Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

TLS (Transport Layer Security)

TLS (Transport Layer Security) is a cryptographic protocol designed to provide communications security over a computer network. The protocol is widely used in applications such as email, instant messaging, and voice over IP, but its use in securing HTTPS remains the most publicly visible.

The TLS protocol aims primarily to provide security, including privacy (confidentiality), integrity, and authenticity through the use of cryptography, such as the use of certificates, between two or more communicating computer applications. It runs in the presentation layer and is itself composed of two layers: the TLS record and the TLS handshake protocols.

TLS builds on the now-deprecated SSL (Secure Sockets Layer) specifications (1994, 1995, 1996) developed by Netscape Communications for adding the HTTPS protocol to their Navigator web browser.

https://github.com/twitchyliquid64/subnet

Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.

golang tls tun tunnel vpn vpn-client vpn-server

Last synced: 04 May 2025

https://github.com/k8spacket/k8spacket

k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana

bpf2go cilium ebpf ebpf-programs ebpf-tc grafana k8spacket metrics o11y observability packetsniffing prometheus tcp tls visualization

Last synced: 12 Feb 2026

https://github.com/danny-dasilva/cycletls

Spoof TLS/JA3 fingerprints in GO and Javascript

bypass fingerprint fingerprinting go golang http http2 https ja3 javascript js tls typescript

Last synced: 14 May 2025

https://github.com/httpsok/httpsok

🔥🔥🔥一行命令，轻松搞定SSL证书自动续期。 SSL泛域名证书，SSL证书管理，SSL证书自动续期，SSL证书自动更新，七牛云、阿里云、腾讯云、CDN、OSS、https证书管理,https证书管理,免费SSL证书,TLS证书自动续签,nginx证书自动续期工具，nginx证书管理。从此告别Let's Encrypt

nginx ssl ssl-certificate ssl-certificates ssl-support tls tls-certificate

Last synced: 24 Mar 2025

https://github.com/square/certigo

A utility to examine and validate certificates in a variety of formats

certificate cli command-line-app crypto jceks keystore pem pkcs12 pkcs7 ssl tls x509

Last synced: 23 Oct 2025

https://github.com/athenz/athenz

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

access-token authorization cloud containers dynamic-infrastructures rbac role-based-access-control service-identity spiffe tls

Last synced: 15 May 2026

https://github.com/AthenZ/athenz

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

access-token authorization cloud containers dynamic-infrastructures rbac role-based-access-control service-identity spiffe tls

Last synced: 26 Mar 2025

https://github.com/Danny-Dasilva/CycleTLS

Spoof TLS/JA3 fingerprints in GO and Javascript

bypass fingerprint fingerprinting go golang http http2 https ja3 javascript js tls typescript

Last synced: 27 Mar 2025

https://github.com/pyca/pyopenssl

A Python wrapper around the OpenSSL library

cryptography openssl python ssl tls

Last synced: 15 May 2025

https://github.com/etr/libhttpserver

C++ library for creating an embedded Rest HTTP server (and more)

c-plus-plus cross-platform http http-server https https-server ipv6 rest-api rest-server restful-api shoutcast tls

Last synced: 08 Apr 2025

https://github.com/mtrudel/thousand_island

Thousand Island is a pure Elixir socket server

elixir high-performance socket-server tcp-server tls

Last synced: 13 May 2025

https://github.com/stealth/sshttp

SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.

http https ipv6 ssh ssh-traffic sshttp tls

Last synced: 13 Apr 2025

https://github.com/therealaleph/masterhttprelayvpn-rust

Rust port of @masterking32's MasterHttpRelayVPN — all credit to @masterking32 for the original idea and Python implementation. Free DPI bypass via a Google Apps Script relay with TLS SNI concealment. CLI + cross-platform desktop UI, HTTP + SOCKS5 proxy, no runtime deps.

anti-censorship censorship-circumvention cross-platform desktop-app domain-fronting dpi-bypass egui google-apps-script gui http-proxy iran mitm proxy rust sni socks5 tls

