Tools

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

firehol/firehol

iptables-based stateful firewall with human-friendly configuration and optional QoS (FireQOS) for bandwidth management.

brainfucksec/kalitorify

Transparent proxy through Tor for Kali Linux OS

elihiho/security-operations-labs

Threat Modeling, IT-/OT-Segmentierung, Snort Detection und reproduzierbare Validierung eines Drupal-Detection-Profils.

htrgouvea/nipe

An engine to make Tor network your default gateway

jsitech/jshielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

benjojo/totp-ssh-fluxer

Take security by obscurity to the next level (this is a bad idea, don't really use this please)

duggytuxy/syswarden

Host-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…

fnzv/net-shield

An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta

xe1phix/parrotlinux-public-kiosk-project

Systematic Linux kernel hardening project implementing KSPP-recommended settings, module blacklisting, and restricted environment configuration for…

sleuthco/clawshield-public

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…

halildeniz/privacynet

Routes all system traffic and DNS through Tor using iptables rules, with automatic IP rotation and geolocation display for enhanced anonymity.

flamingspork/iptable_evil

Kernel-level iptables backdoor that accepts all packets with the RFC 3514 evil bit set, bypassing firewall rules. Includes in-tree and out-of-tree…

sinologicnet/sipcheck

Monitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…

riccardocataldi/access-point

Rogue open Wi-Fi AP for controlled traffic capture using hostapd, dnsmasq, and iptables NAT. Enables real-time client monitoring, DNS/DHCP logging,…

chundefined/torward

Forces all system traffic through the Tor network with IPv6 leak prevention, strict iptables rules, and DNS routing to enhance anonymity and prevent…

irsaattiquecyber/systemvulnerabilitychecklist_project4_decodelabs

System Vulnerability Checklist & Network Security Hardening project featuring reconnaissance, vsFTPd backdoor analysis (CVE-2011-2523), and active…