Projects sharing features with Networking Toolbox

dnsproxy is an encrypted DNS proxy and traffic router that translates and forwards DNS requests between clients and upstream resolvers. It functions as a server for multiple secure protocols, including DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNSCrypt, to protect queries from eavesdropping and tampering. The project differentiates itself through advanced routing and optimization capabilities. It utilizes a domain-based routing engine to direct queries to specific upstream servers via wildcard rules and employs parallel querying to return responses from the fastest responding network a

The IPinfo CLI is a command-line interface tool designed for querying IP geolocation, autonomous system data, and network metadata from the IPinfo database. It provides terminal utilities for retrieving geographical locations, network owners, and routing details for individual target addresses, local host machines, and autonomous system numbers. The interface supports command-line automation utilities including bulk pipe processing, data field filtering, dataset summarization, IP range generation, and network address filtering. Users can stream continuous lines of text from upstream processes

wil is a C++ wrapper library for the Windows API designed to simplify system development through RAII and exception handling. It provides a set of resource management tools, a framework for Windows error handling, and type-safe interfaces for registry access and networking. The library distinguishes itself by automating the conversion between system error codes and C++ exceptions, while providing utilities for contextual error message attachment and early return patterns. It also features specialized networking wrappers for socket initialization and hostname resolution, and a registry interfa

Ethical-Hacking-Labs is a comprehensive cybersecurity training curriculum and lab suite designed for learning penetration testing, network analysis, and offensive security techniques. It provides a structured environment for practicing the full attack lifecycle, from initial reconnaissance and scanning to exploitation and post-compromise analysis. The project provides instructional materials and guided exercises that cover specific technical domains, including open source intelligence research and network security courseware. It includes a practical workbook for identifying system vulnerabili

Submariner is a tool for connecting pods and services across separate Kubernetes clusters into a unified network mesh. It uses a central broker-based architecture to coordinate cross-cluster service discovery, DNS resolution, and encrypted tunneling, enabling secure communication between workloads in different clusters. The project handles overlapping pod and service CIDR ranges across clusters through global IP address mapping, preventing address collisions. It supports multiple encrypted tunnel protocols, including IPsec and WireGuard, to secure inter-cluster traffic, and provides gateway h

NetQuality is a network performance benchmarking suite that measures latency, bandwidth, and routing paths across IPv4 and IPv6 networks using TCP and ICMP probes. It functions as a BGP routing analyzer, identifying peering relationships and network bottlenecks by retrieving data from global routing databases, and as a dual-stack network tester that performs diagnostics simultaneously over both protocol stacks to compare performance and connectivity. The tool distinguishes itself through its TCP-based traceroute engine, which traces the full route packets take to a destination while identifyi

MTR is a network diagnostic tool that combines the functions of traceroute and ping to monitor packet loss and latency across every hop in a network path. It serves as an ICMP route analyzer and packet loss monitor designed to discover network paths and measure the performance of intervening routers. The tool functions as a network path visualizer, displaying real-time network health and connectivity data through either a text-based terminal interface or a graphical window. The project covers network path mapping and real-time path tracing to identify routers between a host and destination.

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe

echoip is a network utility and API for detecting public IPv4 and IPv6 addresses and retrieving associated metadata. It serves as a client IP detection tool and a geolocation API that maps incoming requests to physical locations and geographic metadata. The project provides network identity analysis by resolving IP addresses to their corresponding autonomous system numbers and owning network organizations. It also includes a connectivity tester to verify if specific ports on a target remote host are open and reachable. The system supports structured data export via JSON and plain text throug

phpipam is a web-based IP address management system and network asset manager used for tracking IPv4 and IPv6 address allocations, subnet masks, and network metadata. It functions as a centralized registry for coordinating virtual local area networks, routing instances, and DNS records. The platform includes data center infrastructure management capabilities to map physical hardware rack layouts and device placements. It also operates as a network scanner that identifies active addresses and monitors network capacity by automatically scanning subnets. The system provides a REST API for progr

htrace.sh is a command-line diagnostic suite designed for profiling web traffic, auditing security configurations, and analyzing network connectivity for remote endpoints. It functions as a shell-based orchestration tool that wraps standard system utilities to perform modular diagnostic tasks and infrastructure analysis. The tool distinguishes itself by providing a unified interface for both HTTP request debugging and automated security scanning. Users can customize request parameters, including headers, methods, and proxy settings, to simulate specific client behaviors. It further automates

