๐Ÿ”’ NullSec Linux

April 17, 2026 ยท View on GitHub

๐Ÿ”’ NullSec Linux

Security-Focused Linux Distribution v5.0

by bad-antics development

License: NPL Base Tools Version GitHub

    _   __      ____  _____              __    _                  
   / | / /_  __/ / / / ___/___  _____   / /   (_)___  __  ___  __
  /  |/ / / / / / /  \__ \/ _ \/ ___/  / /   / / __ \/ / / / |/_/
 / /|  / /_/ / / /  ___/ /  __/ /__   / /___/ / / / / /_/ />  <  
/_/ |_/\__,_/_/_/  /____/\___/\___/  /_____/_/_/ /_/\__,_/_/|_|  
                                                                  
       [ bad-antics development | Security Distribution v5.0 ]

๐Ÿ†• What's New in v5.0

  • 140+ Security Tools โ€” 25 new tools added
  • NullKia v3.0 Integrated โ€” Mobile security framework built-in
  • AI/ML Security Suite โ€” LLM red teaming, ML model analysis
  • Cloud Pentesting Edition โ€” AWS/GCP/Azure/Kubernetes tools
  • Hardware Hacking Edition โ€” SDR, RFID, embedded systems
  • Automotive Security โ€” CAN bus, OBD-II, vehicle pentesting
  • Custom Kernel 6.17.13 โ€” Built from source with NullSec identity, zero upstream branding
  • Wayland + Hyprland โ€” Modern compositor option
  • ARM64 Native โ€” Full Apple Silicon & Raspberry Pi 5 support

๐Ÿ“ฅ Official Downloads

๐ŸŒ Download Portal: downloads.lateralus.dev

All ISOs hosted on Cloudflare R2 CDN for maximum speed and global availability.

๐Ÿ’Ž Premium Editions

Stripped, locked-down, production-ready images with enterprise-grade security.

EditionDescriptionSizeDownload
NullSec Pro โ€” FullComplete secure system3.6 GBISO
NullSec Pro โ€” USBBootable USB with encrypted persistence4.5 GBIMG
NullSec Pro โ€” MinimalCLI-only, minimal attack surface980 MBISO
NullSec Pro โ€” CloudAWS/GCP/Azure/K8s optimized2.0 GBOVA/AMI
NullSec Pro โ€” HardwareSDR/RFID/Embedded tools4.8 GBISO

Premium Features:

  • โœ… Kernel lockdown (KSPP, grsecurity principles)
  • โœ… Zero telemetry โ€” completely stripped
  • โœ… Full disk encryption (LUKS2 + Argon2id)
  • โœ… Secure boot with custom keys
  • โœ… Anti-forensics capabilities
  • โœ… MAC spoofing on boot
  • โœ… Tor/I2P/Lokinet integration
  • โœ… 115+ security tools pre-installed

๐Ÿง Standard Editions

EditionDescriptionSizeDownload
FullComplete toolkit (140+ tools)5.8 GBISO
LiteEssential tools only2.8 GBISO
NetInstallMinimal, downloads during install520 MBISO

โšก Live Boot Images

Boot directly without installation โ€” leaves no trace on host system.

EditionDescriptionSizeDownload
Live StandardFull toolkit in RAM4.0 GBISO
Live StealthAnti-forensics, RAM-only3.2 GBISO
Live ForensicsDFIR focused, read-only mounts4.8 GBISO
Live Air-GappedNo network stack, offline only2.4 GBISO

๐ŸŽฏ Specialized Editions (NEW in v5.0)

EditionDescriptionSizeDownload
Cloud PentestAWS/GCP/Azure/K8s security3.5 GBISO
Hardware HackingSDR/RFID/Embedded/IoT4.2 GBISO
AI/ML SecurityLLM red team, model analysis6.5 GBISO
AutomotiveCAN bus, OBD-II, vehicle sec3.8 GBISO
Mobile SecurityNullKia + Android/iOS tools4.0 GBISO

