patch gVisor containers to use Docker DNS

Proxy connections to an OpenVPN tunnel entirely in userspace

Document cleaner

Self-hosted deployment platform. Give it code, get a live HTTPS URL. Supports Node.js, Python, Go, and static sites. Every deployment runs sandboxed in gVisor. Three static Go binaries, zero runtime dependencies.

Spawn gvisor sandboxed general purpose shells. Made to sandbox claude code instances

vHive: Open-source framework for serverless experimentation

tun2socks - powered by gVisor TCP/IP stack

AI Sandbox

go-pcap2socks functions like a router, allowing you to connect various devices such as an XBOX, PlayStation (PS4, PS5), Nintendo Switch, mobile phones, printers and others to any SOCKS5 proxy server. Additionally, you can just start go-pcap2socks with the default direct outbound to share your VPN connection to any devices on your network.

A minimalist HTTP canary honeypot server written in Go.

View HTTP/HTTPS requests made by any Linux program

Cropped for sing-tun library

Poor men's userspace client for one of the CTF challenges from ECSC2025.

Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack

gvisor+windivert = ok

kubectl-link helps you to access your cluster resources without vpn

An easy-to-use netstack, wrapped by gvisor and wireguard-go, which supports macOS/Linux/Windows.

Safe VPN over SSH and Gvisor

A rule-based transparent proxy for Windows, Linux, macOS

automated "fork" of gVisor that only contains the netstack bits so the go.mod is smaller. maintained by scripts, not humans.