isolate securely runs untrusted Linux programs in restricted environments with namespaces, cgroups, resource limits and syscall filtering.
Read more
Category: Security
8 Best Free and Open Source Software Bill of Materials Tools
Discover the best free and open source tools for generating and analysing Software Bills of Materials on Linux.
Read more
8 Best Free and Open Source Linux Graphical Port Scanners
Here’s our verdict on the best graphical port scanners.
Read more
Notation – sign and verify software artifacts
Notation is a command-line tool for signing and verifying container images and other artifacts stored in OCI registries.
Read more
Syd – configurable application sandbox for Linux
Syd is a Linux application sandbox using seccomp, Landlock and namespaces to control filesystem, network and process behaviour.
Read more
in-toto – framework for software supply chain integrity
in-toto protects software supply chains by recording signed metadata for each step and checking the result against a defined layout.
Read more
cosign – sign and verify software artifacts with Sigstore
cosign signs and verifies containers, binaries and other software artifacts using Sigstore, keys, identities and transparency logs.
Read more
NsJail – process isolation and sandboxing utility
NsJail is a process isolation tool designed to run applications inside tightly controlled environments.
Read more
bubblewrap – low-level unprivileged sandboxing tool
bubblewrap is a low-level Linux sandboxing tool for constructing restricted process environments with namespaces, bind mounts and seccomp.
Read more
22 Best Free and Open Source CLI Data Hashing Tools
Hashing is the process of passing data through a formula that produces a condensed fixed-value representation, called a hash value.
Read more
10 Best Free and Open Source Graphical Data Hashing Tools
Hashing is the process of passing data through a formula to produce a condensed fixed-value representation, called a hash value.
Read more
knife – reverse engineering toolkit for binary analysis
knife is a reverse engineering toolkit for static analysis of PE, ELF and Mach-O binaries, with disassembly, triage and auditing.
Read more
sbomnix – generate Software Bills of Materials for Nix
sbomnix generates CycloneDX and SPDX Software Bills of Materials for Nix flakes and store paths, with dependency and metadata analysis.
Read more
CycloneDX CLI – command-line toolkit for BOM documents
CycloneDX CLI analyzes, converts, merges, signs, verifies and validates BOM documents, with support for CycloneDX and SPDX formats.
Read more
4 Best Free and Open Source Malware Sandboxes
Discover free and open source malware sandboxes for static and dynamic analysis of suspicious software.
Read more
Capstone – multi-architecture disassembly framework
Capstone is a lightweight multi-architecture disassembly framework with detailed instruction metadata, and numerous bindings.
Read more
bom – create, view and transform Software Bills of Materials
bom is a command-line SBOM multitool for creating, viewing and transforming SPDX documents from files, directories and container images.
Read more
Pharos – static binary analysis framework
Pharos is a static binary analysis framework with tools for API analysis, C++ object recovery, function hashing and YARA signature generation.
Read more
disk-encryption-tool – encrypt existing Linux storage with LUKS
disk-encryption-tool converts existing Linux storage to LUKS encryption, with Btrfs and swap handling, initrd integration and key management.
Read more
Miasm – reverse engineering framework for binary analysis
Miasm is a reverse engineering framework offering binary parsing, assembly, disassembly, emulation, symbolic execution and code analysis.
Read more