Last synced: 10 May 2026

https://github.com/syncsynchalt/illustrated-tls13

The Illustrated TLS 1.3 Connection: Every byte explained

curve25519 gcm ssl tls tls13 x25519

Last synced: 12 Jan 2026

https://github.com/minio/console

Simple UI for MinIO Object Storage :abacus:

console go golang k8s mc minio minio-client minio-console minio-server minio-storage operator tls

Last synced: 14 May 2025

https://github.com/curl/curl-for-win

Reproducible, static, curl binaries for Linux, macOS and Windows

binaries builds curl http3 libcurl linux macos musl-libc reproducible ssh tls ucrt windows

Last synced: 15 May 2025

https://github.com/patrickjuchli/basic-ftp

FTP client for Node.js, supports FTPS over TLS, passive mode over IPv6, async/await, and Typescript.

async-await ftp ftps ipv6 nodejs promise tls typescript

Last synced: 09 Apr 2026

https://github.com/0x4D31/fatt

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

fingerprinting honeypot metadata network python quic rdp security ssh threat-hunting tls tshark

Last synced: 24 Mar 2025

https://github.com/0x4d31/fatt

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

fingerprinting honeypot metadata network python quic rdp security ssh threat-hunting tls tshark

Last synced: 04 Apr 2025

https://github.com/dotnet/WatsonTcp

WatsonTcp is the easiest way to build TCP-based clients and servers in C#.

api async-tcp-server client framing messaging mono mono-environments nuget rpc server ssl ssl-support tcp tls

Last synced: 19 Jan 2026

https://github.com/tempesta-tech/tempesta

All-in-one solution for high performance web content delivery and advanced protection against DDoS and web attacks

bots database ddos-protection high-performance http-accelerator http2 linux-kernel load-balancer security tls web-application-firewall web-performance web-security

Last synced: 15 May 2025

https://github.com/glebarez/cero

Scrape domain names from SSL certificates of arbitrary hosts

domain-names recon scrape ssl tls websecurity

Last synced: 12 Apr 2025

https://github.com/progval/limnoria

A robust, full-featured, and user/programmer-friendly Python IRC bot, with many existing plugins.

gpg i18n irc irc-bot ircv3 limnoria python rss sasl supybot tls

Last synced: 15 May 2025

https://github.com/ProgVal/Limnoria

A robust, full-featured, and user/programmer-friendly Python IRC bot, with many existing plugins.

gpg i18n irc irc-bot ircv3 limnoria python rss sasl supybot tls

Last synced: 07 May 2025

https://github.com/progval/Limnoria

A robust, full-featured, and user/programmer-friendly Python IRC bot, with many existing plugins.

gpg i18n irc irc-bot ircv3 limnoria python rss sasl supybot tls

Last synced: 04 Apr 2025

https://github.com/dotnet/watsontcp

WatsonTcp is the easiest way to build TCP-based clients and servers in C#.

api async-tcp-server client framing messaging mono mono-environments nuget rpc server ssl ssl-support tcp tls

Last synced: 14 May 2025

https://github.com/eduardsui/tlse

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

tls

Last synced: 14 May 2025

https://github.com/bytedance/g3

Enterprise-oriented Generic Proxy Solutions

audit http icap mitm network proxy rust security socks tlcp tls

Last synced: 15 May 2025

https://github.com/doraemonkeys/windsend

Quickly and securely sync clipboard, transfer files and directories between devices. 快速安全的同步剪切板，传输文件或文件夹

clipboard dart file-transfer peer-to-peer rust tls

Last synced: 06 Mar 2026

https://github.com/yinqiwen/gsnova

Private proxy solution & network troubleshooting tool.

http http2 kcp low-memory mitmproxy nat p2p p2s2p packet-capture proxy quic ssh tcp tls transparent-proxy websocket

Last synced: 05 Apr 2025

https://github.com/Hakky54/mutual-tls-ssl

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

certificate certificate-authority certificate-signing-request encryption https java keystore keytool kotlin mutual-authentication mutual-tls openssl scala security server spring-boot ssl tls truststore two-way-ssl-authentication

