Awesome GitHub RepositoriesHandshake Validations

This project is a Node.js WebSocket library that provides a high-performance client and server implementation for the WebSocket protocol. It functions as a transport layer for real-time bidirectional communication, supporting both UTF-8 strings and binary data transport through the use of TCP socket wrappers. The library enables the creation of WebSocket servers that manage full-duplex connections and broadcast messages to multiple clients, as well as WebSocket clients that establish persistent links to remote servers. It handles the protocol upgrade process via TCP-based handshake negotiatio

该项目是一个电子邮件验证工具，用于检查电子邮件地址是否存在且能否接收消息，而无需发送实际邮件。它通过程序化 HTTP API 和本地命令行界面提供这些功能。 该系统通过结合 SMTP 握手验证和 DNS 记录解析，以及一个检测一次性地址、基于角色的帐户和 catch-all 域的风险分析工具而脱颖而出。它还包括一个元数据聚合器，用于检索与特定电子邮件地址关联的公共个人资料信息和图像。 更广泛的功能面涵盖电子邮件可送达性验证、防止欺诈注册的风险评估以及 SMTP 连接测试。 后端服务可以使用容器化部署模型部署为网络服务。

Websocat is a specialized set of command-line tools for WebSocket communication, acting as a client, server, and stream processor. It provides a terminal-based interface for connecting to WebSocket servers, hosting secure WebSocket servers, and bridging data between WebSockets and other network transports. The project distinguishes itself by functioning as a bidirectional network relay, allowing the routing of data between WebSocket streams, TCP sockets, UNIX sockets, and standard system input and output. It includes specialized implementations for SOCKS5 and HTTP proxying, as well as a strea

This project is a self-hosted email verification system and API designed to validate email existence and clean mailing lists on private infrastructure. It functions as a deliverability tool that confirms if email addresses are reachable by communicating with mail servers via the SMTP protocol without sending actual messages. The system is distinguished by its high-volume SMTP infrastructure, which utilizes a stateless worker architecture and message queue task distribution to scale validation tasks. It includes an SMTP proxy gateway that routes requests through SOCKS5 proxies to mask server i

Mbed TLS is an open-source TLS and DTLS library with a small footprint, designed for embedded systems and IoT devices. It provides a portable cryptographic library that includes symmetric ciphers, hashing, and public-key cryptography, along with a reference implementation of the PSA Cryptography API for standardized cryptographic operations across platforms. The library also offers X.509 certificate management for parsing, validating, and managing certificate chains in secure communications. The library is built around a platform abstraction layer that decouples it from OS-specific services t

An HTTP proxy library for Go

Hazelcast is a distributed data platform that combines an in-memory data grid with a stream processing engine to support real-time analytics and event-driven applications. It functions as a partitioned, distributed key-value store that replicates data across cluster nodes to provide low-latency access and high availability. The platform also serves as a distributed SQL query engine, allowing users to execute standard SQL statements against both in-memory datasets and external data sources. What distinguishes Hazelcast is its use of a distributed consensus subsystem to maintain strongly consis

Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

GmSSL is an open-source cryptographic library that implements the Chinese national cryptographic standards SM2, SM3, SM4, SM9, and ZUC as a unified algorithm suite. It provides a comprehensive set of cryptographic primitives including symmetric and asymmetric encryption, digital signatures, hashing, and key exchange, all built around these national standards for government and enterprise security applications. The library distinguishes itself through several integration capabilities. It includes an OpenSSL compatibility layer that maps GmSSL functions to OpenSSL API calls, enabling drop-in re

Maddy is a modular mail server that assembles a complete email system by connecting small, single-purpose modules through a declarative configuration file. Rather than a monolithic stack, it lets operators compose message processing, storage, authentication, and security enforcement from interchangeable building blocks, with each module handling a specific function like receiving SMTP connections, verifying credentials, or applying policy checks. The server distinguishes itself through its flexible authentication and security architecture. It delegates user verification to external systems in

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

Empire is a post-exploitation command-and-control (C2) framework designed for red team operations. It deploys and manages agents written in PowerShell, Python, C#, Go, and C across Windows, Linux, and macOS, using encrypted communication channels over HTTP, HTTPS, and SMB. The framework executes over 400 built-in modules for reconnaissance, privilege escalation, credential theft, and lateral movement, and provides a modular engine for authoring custom attack modules. What sets Empire apart is its multi-language agent deployment system, which allows operators to choose implants that suit each

该项目是一个多协议 API 模拟和 Mock 系统，旨在开发和测试期间替换外部依赖。它提供了一个 API Mock 服务器、网络流量代理，以及针对语言模型服务和身份提供商的专用模拟器。 该系统以其深度的 AI 模拟能力脱颖而出，包括模拟语言模型提供商和使用 JSON-RPC 2.0 的模型上下文协议 (MCP) 服务器。它支持多轮对话逻辑、AI 聊天 API 的状态跟踪，以及通过调用图和 Token 使用量跟踪实现代理执行的可视化。 广泛的功能领域包括针对 OpenAPI 规范的 API 契约测试、通过网络故障注入实现的韧性和混沌工程，以及用于实时请求修改的实时流量拦截。该项目还管理针对 OIDC、OAuth2、SAML 2.0 和 SCIM 2.0 标准的身份提供商模拟。 该服务器可以作为 Docker 容器、通过 Kubernetes Helm Chart 或作为独立的二进制文件部署。