๐Ÿ–ฅ๏ธ Architecture Support

ArchitectureDescriptionDownload
AMD64/x86_64Standard 64-bit PCsAll editions above
ARM64/aarch64Raspberry Pi 4/5, ARM serversISO
RISC-VStarFive VisionFive 2ISO
Apple SiliconM1/M2/M3/M4 nativeIMG

๐Ÿ” Verify Downloads

# Download checksums
wget https://downloads.lateralus.dev/iso/SHA256SUMS
wget https://downloads.lateralus.dev/iso/SHA256SUMS.sig

# Verify checksum
sha256sum -c SHA256SUMS 2>/dev/null | grep nullsec

# GPG verification
gpg --keyserver keyserver.ubuntu.com --recv-keys B1F1881F70FB62A7
gpg --verify SHA256SUMS.sig SHA256SUMS

๐Ÿ›ก๏ธ Security Features

Kernel Protection

  • KASLR, SMEP/SMAP, PTI
  • Retpoline (Spectre mitigation)
  • Kernel module signing enforced
  • Lockdown mode (integrity)
  • KFENCE memory safety
  • io_uring restrictions
  • BPF hardening

Custom Kernel Build

NullSec Linux ships with a custom-compiled kernel built from upstream kernel.org sources. No Parrot, Debian, or Ubuntu branding remains โ€” uname, /proc/version, and all build identity strings are NullSec-native.

PropertyValue
Version6.17.13+2-amd64
Sourcekernel.org vanilla
Build IDnullsec@nullsec.sh
/proc/versionNullSec 6.17.13-1nullsec1

See kernel/ for build scripts, configs, and documentation. Download pre-built .deb packages from Releases.

Binary Protection

  • PIE, Full RELRO, Stack canaries
  • FORTIFY_SOURCE=3
  • NX/DEP, CET/IBT
  • Shadow stack (x86_64)
  • CFI (Control-Flow Integrity)

Network Security

  • nftables firewall default
  • IPv6 privacy extensions
  • SYN cookies, reverse path filtering
  • TCP timestamps disabled
  • ICMP redirect disabled
  • Wireguard built-in

Application Security

  • AppArmor + SELinux profiles
  • Seccomp-bpf filters
  • Namespace isolation
  • Landlock LSM
  • IMA/EVM integrity
  • Bubblewrap sandboxing

๐Ÿ› ๏ธ Pre-Installed Security Tools (115+)

Offensive Security

ToolLanguagePurpose
nullsec-injectorRustMemory-safe process injection
nullsec-shellcraftRacketShellcode generation DSL
nullsec-exploitCBinary exploitation framework
nullsec-c2GoCommand & control server
nullsec-phishPythonPhishing framework
nullsec-webfuzzRustWeb application fuzzer
nullsec-sqlinjectPythonSQL injection toolkit

Network Security

ToolLanguagePurpose
nullsec-netprobeNimStealthy network recon
nullsec-portscanElixirAsync port scanner
nullsec-netseerHaskellTraffic analysis
nullsec-snifferClojurePacket capture
nullsec-flowtraceHaskellFlow analyzer
nullsec-crystalreconCrystalNetwork reconnaissance
nullsec-dnsenumGoDNS enumeration
nullsec-arpwatchCARP monitoring

Binary Analysis

ToolLanguagePurpose
nullsec-memcorruptZigMemory corruption analysis
nullsec-bingazeC++20Binary analysis
nullsec-kernspyGoKernel module analyzer
nullsec-zigscanZigBinary entropy analyzer
nullsec-nimhunterNimMemory forensics
nullsec-binarydiffRustBinary diffing
nullsec-hexdumpZigHex analysis

Cryptography

ToolLanguagePurpose
nullsec-cryptwrapAda/SPARKFormally verified crypto
nullsec-hashwitchJuliaHash analysis
nullsec-adashieldAdaProtocol validator
nullsec-vvaultVCredential vault
nullsec-cryptoauditRustCrypto implementation audit