Last synced: 10 May 2025

https://github.com/hakky54/mutual-tls-ssl

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

certificate certificate-authority certificate-signing-request encryption https java keystore keytool kotlin mutual-authentication mutual-tls openssl scala security server spring-boot ssl tls truststore two-way-ssl-authentication

Last synced: 04 Apr 2025

https://github.com/PalmStoneGames/kube-cert-manager

Manage Lets Encrypt certificates for a Kubernetes cluster.

certificate kubernetes letsencrypt tls

Last synced: 25 Mar 2025

https://github.com/python-trio/trustme

#1 quality TLS certs while you wait, for the discerning tester

python ssl ssl-certificate testing testing-tools tls tls-certificate

Last synced: 29 Mar 2025

https://github.com/wolfssl/wolfmqtt

wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.

embedded iot iot-security mqqt-packet mqtt mqtt-client mqtt-library mqtt-sn mqtt-tls qos-0-2 quality-of-service security sensor-network tls tls13 tls13-support wolfmqtt wolfssl wolfssl-library

Last synced: 14 Apr 2025

https://github.com/wolfSSL/wolfMQTT

wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.

embedded iot iot-security mqqt-packet mqtt mqtt-client mqtt-library mqtt-sn mqtt-tls qos-0-2 quality-of-service security sensor-network tls tls13 tls13-support wolfmqtt wolfssl wolfssl-library

Last synced: 05 Apr 2025

https://github.com/hakky54/sslcontext-kickstart

🔐 A lightweight high level library for configuring a http client or server based on SSLContext or other properties such as TrustManager, KeyManager or Trusted Certificates to communicate over SSL TLS for one way authentication or two way authentication provided by the SSLFactory. Support for Java, Scala and Kotlin based clients with examples. Available client examples are: Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, Vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k Kohttp and Ktor. Also gRPC, WebSocket and ElasticSearch examples are included

android certificate der encryption https java keymanagerfactory keystore kotlin mutual-authentication p12 p7b pem scala security ssl sslcontext tls trustmanagerfactory truststore

Last synced: 11 Jan 2026

https://github.com/linkerd/linkerd-tcp

A TCP/TLS load balancer for Linkerd 1.x.

linkerd load-balancer rust service-mesh tcp tls tokio

Last synced: 13 Aug 2025

https://github.com/tardy-org/zzz

A framework for writing performant and reliable networked services.

http http-server https tardy tls zig zig-package zzz

Last synced: 15 May 2025

https://github.com/obonaventure/cnp3

Computer Networking : Principles, Protocols and Practice (first and second edition, third edition is being written on https://github.com/cnp3/ebook)

bgp ebook ethernet http ip ipv6 networking ospf rip smtp ssh tcp tls udp wifi

Last synced: 04 Apr 2025

https://github.com/cloudflare/gokeyless

Go implementation of the keyless protocol

hsm pkcs11 pki tls

Last synced: 07 Apr 2026

https://github.com/radkesvat/ReverseTlsTunnel

Reverse Tcp Tunnel with custom sni handshake, mux support and more...

bypass-censorship fake-uploader loadbalancer mux port-forwarding reverse-tunnel sni tcp tls tls-tunnel tunnel

Last synced: 04 Sep 2025

https://github.com/spiral-modules/php-grpc

:electric_plug: Fast and furious GRPC server for PHP applications

golang grpc grpc-server php php-grpc php7 roadrunner spiral tls

Last synced: 03 Oct 2025

https://github.com/mvallim/kubernetes-under-the-hood

This tutorial is someone planning to install a Kubernetes cluster and wants to understand how everything fits together.

cloud-init corosync corosync-cluster docker etcd flannel gluster-kubernetes glusterfs infrastructure kubernetes kubernetes-cluster kubernetes-setup metallb pacemaker ssl tls virtualbox virtualization

Last synced: 28 Jan 2026

https://github.com/johanbrandhorst/certify

Automatic client and server certificate distribution and maintenance

acmpca aws certificate cfssl go golang mtls tls vault

Last synced: 12 Apr 2025

https://github.com/mookums/zzz

A framework for writing performant and reliable networked services.

