Linux security tools - Documentation

on this page

Keys and secrets: GnuPG, pass
Encrypting data: dm-crypt/LUKS, EncFS (legacy), ccrypt
Destroying data: shred, scrub (see also wipefs, dd)
Access control and intrusion prevention: sudo, fail2ban, AppArmor (mandatory access control), firewalls in Linux networking (firewalld, ufw, nftables)
File integrity monitoring: AIDE, Tripwire
Auditing and logging: auditd (kernel-level syscall/event auditing), John the Ripper, dsniff
Personal notes: wireless auditing tools, drive wiping one-liners

Only run auditing and interception tools against systems and networks you own or have written permission to test.

in this section

* aide — advanced intrusion detection environment/

* apparmor — mandatory access control via application profiles/

* auditd — linux audit framework/

* ccrypt — simple file encryption/

* dm-crypt and luks — full disk and volume encryption/

* dsniff — network interception toolkit (awareness reference)/

* encfs — encrypted directory (legacy)/

* fail2ban — ban hosts after repeated failures/

* gnupg (gpg) — keys, signing, and encryption/

* john the ripper — password auditing/

* luks (linux unified key setup): the complete guide/

* notes: secure drive wiping one-liners/

* notes: wireless network auditing tools (aircrack-ng suite)/

* pass — the standard unix password manager/

* scrub — overwrite disks and files with patterns/

* selinux (security-enhanced linux)

* shred — overwrite files to hinder recovery/

* sudo — delegated root access/

* tripwire — file integrity monitoring/