Defense & Detection

ToolLanguagePurpose
nullsec-cppsentryC++20Packet sentinel
nullsec-swiftsentinelSwiftmacOS event monitor
nullsec-kotlinguardKotlinContainer scanner
nullsec-clusterguardErlangDistributed IDS
nullsec-luashieldLuaWAF rules engine
nullsec-beaconhuntGoC2 beacon detector

OSINT & Recon

ToolLanguagePurpose
nullsec-reporaiderClojureGit secret scanner
nullsec-juliaprobeJuliaAnomaly detector
nullsec-perlscrubPerlLog sanitizer
nullsec-shelltraceTclCommand auditor
nullsec-fsharpsignalF#Signal correlator
nullsec-credscanPythonCredential finder

Mobile Security

ToolLanguagePurpose
nullkiaMultiMobile security framework v3.0
nullsec-apkanalyzerKotlinAPK analysis
nullsec-iosextractSwiftiOS forensics
nullsec-androidJavaAndroid security
nullsec-bluetoothCBluetooth research

Cloud Security (NEW)

ToolLanguagePurpose
nullsec-cloudauditGoMulti-cloud auditor
nullsec-k8sscanGoKubernetes security scanner
nullsec-awsreconPythonAWS enumeration
nullsec-gcphuntGoGCP security
nullsec-azuresweepC#Azure auditor
nullsec-terraform-scanGoIaC security

AI/ML Security (NEW)

ToolLanguagePurpose
nullsec-llmredPythonLLM red teaming
nullsec-promptinjectPythonPrompt injection testing
nullsec-modelauditPythonML model security audit
nullsec-adversarialPythonAdversarial ML
nullsec-datapoisoningPythonTraining data attacks

Hardware Hacking (NEW)

ToolLanguagePurpose
nullsec-sdrC/PythonSoftware-defined radio
nullsec-rfidCRFID/NFC research
nullsec-canbusCCAN bus analysis
nullsec-jtagCJTAG/SWD tools
nullsec-glitchPythonFault injection
nullsec-uartPythonUART/Serial tools

Automotive Security (NEW)

ToolLanguagePurpose
nullsec-carfuzzCCAN bus fuzzer
nullsec-obdiiPythonOBD-II toolkit
nullsec-udsPythonUDS protocol tools
nullsec-keyfobCKey fob research

Automation & Framework

ToolLanguagePurpose
nullsec-frameworkPythonUnified framework
nullsec-dlangauditDSecurity auditor
nullsec-beaconErlangNetwork beacon
nullsec-ocamlparseOCamlPolicy parser

๐Ÿš€ Quick Start

System Requirements

ComponentMinimumRecommended
CPU64-bit x86_64/ARM64Multi-core (4+)
RAM4 GB16 GB
Storage30 GB120 GB NVMe
GraphicsAnyHardware accel

Create Bootable USB

# Linux/macOS
sudo dd if=nullsec-pro-5.0-amd64.iso of=/dev/sdX bs=4M status=progress conv=fsync

# Or use Ventoy for multi-ISO boot
sudo ventoy -i /dev/sdX
cp nullsec-*.iso /mnt/ventoy/

First Boot

# Update system
nullsec-update

# Fetch latest tools
nullsec-fetch

# Launch framework
nullsec-framework

# Apply security profile
nullsec-harden --profile maximum

# Start anonymity mode
nullsec-anon --tor --mac-spoof --dns-over-tor

# Launch NullKia (mobile)
nullkia --gui

๐Ÿ“ Directory Structure

/opt/nullsec/
โ”œโ”€โ”€ bin/           # 115+ NullSec tools
โ”œโ”€โ”€ configs/       # Configuration files
โ”œโ”€โ”€ payloads/      # Payload templates
โ”œโ”€โ”€ wordlists/     # Curated wordlists
โ”œโ”€โ”€ scripts/       # Automation scripts
โ”œโ”€โ”€ modules/       # Framework modules
โ”œโ”€โ”€ ai/            # AI/ML models (NEW)
โ”œโ”€โ”€ hardware/      # Hardware tool configs (NEW)
โ””โ”€โ”€ docs/          # Documentation