http http-server https tls zig zig-package zzz

Last synced: 03 Mar 2025

https://github.com/neykov/extract-tls-secrets

Decrypt HTTPS/TLS connections on the fly with Wireshark

decrypt https java ssl tls wireshark

Last synced: 19 Apr 2026

https://github.com/hnimminh/libresbc

An open source Session Border Controller 🌟 The SBC you dream about 🗽 LibreSBC will help you save thousands of dollars.

asterisk b2bua freepbx freeswitch fusionpbx kamailio msteams nat opensips opensource sbc session-border-controller sip sip-server srtp telephony tls topology-hiding twillio

Last synced: 11 Apr 2026

https://github.com/deemru/chromium-gost

Chromium с поддержкой алгоритмов ГОСТ

boringssl chromium cryptography gost msspi ssl sspi tls

Last synced: 08 Jan 2026

https://github.com/deemru/Chromium-Gost

Chromium с поддержкой алгоритмов ГОСТ

boringssl chromium cryptography gost msspi ssl sspi tls

Last synced: 12 Apr 2025

https://github.com/junkurihara/rust-rpxy

A simple and ultrafast http reverse proxy serving multiple domain names and terminating TLS for http/1.1, 2 and 3, written in Rust

acme http http-proxy http11 http2 http3 https load-balancing multidomain pqc proxy reverse-proxy rust tls tls-alpn-01 tls-termination

Last synced: 03 Jun 2026

https://github.com/igrigorik/istlsfastyet.com

Is TLS fast yet? Yes, yes it is.

security tls

Last synced: 27 Jan 2026

https://github.com/hakwerk/labca

A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).

acme acme-server ca certificate certificate-authority go homelab letsencrypt pki tls

Last synced: 27 Dec 2025

https://github.com/tintinweb/scapy-ssl_tls

SSL/TLS layers for scapy the interactive packet manipulation tool

dtls python scapy scapy-ssl-tls ssl tls

Last synced: 12 Apr 2025

https://github.com/matteocorti/check_ssl_cert

A shell script (that can be used as a Nagios/Icinga plugin) to check an SSL/TLS connection.

certificate icinga-plugin icinga2-plugin icinga2-plugins nagios-plugin nagios-plugins openssl shell-script ssl tls

Last synced: 01 May 2026

https://github.com/quay/jwtproxy

An HTTP-Proxy that adds AuthN through JWTs

authentication http-proxy jwt proxy tls

Last synced: 17 Jun 2025

https://github.com/fkie-cad/fritap

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

android android-https-capture binary-analysis frida hooking https linux network-analysis network-capture network-forensics security security-audit ssl ssldump tcpdump tls

Last synced: 09 Oct 2025

https://github.com/mwarning/KadNode

P2P DNS with content key, crypto key and PKI support. DynDNS alternative.

c decentralized dht dns dyndns p2p pki tls

Last synced: 02 Apr 2025

https://github.com/apple/swift-nio-ssl

TLS Support for SwiftNIO, based on BoringSSL.

swift5 swiftnio tls tls-support

Last synced: 16 Oct 2025

https://github.com/Tencent/TencentKonaSMSuite

Tencent Kona SM Suite contains a set of Java security providers, which support algorithms SM2, SM3 and SM4, and protocols TLCP/GMSSL, TLS 1.3 (with RFC 8998) and TLS 1.2.

gmssl pki sm2 sm3 sm4 tlcp tls

Last synced: 14 May 2025

https://github.com/gin-gonic/autotls

Support Let's Encrypt for a Go server application.

golang letsencrypt tls

Last synced: 14 May 2025

https://github.com/kelunik/acme-client

Let's Encrypt / ACME client written in PHP for the CLI.

