Awesome GitHub RepositoriesNetwork Traffic Logs

Axios is an isomorphic, promise-based HTTP client designed for making asynchronous network requests across different JavaScript execution environments, including the browser and Node.js. It functions as a JSON API client that serializes JavaScript objects into JSON and parses server responses into structured data. The project features a system for managing reusable client instances with shared configurations, such as base URLs and default settings. It includes a mechanism for intercepting outgoing requests and incoming responses globally, allowing data to be transformed before it reaches the

OkHttp is an HTTP client for the JVM and Android that enables network communication via synchronous and asynchronous requests. It provides a core identity as a comprehensive networking toolkit featuring a WebSocket client for bidirectional data synchronization, a TLS security toolkit for encrypted communication, and a programmable HTTP mock server for simulating backend responses. The project distinguishes itself through a specialized security and performance architecture. It implements mutual TLS, certificate pinning, and DNS over HTTPS to secure data in transit, while utilizing connection p

GoReplay is a network traffic recording and replay tool used to capture live HTTP and binary protocol requests. It functions as a traffic shadowing proxy that duplicates incoming network requests to test environments and a utility for recording traffic to local or cloud storage for later analysis and playback. The system is capable of processing non-textual data formats, such as Thrift and Protocol Buffers, allowing for the capture and replay of specialized application-to-application communication. The tool supports live traffic capture and asynchronous duplication to validate infrastructure

9router is an AI model gateway designed to route requests from AI coding tools to multiple model providers through a single unified API. It provides administration for self-hosted AI proxy deployments, allowing users to manage API keys and model access on local servers or edge networks. The system differentiates itself through multi-provider API normalization, which translates incompatible request and response formats to ensure compatibility across different AI models. It features AI provider failover management to automatically switch between providers or accounts when quotas are exhausted o

Proxypin is a cross-platform HTTP and HTTPS proxy debugger designed to capture, inspect, and modify network traffic. It functions as a man-in-the-middle interceptor, allowing developers to analyze application data flows and validate network communication during development and testing. The tool distinguishes itself through its focus on mobile and remote device integration, utilizing QR-code-based configuration synchronization to simplify the setup of proxy settings and security certificates. It includes an event-driven scripting engine that enables programmatic manipulation of requests and re

Mizu is a suite of tools for capturing, indexing, and visualizing cloud-native network traffic and decrypted payloads for cluster-wide diagnostics. It provides Kubernetes network observability by using eBPF to index and visualize layer 4 and layer 7 traffic with full cluster context, allowing for the mapping of workload dependencies and the diagnosis of network failures. The project distinguishes itself by using kernel-level hooks to decrypt TLS traffic in plain text without requiring private keys. It further integrates a standardized context protocol to expose indexed network telemetry to AI

Hetty is an HTTP intercepting proxy and web security research toolkit used to capture, inspect, and modify traffic between a browser and a server. It functions as an HTTP request editor for creating and replaying manual requests to test server behavior and as a project-based traffic logger that isolates network logs across different security research engagements. The tool provides a request-response interception loop that pauses outgoing requests and incoming responses in transit, allowing for manual editing or cancellation. It includes a manual request replay engine to construct and transmit

Wuzz is an interactive command line HTTP client and request inspector designed for capturing, reviewing, and analyzing outgoing network calls and their payloads. It functions as a terminal-based tool for debugging API issues and testing web endpoints. The tool provides specialized filtering for response bodies, using regular expressions and format-specific query syntaxes tailored for JSON and HTML data. It allows for the persistence of captured requests and responses to disk to facilitate the reproduction of network issues and offline analysis. User settings and default request behaviors are

MVPArms is an Android application framework based on the Model-View-Presenter pattern. It provides a foundation for decoupling business logic from user interface components through a structured architectural implementation. The framework features automated boilerplate generation to produce base classes and dependency injection files, reducing manual project setup. It includes a centralized configuration system to manage global application settings and a dependency injection wrapper that bundles networking and image loading libraries. The project covers lifecycle management by binding logic c

ESP32Marauder is a suite of specialized firmware images and tools designed for wireless network auditing, packet sniffing, and Bluetooth scanning on ESP32 hardware. It functions as a wireless penetration tool used to analyze network security and monitor signal traffic. The project includes capabilities for capturing wireless handshakes and simulating access points to test infrastructure resilience. It also features a Bluetooth low energy scanner used to identify hardware signatures and detect unauthorized signals or skimming devices. The firmware supports broader security operations includin

uBlock is a browser content blocker and web privacy tool designed to prevent advertisements and tracking scripts from loading. It functions as a network request filter, a DOM element hider, and a script execution controller to manage how web pages load and render. The project distinguishes itself through a combination of network-level request interception and cosmetic filtering. It uses declarative filter lists and pattern-based matching to block trackers and pop-ups, while employing CSS selectors and wildcard entity matching to remove visual components across multiple regional domain variant