/etc/nullsec/
โ”œโ”€โ”€ security/      # Security profiles
โ”œโ”€โ”€ firewall/      # nftables rules
โ”œโ”€โ”€ apparmor/      # AppArmor profiles
โ”œโ”€โ”€ seccomp/       # Seccomp filters
โ”œโ”€โ”€ integrity/     # IMA policies
โ””โ”€โ”€ cloud/         # Cloud provider configs (NEW)
ProjectDescription
nullsec-frameworkUnified toolkit framework
nullkiaMobile security framework v3.0
nullsec-payloadsPayload templates
nullsec-wordlistsCurated wordlists
nullsec-configsDotfiles & configs
bad-antics.github.ioDownload portal

๐Ÿ“‹ Changelog

v5.0.0 (January 2026)

  • 140+ tools (25 new)
  • NullKia v3.0 integrated
  • Cloud pentesting edition (AWS/GCP/Azure/K8s)
  • AI/ML security suite (LLM red teaming)
  • Hardware hacking edition (SDR/RFID/IoT)
  • Automotive security tools (CAN bus)
  • Custom Kernel 6.17.13 (built from source, NullSec-branded)
  • Wayland + Hyprland compositor
  • Full ARM64/Apple Silicon support
  • Enhanced isolation (Landlock, CFI)

v4.0.0 (2025)

  • 90+ tools
  • NullKia v2.0
  • Cloud edition
  • Apple Silicon via Asahi

v3.0.0 (2024)

  • Initial public release
  • 60+ tools

๐Ÿ“œ License

NullSec Public License v1.0 โ€” For authorized security testing and education only.

๐Ÿท๏ธ Keywords

linux distribution security distro penetration testing ethical hacking kali alternative parrot alternative red team blue team CTF cybersecurity hacking tools privacy anonymity DFIR OSINT bad-antics nullsec cloud security kubernetes aws ai security hardware hacking automotive security mobile security iot security

Developed with ๐Ÿ’€ by bad-antics

NullSec Project ยฉ 2026 โ€” Hack Ethically

๐ŸŒ Download Portal: bad-antics.github.io

GitHub Website

โญ Support the Project

If you find NullSec Linux useful, please consider:

  • โญ Star this repository โ€” helps others discover it!
  • ๐Ÿด Fork it โ€” contribute improvements
  • ๏ฟฝ๏ฟฝ Share it โ€” tell your security community
ProjectDescription
โญ nullsec-webfuzzHigh-performance web fuzzer in Rust
โญ blackflag-ecuProfessional ECU diagnostics & tuning
โญ nullkiaMobile security framework
โญ mysterymachineAI-powered recon & exploitation
โญ n01d-forgeRust/egui image burner with LUKS/VeraCrypt encryption
โญ n01d-machineSecure VM manager with Tor/VPN isolation
โญ glowbarn-osIoT security firmware framework
โญ mirageML model security testing
โญ ai-entropy-mapperNeural network entropy analysis

๐ŸŽฏ Version 5.0 Highlights

  • New AI/ML Security Edition - Tools for LLM red teaming, prompt injection testing
  • Hardware Hacking Edition - SDR, RFID, glitch attacks, JTAG tools
  • Automotive Edition - CAN bus, OBD-II, UDS protocol tools
  • Apple Silicon Support - Native Asahi Linux builds
  • RISC-V Support - For emerging hardware platforms

๐Ÿ”’ Security Features

  • Full disk encryption by default
  • AppArmor/SELinux profiles for all tools
  • Hardened kernel configurations
  • Secure boot support
  • TPM integration