acme acme-client automation certificates letsencrypt php ssl tls

Last synced: 16 May 2025

https://github.com/crazypeace/v2ray_wss

V2ray v4.45.2，VLESS_WebSocket_TLS模式 / Vmess_WebSocket_TLS模式，极简一键脚本, CaddyV2前置解除TLS和path。支持带参数 域名 IP栈 UUID path 减少安装过程中的交互

caddy tls v2ray vless vmess websocket

Last synced: 16 Feb 2026

https://github.com/owasp/o-saft

O-Saft - OWASP SSL advanced forensic tool

certificate ciphers perl ssl tls

Last synced: 15 May 2025

https://github.com/OWASP/O-Saft

O-Saft - OWASP SSL advanced forensic tool

certificate ciphers perl ssl tls

Last synced: 07 Apr 2025

https://github.com/rabbitmq/tls-gen

Generates self-signed x509/TLS/SSL certificates useful for development

ssl tls

Last synced: 05 Apr 2025

https://github.com/f5networks/k8s-bigip-ctlr

Repository for F5 Container Ingress Services for Kubernetes & OpenShift.

bigip customresourcedefinition docker f5-cc ingress ingress-controller kubernetes openshift orchestration route tls

Last synced: 07 Jan 2026

https://github.com/F5Networks/k8s-bigip-ctlr

Repository for F5 Container Ingress Services for Kubernetes & OpenShift.

bigip customresourcedefinition docker f5-cc ingress ingress-controller kubernetes openshift orchestration route tls

Last synced: 03 Apr 2025

https://github.com/cert-manager/trust-manager

trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.

go golang hacktoberfest kubernetes security tls

Last synced: 19 Apr 2026

https://github.com/jawj/subtls

A proof-of-concept TypeScript TLS 1.3 client

certificate crypto javascript ssl tls tls13 typescript

Last synced: 15 May 2025

https://github.com/rapsssito/react-native-tcp-socket

React Native TCP socket API for Android, iOS & macOS with SSL/TLS support.

android ios net network networking react-native react-native-library socket ssl tcp tcp-client tcp-server tcp-socket tls

Last synced: 17 Jan 2026

https://github.com/gh2o/bash_tls

A minimal TLS 1.2 client implementation in a pure Bash script

aes bash tls

Last synced: 15 May 2025

https://github.com/wbond/oscrypto

Compiler-free Python crypto library backed by the OS, supporting CPython and PyPy

3des aes cryptography des dsa ecdsa oaep pbkdf2 pkcs12 pkcs1v15 pkcs8 pss python rc2 rc4 rsa tls x509

Last synced: 17 Nov 2025

https://github.com/fkie-cad/friTap

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

android android-https-capture binary-analysis frida hooking https linux network-analysis network-capture network-forensics security security-audit ssl ssldump tcpdump tls

Last synced: 27 Mar 2025

https://github.com/deedy5/primp

🪞PRIMP (Python Requests IMPersonate). The fastest python HTTP client that can impersonate web browsers

akamai fingerprint http http-client https impersonate ja3 ja4 python requests tls tls-client web-scraping

Last synced: 03 Apr 2026

https://github.com/omjadas/hudsucker

Intercepting HTTP/S proxy

http man-in-the-middle proxy rust ssl tls websocket

Last synced: 04 Apr 2026

https://github.com/tlsnotary/tlsn

Rust implementation of the TLSNotary protocol

cryptography multi-party-computation tls

Last synced: 04 Apr 2025

https://github.com/eclipse-threadx/netxduo

Eclipse ThreadX - NetXDuo is an advanced, industrial-grade TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications

eclipse-threadx embedded iot mcu microcontroller rtos tcp tls

Last synced: 07 Mar 2026

https://github.com/Noooste/azuretls-client

An easy-to-use HTTP client to spoof TLS/JA3, HTTP2 and HTTP3 fingerprint

golang http http-client http2 http3 http3-client ja3 ja3-fingerprint ssl-pinning tls tls-client

Last synced: 27 Aug 2025

TLS (Transport Layer Security) Awesome Lists
awesome-tls-hacks 38 awesome-tls-security 80
TLS (Transport Layer Security) Categories
SSL/TLS Hacks 74 Attacks on TLS 24 Protocols 23 SSL Interception 15 PKIX 13 Tools 11 Popular Open Source Implementations of SSL/TLS 9 Certificates / PKIX 5 Vulnerabilities with Details 4 SSL/TLS Protocol History 2 Pervasive Monitoring 2 Some Open Source Implementations of SSL/TLS 1 Trends 1