Netshoot is a Docker network troubleshooting toolkit and container image bundled with specialized utilities for DNS resolution, performance benchmarking, and TCP/IP packet inspection. It serves as a portable set of tools designed for diagnosing connectivity and routing issues within Docker and Kubernetes environments. The project is distributed as a tool-aggregated container image that can be deployed as a debugging sidecar or an ephemeral runtime. It supports namespace-joined execution, allowing the toolkit to attach to the network namespace of another process to inspect traffic and diagnose

MikuTools is a multi-purpose web utility suite and AI multimedia generation platform. It provides a collection of lightweight, browser-based tools for creating and editing images, video, and audio using various artificial intelligence models. The platform distinguishes itself through integrated AI content translation and editing capabilities, including face swapping, background removal, high-resolution upscaling, and voice cloning. It also enables the generation of professional digital assets such as business cards, email signatures, and stylized code screenshots. The toolkit covers a broad

ethr is a command line network diagnostic tool and performance analyzer designed to measure throughput, latency, and packet loss across TCP, UDP, and ICMP protocols. It functions as a multi-threaded network throughput tester and a diagnostic utility for analyzing connection health between client and server endpoints. The project differentiates itself through specialized diagnostics such as TCP retransmission monitoring and bidirectional path analysis to identify asymmetric performance differences. It provides the ability to evaluate the overhead of encrypted HTTPS connections and enforce spec

MetaCubeXD is a network proxy management system comprising a web-based dashboard, a background kernel orchestrator, and a real-time traffic monitor. Its primary purpose is to provide a centralized interface for controlling proxy kernels, managing routing rules, and overseeing system-wide traffic routing. The project distinguishes itself through a WebSocket-driven network dashboard that streams bidirectional telemetry and configuration changes without requiring restarts. It features a sidecar-based orchestration model that decouples the management interface from the proxy binary, allowing for

This project is a containerized dynamic DNS update client designed to automate the synchronization of domain records with changing public IP addresses. It functions as a multi-provider synchronization engine that monitors network connectivity and updates DNS records across various cloud platforms and custom services to ensure consistent domain resolution. The system distinguishes itself through a provider-based adapter pattern that abstracts diverse third-party APIs into a unified interface, allowing for consistent record management. It employs multi-source IP discovery to mitigate rate limit

Pyramid is a Python web framework and WSGI toolkit designed for building web applications. It functions as a URL routing engine that maps incoming HTTP requests to specific view callables using both pattern-based routing and hierarchical resource tree traversal. The framework is distinguished by its hybrid dispatch system, allowing developers to combine regular expression URL matching with the ability to resolve requests by navigating a tree of nested objects. It implements a flexible component architecture that supports application registry management, deferred configuration execution, and t

EHole is a specialized toolkit for network asset parsing, binary transformation, payload generation, and vulnerability research. It functions as an asset discovery and fingerprinting tool designed to identify software versions and high-value assets across IP ranges and URLs using custom fingerprints. The project provides a vulnerability research toolkit for decrypting software credentials and retrieving factory default passwords for security devices and web applications. It also includes a security payload generator for encoding and escaping command strings to bypass shell tokenization and ex

docker-socket-proxy is an HAProxy-based security proxy that filters and controls access to the Docker API. It acts as a security layer between containers and the Docker socket to restrict API operations based on specific paths and methods. The proxy uses environment variables to enable or disable specific API endpoints and to grant or revoke permissions for various API sections. It can enforce read-only access by restricting the API to only allow GET and HEAD requests, returning a forbidden status for unauthorized actions. The project provides capabilities for path-based request filtering, c