Covenant 是一个基于 .NET 的命令与控制（C2）框架，专为红队行动和对抗模拟而设计。它作为一个协作平台，用于协调安全评估、管理远程植入物，并通过中央服务器在受损系统上执行任务。 该项目的特色在于其动态载荷生成器，可即时编译和混淆可执行二进制文件及脚本以绕过检测。它通过一个协作环境进一步脱颖而出，该环境允许多个经过身份验证的操作员共享同步状态、跟踪操作指标，并在单个界面内管理联合行动。 该框架提供了广泛的流量混淆功能，包括使用自定义网络配置文件、数据转换流水线以及基于网桥的协议转换来掩盖通信。它还涵盖了后渗透需求，如远程文件检索、集中式凭据收集，以及使用插件扩展模型开发自定义远程任务模块。 该系统使用 SSL 证书固定和加密密钥交换来保护服务器与代理之间的通信，以确保前向安全性。

Websockify 是一个 WebSocket 转 TCP 的代理和隧道服务器，使 Web 浏览器能够与仅支持标准 TCP 连接的服务器或应用程序进行通信。它作为网络桥接器和连接代理，将双向 WebSocket 帧转换为原始 TCP 数据包，以促进对后端服务的远程浏览器访问。 该系统充当安全套接字网关，支持多租户套接字路由，允许根据唯一的 URL 令牌或主机名将多个客户端定向到不同的后端目标。它通过将连接封装在 SSL/TLS 加密中来保护传输中的数据，并利用基于插件的系统在建立后端连接之前对用户进行身份验证。 其他功能包括用于扩展并发连接负载的多进程工作模型，以及拦截本地进程以将网络输出重定向到代理流的能力。该项目还提供了用于调试的原始网络字节流记录工具，并可以在与代理相同的端口上从本地目录提供静态 Web 内容。 该软件可以作为守护进程运行，以在没有活动终端会话的情况下保持持久连接。

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

Synapse 是一个 Matrix 家庭服务器实现，为去中心化、实时通信和消息传递提供了基础设施。它作为一个联邦聊天服务器，在独立的服务器实例之间同步房间数据和事件流，以实现跨域互操作性。 该服务器利用一个混合核心，将性能关键逻辑集成在 Rust 中，并配有一个 Python 编排层。它使用 PostgreSQL 关系数据库来持久化用户账户和对话历史，并使用基于 Redis 的消息系统在水平工作节点之间分配任务。 该项目涵盖了广泛的功能，包括通过 SAML 和 OpenID Connect 集成的安全身份管理、用于内容审核和房间管理的全面管理工具，以及自动媒体处理。它还包括用于去中心化联邦、异步数据库模式迁移和用于性能监控的遥测导出的系统。

Endless 是一个用于 Go HTTP 服务器的零停机服务器封装器和进程管理器。它替换了标准库监听器以协调进程转换和套接字管理，允许在不丢弃活动网络连接的情况下更新二进制文件。 该项目通过在父进程关闭之前派生一个新的子进程来接管网络套接字，从而实现零停机重启。它通过使用 TLS 加密层封装服务器来管理安全流量，并支持标准网络端口和 Unix 套接字的协调。 该系统通过信号驱动的管理处理服务器生命周期，在重启期间执行特定的设置和清理功能。它通过套接字移交协调确保持续可用性，并提供优雅的关闭机制，在定义的宽限期后耗尽活动请求或终止挂起的连接。

urllib3 是一个用于发送网络请求和接收响应的 Python HTTP 客户端库。它提供了用于管理 HTTP 连接池、通过代理路由流量、验证 TLS 证书以及执行自动请求重试的核心组件。 该库专注于网络可靠性和效率，通过维护一个重用已建立连接到多个主机的系统来降低延迟。它通过客户端证书验证确保安全通信，并使用基于策略的重试逻辑处理瞬时网络错误。 该项目涵盖了广泛的网络功能，包括多部分编码有效载荷的格式化、基于流的响应解压缩，以及对 HTTP 和 SOCKS 代理服务器的支持。

urllib3 是一个用于发送网络请求和接收响应的 Python HTTP 客户端库。它作为 HTTP 连接池管理器和 TLS 证书验证器，确保端点之间的安全通信。 该库提供了一个维护可重用网络连接的系统，以减少重复握手的开销。它还充当 HTTP 代理客户端，能够通过代理服务器路由请求，以管理源身份或绕过防火墙。 该工具涵盖了通过多部分编码进行程序化文件上传，以及通过重试和重定向跟随实现自动化网络弹性。它还管理响应有效载荷的解压缩和服务器证书的验证。