Open-source alternatives to NETworkManager

Ethical-Hacking-Labs is a comprehensive cybersecurity training curriculum and lab suite designed for learning penetration testing, network analysis, and offensive security techniques. It provides a structured environment for practicing the full attack lifecycle, from initial reconnaissance and scanning to exploitation and post-compromise analysis. The project provides instructional materials and guided exercises that cover specific technical domains, including open source intelligence research and network security courseware. It includes a practical workbook for identifying system vulnerabili

LibreNMS is an SNMP network monitoring system and IT infrastructure management suite. It serves as an automated network discovery tool and infrastructure dashboard, enabling the identification and monitoring of network hardware and operating systems. The system differentiates itself through a rule-based alerting engine and a comprehensive IT incident workflow integration. It supports complex alert routing, including escalation sequences and direct ticket generation for project management and service desk platforms. Its observability capabilities cover multi-vendor hardware oversight, applica

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

NetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce

This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source services on a home server. It primarily utilizes Docker and Docker Compose to automate the orchestration, lifecycle management, and deployment of containerized applications. The repository provides a comprehensive suite for self-hosted infrastructure, covering network management tools, media streaming, and home automation. It includes specialized configurations for securing internal services via reverse proxies, WireGuard VPN tunnels, and automated SSL/TLS certificate manageme

Nuclei is a modular security scanning framework designed for automated vulnerability detection and infrastructure reconnaissance. It functions as a template-driven engine that executes security checks across diverse network protocols, allowing users to define custom detection logic to identify vulnerabilities, misconfigurations, and exposed assets. The platform distinguishes itself through its highly extensible architecture, which supports distributed scanning, headless browser automation for dynamic web content, and out-of-band interaction monitoring to detect blind vulnerabilities. It integ

Kubo is a peer-to-peer implementation of the InterPlanetary File System (IPFS) designed for decentralized data storage and content delivery. It uses content-addressing, directed acyclic graphs, and distributed hash tables to identify, distribute, and retrieve data across a network without relying on central servers. The project differentiates itself by providing a virtual filesystem via FUSE, which maps decentralized network namespaces to local operating system directories for direct file access. It also includes integrated HTTP gateways that translate peer-to-peer content into standard web t

Hammerspoon is a programmable automation engine for macOS that enables deep system-level control through a Lua scripting environment. By bridging high-level scripts with native Objective-C APIs, it allows users to interact with the operating system's accessibility tree, intercept hardware input streams, and manage the lifecycle of running applications. The project distinguishes itself through an event-driven architecture that registers asynchronous hooks for system notifications and hardware events. This allows for real-time automation, such as remapping keyboard and mouse inputs, managing wi

RustScan is a high-speed TCP network scanner written in Rust, designed for security reconnaissance and network mapping. It functions as an automated port discovery engine that identifies open ports on remote hosts using IPv6 addresses, CIDR ranges, or bulk input files. The tool is built for rapid surface area discovery, utilizing parallel port processing and OS-aware performance optimizations to identify active services. It allows for scan precision tuning through adjustable connection timeout thresholds and concurrent request controls to balance speed and accuracy. The system integrates wit

SwitchHosts is a desktop application for managing and switching between multiple sets of system hosts file entries. It functions as a network environment switcher and an operating system hosts file manager, allowing users to map domain names to specific IP addresses for local DNS management. The tool distinguishes itself through remote hosts synchronization, which fetches and updates local data from remote URLs on a defined schedule. It enables rapid configuration toggling via a main window and system tray menu to swap between different network routing sets instantly. The application include

Blink is a mobile terminal platform for iOS that combines an SSH and Mosh client with a local shell emulator, snippet manager, and SSH key storage. It renders terminal output using Chromium's HTerm engine for fast display and maintains persistent remote sessions across network changes through the Mosh protocol. The platform supports SSH key-based authentication, WebAuthn hardware security keys, and SOCKS5 proxy tunneling for secure remote access. The terminal environment is built around gesture-based session navigation, allowing users to switch between multiple shells with swipe and pinch ges

Nmap is a command-line network security scanner and reconnaissance framework designed for infrastructure mapping and security auditing. It functions as a packet crafting utility that probes target systems to identify active hosts, detect open ports, and determine the services and operating systems running on a network. The tool distinguishes itself through its ability to perform raw socket packet injection and stateful connection tracking, allowing it to bypass standard operating system networking stacks. It utilizes an asynchronous concurrency model to manage large-scale network scans and em

Scanopy is a self-hosted infrastructure inventory and network discovery tool. It identifies hosts, services, and workloads across subnets to build a live model of network infrastructure, maintaining a searchable catalog of assets. The system features an interactive network topology visualizer that generates physical, logical, and application dependency diagrams. It maps the nesting chain from physical hardware and hypervisors down to virtual machines and containers, utilizing SNMP for hardware metadata and container APIs for workload discovery. The platform supports distributed network scann

lazyssh is a keyboard-driven SSH connection manager and server browser designed for remote host administration. It provides a centralized interface to organize, filter, and launch secure shell sessions to multiple remote servers. The tool features a fuzzy-search server browser that allows for rapid location of hosts by alias, IP address, or tags. It includes an integrated configuration editor for managing host entries and a session orchestrator that handles proxy jumps, port forwarding, and identity file assignments. The system further automates connectivity through automatic identity file d

