_ __ ____ _____ __ _ 
 / | / /_ __/ / / / ___/___ _____ / / (_)___ __ ___ __
 / |/ / / / / / / \__ \/ _ \/ ___/ / / / / __ \/ / / / |/_/
 / /| / /_/ / / / ___/ / __/ /__ / /___/ / / / / /_/ /> < 
/_/ |_/\__,_/_/_/ /____/\___/\___/ /_____/_/_/ /_/\__,_/_/|_| 
 
 [ bad-antics development | Security Distribution v5.0 ]

• 140+ Security Tools — 25 new tools added
• NullKia v3.0 Integrated — Mobile security framework built-in
• AI/ML Security Suite — LLM red teaming, ML model analysis
• Cloud Pentesting Edition — AWS/GCP/Azure/Kubernetes tools
• Hardware Hacking Edition — SDR, RFID, embedded systems
• Automotive Security — CAN bus, OBD-II, vehicle pentesting
• Custom Kernel 6.17.13 — Built from source with NullSec identity, zero upstream branding
• Wayland + Hyprland — Modern compositor option
• ARM64 Native — Full Apple Silicon & Raspberry Pi 5 support

Stripped, locked-down, production-ready images with enterprise-grade security.

• ✅ Kernel lockdown (KSPP, grsecurity principles)
• ✅ Zero telemetry — completely stripped
• ✅ Full disk encryption (LUKS2 + Argon2id)
• ✅ Secure boot with custom keys
• ✅ Anti-forensics capabilities
• ✅ MAC spoofing on boot
• ✅ Tor/I2P/Lokinet integration
• ✅ 115+ security tools pre-installed

Boot directly without installation — leaves no trace on host system.

# Download checksums
wget https://github.com/bad-antics/nullsec-linux/releases/download/v5.0/SHA256SUMS
wget https://github.com/bad-antics/nullsec-linux/releases/download/v5.0/SHA256SUMS.sig
# Verify checksum
sha256sum -c SHA256SUMS 2>/dev/null | grep nullsec
# GPG verification
gpg --keyserver keyserver.ubuntu.com --recv-keys B1F1881F70FB62A7
gpg --verify SHA256SUMS.sig SHA256SUMS

• KASLR, SMEP/SMAP, PTI
• Retpoline (Spectre mitigation)
• Kernel module signing enforced
• Lockdown mode (integrity)
• KFENCE memory safety
• io_uring restrictions
• BPF hardening

NullSec Linux ships with a custom-compiled kernel built from upstream kernel.org sources. No Parrot, Debian, or Ubuntu branding remains — uname, /proc/version, and all build identity strings are NullSec-native.

See kernel/ for build scripts, configs, and documentation. Download pre-built .deb packages from Releases.

• PIE, Full RELRO, Stack canaries
• FORTIFY_SOURCE=3
• NX/DEP, CET/IBT
• Shadow stack (x86_64)
• CFI (Control-Flow Integrity)

• nftables firewall default
• IPv6 privacy extensions
• SYN cookies, reverse path filtering
• TCP timestamps disabled
• ICMP redirect disabled
• Wireguard built-in

• AppArmor + SELinux profiles
• Seccomp-bpf filters
• Namespace isolation
• Landlock LSM
• IMA/EVM integrity
• Bubblewrap sandboxing

# Linux/macOS
sudo dd if=nullsec-pro-5.0-amd64.iso of=/dev/sdX bs=4M status=progress conv=fsync
# Or use Ventoy for multi-ISO boot
sudo ventoy -i /dev/sdX
cp nullsec-*.iso /mnt/ventoy/

# Update system
nullsec-update
# Fetch latest tools
nullsec-fetch
# Launch framework
nullsec-framework
# Apply security profile
nullsec-harden --profile maximum
# Start anonymity mode
nullsec-anon --tor --mac-spoof --dns-over-tor
# Launch NullKia (mobile)
nullkia --gui

/opt/nullsec/
├── bin/ # 115+ NullSec tools
├── configs/ # Configuration files
├── payloads/ # Payload templates
├── wordlists/ # Curated wordlists
├── scripts/ # Automation scripts
├── modules/ # Framework modules
├── ai/ # AI/ML models (NEW)
├── hardware/ # Hardware tool configs (NEW)
└── docs/ # Documentation
/etc/nullsec/
├── security/ # Security profiles
├── firewall/ # nftables rules
├── apparmor/ # AppArmor profiles
├── seccomp/ # Seccomp filters
├── integrity/ # IMA policies
└── cloud/ # Cloud provider configs (NEW)

• 135+ tools (25 new)
• NullKia v3.0 integrated
• Cloud pentesting edition (AWS/GCP/Azure/K8s)
• AI/ML security suite (LLM red teaming)
• Hardware hacking edition (SDR/RFID/IoT)
• Automotive security tools (CAN bus)
• Custom Kernel 6.17.13 (built from source, NullSec-branded)
• Wayland + Hyprland compositor
• Full ARM64/Apple Silicon support
• Enhanced isolation (Landlock, CFI)

• 90+ tools
• NullKia v2.0
• Cloud edition
• Apple Silicon via Asahi

• Initial public release
• 60+ tools

NullSec Public License v1.0 — For authorized security testing and education only.

linux distribution security distro penetration testing ethical hacking kali alternative parrot alternative red team blue team CTF cybersecurity hacking tools privacy anonymity DFIR OSINT bad-antics nullsec cloud security kubernetes aws ai security hardware hacking automotive security mobile security iot security

If you find NullSec Linux useful, please consider:

• ⭐ Star this repository — helps others discover it!
• 🍴 Fork it — contribute improvements
• 📢 Share it — tell your security community

• New AI/ML Security Edition - Tools for LLM red teaming, prompt injection testing
• Hardware Hacking Edition - SDR, RFID, glitch attacks, JTAG tools
• Automotive Edition - CAN bus, OBD-II, UDS protocol tools
• Apple Silicon Support - Native Asahi Linux builds
• RISC-V Support - For emerging hardware platforms

• Full disk encryption by default
• AppArmor/SELinux profiles for all tools
• Hardened kernel configurations
• Secure boot support
• TPM integration