Security
59 commands in this category.
DISTRIBUTION:
agenix
Secret management with age for NixOS.
aide
File Integrity - Monitors file changes for security.
alma-gpg-check
Checks imported GPG keys and package source trust on AlmaLinux.
alma-security-check
Lists security-relevant advisory updates for AlmaLinux.
armitage
GUI for Metasploit.
auditd
Security Auditing - Linux Auditing Framework for security events.
bird
Dynamic routing daemon for BGP/OSPF.
check-support-status
Displays the security support status of installed Debian packages.
checkov
Static Code Analysis for Infrastructure as Code.
clamav
AV Scanner - Open-source virus scanner for Linux.
debsecan
Checks Debian systems for known vulnerabilities.
debsums
Checks MD5 sums of installed packages.
fail2ban
Intrusion Prevention - Blocks attackers after failed logins.
faraday
Multi-user penetration testing environment.
gbde
Manages GBDE disk encryption on FreeBSD.
geli
Manages GELI disk encryption on FreeBSD.
getenforce
Displays the current SELinux mode.
glsa-check
Tool for checking GLSA security advisories and affected packages.
glsa-check --list
Lists currently relevant GLSAs and affected packages.
glsa-update
Help tool that displays or updates GLSA data (Concept/Utility).
gpg
GNU Privacy Guard - File encryption.
grype
Vulnerability Scanner for container images.
haproxy
High-performance load balancer and reverse proxy.
hashcat
GPU-based password cracker.
hydra
Online Password Cracker.
john
John the Ripper - Password Cracker.
kea
ISC Kea DHCP server suite.
lynis
Security Audit - Performs security audits and hardening.
md5sum
Calculates MD5 hash values of files.
mintnanny
Launches the Linux Mint Kids Safety/Domain Filter tool.
mokutil
Manages Machine Owner Keys (MOK) for Secure Boot signatures.
msfconsole
Command-line interface of the Metasploit Framework for penetration testing.
msfdb
Database manager for Metasploit.
msfrpcd
Metasploit RPC Daemon.
msfupdate
Updated Metasploit modules.
msfvenom
Metasploit Framework Payload Generator
pass
Password manager for command line.
pfexec
Executes commands with RBAC rights in Illumos (alternative to sudo).
restorecon
Resets SELinux file contexts to default values.
rkhunter
Rootkit Detection - Searches for rootkits and security vulnerabilities.
rocky-gpg-check
Checks Rocky repository signature keys and GPG configuration.
rocky-security-check
Displays security-related package updates in the Rocky environment.
security
Manage Keychain and security settings.
semanage
Manages persistent SELinux policies and contexts.
sestatus
Displays the current SELinux status.
setenforce
Switches SELinux between enforcing and permissive modes.
shred
Overwrites files multiple times to ensure secure deletion.
signify
Verifies cryptographic signatures for files and releases.
snyk
Security scanning for code and dependencies.
sops-nix
Integrate SOPS-encrypted secrets into NixOS.
spctl
Manages Gatekeeper security.
SSH_AUTH_SOCK
Unix socket path to the SSH agent for key-based authentication.
suricata
IDS/IPS engine for network traffic analysis.
syspatch
Installs binary security patches for OpenBSD releases.
trivy
Vulnerability Scanner for containers, images and Infrastructure as Code.
ubuntu-keyring
GPG key for Ubuntu repositories.
ubuntu-system-settings-security-privacy
Security and Privacy in Settings.
ufw-app-update
Updates UFW application profiles.
unbound
Validating recursive DNS resolver.