Somo is a command line network utility and connection monitor used for filtering, sorting, and formatting network connection lists. It functions as an interactive process killer, allowing users to identify and terminate network processes based on their active connection data. The tool provides specialized network monitoring capabilities, including active socket and port tracking with port-to-service name resolution. It enables the administration of system sockets by sending termination signals to close specific network connections. Data management is handled through predicate-based filtering

This project is a comprehensive technical manual and reference guide focused on network proxies, virtual private networks, and the circumvention of internet censorship. It provides detailed analysis of network censorship and firewall strategies, including port blocking, DNS poisoning, and SSL connection interception. The documentation explains the underlying mechanics of VPN protocols, tunnels, and proxy systems to clarify how data routing and connectivity function. It includes instructional content for configuring proxy software and resolving DNS certificate errors across Windows, macOS, and

This project is a comprehensive educational resource and curriculum focused on site reliability engineering, distributed systems, and infrastructure operations. It provides technical guides, a systems engineering course, and instructional manuals designed to teach the principles of managing large-scale computing environments. The curriculum covers high-level architectural design for scalability and resilience, including fault-tolerant infrastructure, high-availability patterns, and microservices decomposition. It emphasizes the practical application of site reliability engineering through the

PCAPdroid is an Android network traffic analyzer and packet capture tool that operates without requiring root access. It functions as a VPN-based firewall and network controller, capable of recording traffic in PCAPng format and blocking connections to specific domains or malicious hosts. The project distinguishes itself through a proxy-based system for decrypting TLS traffic and routing device network traffic through SOCKS5 proxies or the Tor network. It further allows for the modification of live HTTP requests and responses via custom scripts. Its capabilities cover application connection

Kyanos is a diagnostic toolset for network analysis that uses eBPF to measure packet latency and trace traffic from the network card to the application. It functions as a kernel latency profiler and network performance monitor, providing capabilities to map external dependencies and capture network traffic. The project is distinguished by its ability to perform automatic SSL traffic decryption, converting encrypted requests and responses into plaintext for analysis. It further isolates bottlenecks by attributing latency across multiple stages, specifically tracing the time packets spend withi

This project is a multi-provider dynamic DNS client and synchronizer that monitors local IPv4 and IPv6 addresses and automatically updates DNS records across various cloud providers. It functions as an IP address monitoring tool and a network IP update webhook, ensuring that domain names remain pointed to current network addresses. The system distinguishes itself through a wide range of native provider integrations, including Cloudflare, AliDNS, DNSPod, Huawei Cloud, and HE.net. Beyond simple record updates, it allows for the management of CDN proxy status, TTL durations, and regional routing

Blink is a mobile terminal platform for iOS that combines an SSH and Mosh client with a local shell emulator, snippet manager, and SSH key storage. It renders terminal output using Chromium's HTerm engine for fast display and maintains persistent remote sessions across network changes through the Mosh protocol. The platform supports SSH key-based authentication, WebAuthn hardware security keys, and SOCKS5 proxy tunneling for secure remote access. The terminal environment is built around gesture-based session navigation, allowing users to switch between multiple shells with swipe and pinch ges

HAProxy is a high-performance TCP and HTTP proxy that distributes traffic across multiple backend servers to ensure availability and fault tolerance for critical services. It operates in either TCP or HTTP mode, with an event-driven, single-threaded reactor that handles tens of thousands of connections without context switching, and supports kernel-level data transfer to minimize memory usage and latency. What distinguishes HAProxy is its configuration-file-first design, where all load-balancing rules and runtime behavior are defined in a declarative text file parsed at startup. It embeds a L