Tirith guards the gate and intercepts suspicious URLs, ANSI injection, and pipe-to-shell attacks before they execute.
This is free and open source software.
Key Features
66 detection rules across 11 categories.
- Homograph attacks – Cyrillic/Greek lookalikes in hostnames, punycode domains, mixed-script labels, lookalike TLDs, confusable domains
- Terminal injection- ANSI escape sequences, bidi overrides, zero-width characters, unicode tags, invisible math operators, variation selectors
- Pipe-to-shell – curl | bash, wget | sh, httpie | sh, xh | sh, python <(curl …), eval $(wget …) — every source-to-sink pattern
- Command safety – Dotfile overwrites, archive extraction to sensitive paths, cloud metadata endpoint access, private network access
- Insecure transport – Plain HTTP piped to shell, curl -k, disabled TLS verification, shortened URLs hiding destinations
- Environment Proxy – hijacking, sensitive env exports, code injection via env, interpreter hijack, shell injection env
- Config file security – Config injection, suspicious indicators, non-ASCII/invisible unicode in configs, MCP server security (insecure/untrusted/duplicate/permissive)
- Ecosystem threats – Git clone typosquats, untrusted Docker registries, pip/npm URL installs, web3 RPC endpoints, vet-not-configured
- Path analysis – Non-ASCII paths, homoglyphs in paths, double-encoding
- Rendered content – Hidden CSS/color content, hidden HTML attributes, markdown/HTML comments with instructions
- Cloaking detection – Server-side cloaking (bot vs browser), clipboard hidden content, PDF hidden text
Website: github.com/sheeki03/tirith
Support:
Developer: sheeki03
License: GNU Affero General Public License v3.0
tirith is written in Rust. Learn Rust with our recommended free books and free tutorials.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |