

    SmartDNS is a local DNS server that forwards each query to multiple upstream DNS servers, measures which resolved IP responds fastest, and returns that IP to the client for a faster browsing experience. It also supports DoT, DoH, DoQ and DoH3 for privacy and can act as an ad filter by mapping specific domains to chosen IPs.

    • dns-over-tls
    • dns-server
    • dns-over-https
    • ipv6
73. 73

    Java-WebSocket

    10.8KTooTallNate/Java-WebSocket · Java

    Java-WebSocket is a barebones WebSocket client and server implementation written in 100% Java, built on java.nio for a non-blocking, event-driven model.

    • ssl
    • https
    • websocket
    • java
74. 74

    fq

    10.6Kwader/fq · Go

    fq is a command-line tool, language and collection of decoders for working with binary formats - often described as jq for binary data. You can dump a file's structure, run jq-style queries against it and explore results in an interactive REPL.

    • packet-capture
    • repl
    • codec
    • xml
75. 75

    yugabyte-db

    10.6Kyugabyte/yugabyte-db · C

    YugabyteDB is an open-source, PostgreSQL-compatible distributed SQL database. It combines the transactional correctness of a traditional RDBMS with the horizontal scalability of NoSQL systems, aimed at business-critical cloud-native OLTP apps.

    • multi-cloud
    • relational-database
    • consensus
    • distributed-database
76. 76

    all-in-one

    10.6Knextcloud/all-in-one · PHP

    The official Nextcloud installation method: one Docker-managed package that deploys and maintains a full self-hosted Nextcloud instance with most features included, controlled from a single web interface.

    • letsencrypt
    • office
    • file-sharing
    • backup
77. 77

    tg-ws-proxy

    10.6KFlowseal/tg-ws-proxy · Python

    TG WS Proxy is a local MTProto proxy for Telegram Desktop that speeds up or partially bypasses Telegram's blocking by routing traffic through WebSocket (TLS) connections, without relying on any third-party servers.

    • pyinstaller
    • proxy-server
    • linux-app
    • menu-bar
78. 78

    httpx

    10.5Kprojectdiscovery/httpx · Go

    httpx is a fast, multi-purpose HTTP toolkit from ProjectDiscovery that runs many probes against lists of hosts and URLs, built on the retryablehttp library to stay reliable under high thread counts.

    • ssl-certificate
    • pentest-tool
    • bugbounty
    • pipeline
79. 79

    nezha

    10.4Knezhahq/nezha · Go

    Nezha Monitoring is a self-hosted, lightweight tool for monitoring your servers and websites and handling O&M from one dashboard: status checks, alerts, scheduled tasks and a web terminal.

    • uptime-monitoring
    • monitoring-tool
    • alerting
    • system
80. 80

    web-to-app

    6.8Kshiaho777/web-to-app · Kotlin

    WebToApp is an Android app that builds installable APKs from web projects entirely on your phone — no PC and no remote build server. Beyond wrapping URLs, it runs real server runtimes, ships an anti-censorship network stack, signs for Google Play and supports browser extensions.

    • app-builder
    • fingerprint
    • webview
    • userscript
81. 81

    telemt

    5.7Ktelemt/telemt · Rust

    Telemt is a fast, secure, feature-rich MTProxy server for Telegram, built in Rust with Tokio, implementing the official MTProto proxy algorithm plus extra production-ready features.

    • sni
    • mtproto
    • obfuscation
    • webview
82. 82

    quip-node-manager

    5.5KQuipNetwork/quip-node-manager · Rust

    Quip Node Manager is a desktop GUI app for running and monitoring nodes on the Quip Network, a blockchain that supports both classical CPU mining and D-Wave quantum (QPU) mining.

    • metal
    • blockchain
    • tauri
    • tui
83. 83

    testsprite-cli

    4.7KTestSprite/testsprite-cli · TypeScript

    The official CLI of TestSprite, an AI testing platform 100,000+ teams use to test frontend and backend in the cloud against the live product, not mocks — and feed what broke back to your coding agent so it fixes its own work.

    • qa
    • kiro
    • windsurf
    • e2e-testing
84. 84

    mhr-cfw

    4.4Kdenuitt1/mhr-cfw · Python

    MHR-CFW is a domain-fronting relay that disguises your traffic as requests to an allowed domain like Google, routing it through Google Apps Script and a Cloudflare Worker before fetching the real site. It's built to bypass DPI (deep packet inspection) based network filtering.

    • dpi
    • dpi-bypass
    • sni
    • mitm
85. 85

    RVG

    4.3Karvin341az-glitch/RVG · Python

    RVG Gateway is a self-hosted multi-protocol proxy management panel built with Python and FastAPI. It lets you create, monitor, and manage VLESS, Trojan, Shadowsocks, and MTProto proxy links through a web dashboard, and deploys to Railway in minutes.

    • gateway
    • telegram-bot
    • vless
    • trojan
86. 86

    MasterHttpRelayVPN

    3.9Kmasterking32/MasterHttpRelayVPN · Python

    MasterHttpRelayVPN is a local proxy that routes your browser traffic through a Google Apps Script relay using domain fronting and MITM TLS interception, designed to evade DPI and censorship.