UpSnap is a containerized network utility designed for managing the power states of remote hardware. It functions as a wake-on-LAN management dashboard and network device monitor, allowing users to trigger remote wake-up events and execute shutdown commands across a local network. The system includes a cron-based power scheduler to automate recurring wake and power events. It provides a centralized interface for sending magic packets to wake devices and monitors hardware availability through port-based connectivity probing. The application supports multi-user hardware access with granular pe

GitHub520 is a DNS resolution accelerator and hosts file optimizer that provides curated sets of IP addresses to bypass slow or broken DNS lookups. It specifically functions as a GitHub hosts resolver, providing optimized mappings to resolve connectivity issues and improve loading speeds for GitHub services. The project automates the process of improving network performance by fetching current IP address mappings from remote text or JSON endpoints. It modifies the local operating system hosts file to override default DNS resolution, which helps resolve slow connection speeds and image loading

NetAlertX is a distributed network scanner and asset discovery tool designed to identify connected devices and track unauthorized hardware. It aggregates discovery results from multiple remote monitoring nodes into a single centralized inventory hub to provide unified network visibility. The project distinguishes itself by integrating as a bridge to MQTT brokers for smart home automation and providing a dedicated interface for AI agents to query system data. It employs multi-protocol identity resolution using DNS, mDNS, and NetBIOS to identify hardware and generates synthetic identifiers to e

wgcloud is a comprehensive suite of monitoring and management tools designed for Linux servers, network devices, containers, and middleware. It functions as a centralized dashboard for tracking real-time hardware metrics, auditing the health of Docker and Kubernetes environments, and maintaining an IT asset management system for physical and cloud infrastructure. The platform is distinguished by its integrated remote administration capabilities, featuring a web-based SSH client for executing bulk commands and managing servers directly from a browser. It further differentiates itself with AI-d

Medis is a native macOS desktop application that serves as a Redis client for connecting to local and remote instances. It provides a graphical user interface for visualizing, editing, and managing data stored within Redis key-value stores. The application includes a visual key-value explorer for browsing records and a dedicated terminal console for executing raw instructions and system shell commands. It supports secure remote administration through SSL encrypted connections and the use of host, port, and password credentials. Connection management is handled via profiles that allow saving

This project is an open-source software development kit and framework for implementing the Matter smart home standard. It provides a universal IPv6-based application layer and a cluster-based data model to ensure interoperability between diverse smart home devices and controllers. The system is distinguished by its multi-transport network abstraction, which maps Bluetooth LE, Thread, and Wi-Fi implementations to a common layer. It includes specialized tooling for secure device commissioning via QR codes and NFC, as well as a comprehensive over-the-air firmware update system for distributing s

Pi.Alert is a self-hosted local area network monitoring utility and scanner that catalogs connected hardware, tracks real-time online status, and alerts administrators to unauthorized devices. It combines multiple discovery methods including address resolution protocol requests, dynamic host configuration protocol lease parsing, and domain name system query logs to comprehensively locate and identify active equipment. The application serves a centralized web-based management interface backed by a relational database inventory to store device metadata, user classifications, and historical acti

Gasmask is a macOS utility designed to manage system-level network routing by organizing, merging, and activating multiple hosts file configurations. It provides a graphical interface that allows users to switch between different connectivity environments without manual file editing. The tool enables the aggregation of local and remote network mapping sets into a single active configuration. It supports the synchronization of external routing rules by periodically fetching data from remote web sources, ensuring that local domain redirection lists remain current. To apply changes, the applica

Speedtest-cli is a command-line utility designed to measure internet upload and download throughput by connecting to remote servers. It functions as a diagnostic tool for evaluating connection quality and verifying network performance against service provider claims. The utility identifies testing endpoints by calculating the physical distance between the client and available servers, ensuring measurements are based on responsive nodes. It manages the testing lifecycle by coordinating with remote services to fetch server lists and register results, which can be exported into machine-readable

NetBox is a data center infrastructure management tool designed to serve as a centralized source of truth for network environments. It provides a structured platform for documenting network topology, managing device inventories, and tracking IP address spaces, ensuring that physical and logical connections are maintained within a single, consistent database. The system is built on a modular framework that supports custom plugins, allowing organizations to extend its core functionality and tailor infrastructure modeling to specific operational requirements. By utilizing a declarative state mod

Th3inspector is a command-line open-source intelligence reconnaissance tool used for gathering public information on websites, phone numbers, and network records. It functions as a central interface for collecting technical metadata and performing various lookups to build profiles of target entities. The project provides specialized verification utilities for validating email addresses, phone numbers, and credit card bank identification numbers. It also includes tools for retrieving domain registration age, ownership records, and identified subdomains from global databases. Additional capabi

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar