tirith – URL security analysis for shell environments

Tirith guards the gate and intercepts suspicious URLs, ANSI injection, and pipe-to-shell attacks before they execute.

This is free and open source software.

Key Features

66 detection rules across 11 categories.

• Homograph attacks – Cyrillic/Greek lookalikes in hostnames, punycode domains, mixed-script labels, lookalike TLDs, confusable domains
• Terminal injection-  ANSI escape sequences, bidi overrides, zero-width characters, unicode tags, invisible math operators, variation selectors
• Pipe-to-shell – curl | bash, wget | sh, httpie | sh, xh | sh, python <(curl …), eval $(wget …) — every source-to-sink pattern
• Command safety – Dotfile overwrites, archive extraction to sensitive paths, cloud metadata endpoint access, private network access
• Insecure transport – Plain HTTP piped to shell, curl -k, disabled TLS verification, shortened URLs hiding destinations
• Environment Proxy – hijacking, sensitive env exports, code injection via env, interpreter hijack, shell injection env
• Config file security – Config injection, suspicious indicators, non-ASCII/invisible unicode in configs, MCP server security (insecure/untrusted/duplicate/permissive)
• Ecosystem threats – Git clone typosquats, untrusted Docker registries, pip/npm URL installs, web3 RPC endpoints, vet-not-configured
• Path analysis –  Non-ASCII paths, homoglyphs in paths, double-encoding
• Rendered content – Hidden CSS/color content, hidden HTML attributes, markdown/HTML comments with instructions
• Cloaking detection – Server-side cloaking (bot vs browser), clipboard hidden content, PDF hidden text

Website: github.com/sheeki03/tirith
Support:
Developer: sheeki03
License: GNU Affero General Public License v3.0

tirith is written in Rust. Learn Rust with our recommended free books and free tutorials.

LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software. We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README.