    • dpi
    • sni
    • dns-over-https
    • relay
87. 87

    russia-mobile-internet-whitelist

    3.8Khxehex/russia-mobile-internet-whitelist

    A community-maintained list of domains and IP ranges that stay reachable in Russia even when mobile internet gets throttled or filtered, meant to be fed into VPN or proxy clients so their traffic blends in with what the government allows through.

    • ipv4
    • xray-core
    • anticensorship
    • sing-box
88. 88

    MasterHttpRelayVPN-RUST

    3.6Ktherealaleph/MasterHttpRelayVPN-RUST · Rust

    It is a Rust port of MasterHttpRelayVPN, a free DPI/censorship-bypass tool that routes your traffic through a Google Apps Script you deploy in your own Google account, using TLS SNI concealment so your ISP only sees a connection to www.google.com.

    • dpi-bypass
    • sni
    • egui
    • iran
89. 89

    sill

    2.8KSaffsanity/sill · Swift

    Sill streams a window from your Mac, or your whole desktop, live to your iPhone or iPad, so you can touch, type and draw on it as if it were local.

    • hevc
    • ipad
    • tailscale
    • iphone
90. 90

    walgit

    2.6Ktobi/walgit · Rust

    walgit is a single-binary git server that stores every repository as a write-ahead log in an S3 or GCS bucket instead of a database. It implements smart HTTP git (v0/v2), bundle-uri clones, Git LFS, a web browsing UI, and a JSON API with an SDK, and it can scale to repositories larger than the machine running it.

    • object-storage
    • cloud-storage
    • nginx
    • oidc
91. 91

    mtproto.zig

    2.1Ksleep3r/mtproto.zig · Zig

    mtproto.zig is a tiny self-hosted MTProto proxy for Telegram that disguises your traffic as ordinary TLS 1.3 HTTPS, so censors and DPI filters can't tell it's Telegram. You run it on your own cheap VPS and share a single tg:// link with people who want their Telegram unblocked.

    • dpi
    • dpi-bypass
    • mtproto
    • zig
92. 92

    CFNext

    1.9KPAICNI/CFNext · JavaScript

    CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.

    • obfuscation
    • dns-over-https
    • ipv6
    • vless
93. 93

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

    • bm25
    • wsl
    • sse
    • llamacpp
94. 94

    personal-edge-proxy

    1.1Kyding-git/personal-edge-proxy

    A self-hosted personal proxy architecture combining Hysteria2 as the main daily entry, Xray with VLESS+REALITY+Vision as a backup inbound, and Cloudflare WARP (plus an optional fixed SOCKS5) as outbound routing, tuned specifically for more reliable access to AI services like ChatGPT, Claude, Codex and Gemini.

    • xtls
    • cloudflare-tunnel
    • hysteria2
    • xray-core
95. 95

    motor-os

    1.1Kmoturus/motor-os · Rust

    Motor OS is a simple, fast, and secure operating system built for the cloud. It targets virtualized workloads — web serving, serverless computing, and edge caching — and is written entirely in Rust, kernel to shell.

    • microkernel
    • edge-computing
    • qemu
    • kvm
96. 96

    azerioid-stack-manager

    710azerioid/azerioid-stack-manager · PHP

    AZERIOID Stack Manager is a self-contained stack manager and web control panel for operators who run sites on a single Linux server. It bootstraps Caddy, a dedicated PHP-FPM pool and a SQLite-backed admin UI, then lets you add web servers, databases, cache, mail, Node.js and rootless Docker on demand.

    • mailserver
    • process-manager
    • totp
    • admin-panel
97. 97

    BEAR-C2

    703S3N4T0R-0X0/BEAR-C2 · Python

    BEAR-C2 is an adversary simulation and emulation framework for red team operations, built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

    • command-and-control
    • phishing
    • mitre-attack
    • security-automation
98. 98

    SideRail

    589icubaby/SideRail · TypeScript

    SideRail is a neobrutalist web control panel for Xray-core VPN servers that you deploy to Railway with one click, giving you clean client links, live stats and subscription pages without manual config.

    • xray-core
    • rate-limiting
    • xray
    • vmess
99. 99

    dsh-mobile

    524Clarklevis1995/dsh-mobile · Kotlin

    DeepSeek Harness Mobile (dsh-mobile) is a native mobile client for DeepSeek Harness, bringing your Harness workspaces, sessions, live agent replies and execution trajectories to an Android or iOS phone.

    • ios-swift
    • kotlin-multiplatform
    • deepseek-harness-plugin
    • uikit
100. 100

     dsh-mobile

     485saya-ch/dsh-mobile · TypeScript

     DSH Mobile is an Android app and companion plugin for DeepSeek Harness (DSH) that lets you access your desktop DSH session from your phone over LAN or an optional remote tunnel, keeping the same workspace, messages and tools in sync in real time.

     • letsencrypt
     • tailscale
     • webview
     • remote-control

Showing the 100 most-starred of 114. See every one in the catalog.

• linux4,184
• networking565
• open-source5,666
• security976
• self-hosted1,929
• server1,459
• docker1,660
• windows3,403
• proxy383
• cross-platform2,623
• macos3,544
• cli2,227
• encryption256
• mit3,312
• apache-2.01,434
• web2,447
• privacy886
• http210
• go681
• vpn145
• api1,094
• developer-tools2,924
• websocket202
• android743