Simplewall is an application firewall manager and network traffic filter that provides a graphical interface for the Windows Filtering Platform. It controls inbound and outbound network access for individual programs and services by intercepting and filtering traffic at the kernel level. The project identifies specific binaries using file hashes to prevent spoofing and allows users to define custom firewall rules based on IP addresses, CIDR ranges, and port numbers. It includes a system for blocking operating system telemetry and managing blocklists of known malicious IP addresses. The tool

Proxyman is a cross-platform HTTP debugging proxy that captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic. It functions as a man-in-the-middle proxy, decrypting SSL/TLS traffic to allow real-time inspection and modification of encrypted requests and responses. The tool is designed for debugging web and mobile applications, with capabilities for API mocking and simulation, scriptable traffic modification, and team collaboration on network logs. What distinguishes Proxyman is its deep integration with mobile and cross-platform development workflows. It provides automated certif

Goatcounter is a privacy-focused web analytics platform designed to be self-hosted on your own infrastructure. It collects visitor statistics like page views, browser information, location, screen size, and referring sites without using cookies or storing any personal data, identifying unique visits through a non-identifiable hash derived from browser and network data. The platform distinguishes itself by offering multiple tracking methods that respect user privacy, including a lightweight JavaScript snippet, an image-based tracking pixel for environments without JavaScript, and the ability t

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

ClashX.Meta is a macOS desktop application that provides a graphical interface for managing the Clash proxy engine. It enables rule-based traffic routing using domain, IP, and GeoIP rules, and allows users to manage proxy configurations and toggle system proxy settings directly from the menu bar. The application serves as a full-featured client for controlling the core proxy daemon on macOS. The project includes a YAML-based configuration manager with built-in schema validation, ensuring proxy profiles are valid before activation. It also provides a TUN virtual network stack that captures all

3proxy 是一款多协议代理服务器和网络访问控制网关。它作为一个网络流量转发器，能够跨 HTTP、SOCKS 以及各种电子邮件和文件协议路由 TCP 和 UDP 流量。 该项目提供了用于安全流量检查的专业功能，包括通过证书欺骗和双向身份验证对 HTTPS 和 TLS 流进行解密和分析。它还通过递归上游代理链路由出站流量，支持客户端身份匿名化。 该软件涵盖了广泛的网络管理功能，包括针对 FTP、POP3 和 SMTP 的协议路由，以及端口转发和 IPv4/IPv6 桥接。它包括用于带宽限流、连接限制的行政工具，以及使用正则表达式修改载荷和头部的实时内容过滤功能。 安全性和可观测性通过基于策略的访问控制、RADIUS 身份验证以及具有自动轮换功能的全面网络活动日志记录来处理。

WindowsSpyBlocker 是一套实用程序，旨在通过应用防火墙规则、Hosts 文件拦截和遥测限制来阻止操作系统的数据收集和跟踪。它作为遥测拦截器和防火墙管理器，防止操作系统向远程服务器发送使用数据。 该项目具有专门的连接修改器，用于调整网络连接状态指示器以防止外部报告。它包括一个网络流量审计器，用于捕获和分析系统流量以识别间谍活动，以及一个用于 DNS 和 Hosts 拦截列表的管理器。 该软件涵盖了广泛的网络拦截功能，包括 DNS 过滤、与 OpenWrt 的网关集成，以及从各种防火墙和 P2P 格式导入和导出拦截规则。它还提供监控工具，用于将系统事件日志和网络捕获提取并解析为标准化格式。 支持通过包管理器进行部署，以实现可执行文件和拦截规则集的自动更新。

NSLogger 是一个远程日志框架和二进制数据记录器，旨在将应用程序跟踪从设备流式传输到专用的网络日志查看器。它支持通过网络传输系统跟踪，利用 SSL 加密确保安全的数据遥测传输。 该系统通过支持将原始二进制数据和图像直接嵌入到日志流中以在查看器中进行可视化检查而脱颖而出。它还包括一个离线日志缓冲区，在网络中断期间在本地存储跟踪，并在连接恢复后自动传输它们。 该框架提供了用于日志数据分析的工具，包括按域和重要性级别对跟踪进行分类。它进一步支持日志跟踪过滤，并使用正则表达式匹配为消息应用自定义颜色和样式。捕获的日志会话可以导出到文件以进行持久存储和共享。