_   __      ____  _____              __    _                  
   / | / /_  __/ / / / ___/___  _____   / /   (_)___  __  ___  __
  /  |/ / / / / / /  \__ \/ _ \/ ___/  / /   / / __ \/ / / / |/_/
 / /|  / /_/ / / /  ___/ /  __/ /__   / /___/ / / / / /_/ />  <  
/_/ |_/\__,_/_/_/  /____/\___/\___/  /_____/_/_/ /_/\__,_/_/|_|  
                                                                  
       [ bad-antics development | Security Distribution v5.0 ]

🆕 What's New in v5.0

• 140+ Security Tools — 25 new tools added
• NullKia v3.0 Integrated — Mobile security framework built-in
• AI/ML Security Suite — LLM red teaming, ML model analysis
• Cloud Pentesting Edition — AWS/GCP/Azure/Kubernetes tools
• Hardware Hacking Edition — SDR, RFID, embedded systems
• Automotive Security — CAN bus, OBD-II, vehicle pentesting
• Custom Kernel 6.17.13 — Built from source with NullSec identity, zero upstream branding
• Wayland + Hyprland — Modern compositor option
• ARM64 Native — Full Apple Silicon & Raspberry Pi 5 support

📥 Official Downloads

🌐 Download Portal: bad-antics.github.io

💎 Premium Editions

Stripped, locked-down, production-ready images with enterprise-grade security.

Premium Features:

• ✅ Kernel lockdown (KSPP, grsecurity principles)
• ✅ Zero telemetry — completely stripped
• ✅ Full disk encryption (LUKS2 + Argon2id)
• ✅ Secure boot with custom keys
• ✅ Anti-forensics capabilities
• ✅ MAC spoofing on boot
• ✅ Tor/I2P/Lokinet integration
• ✅ 115+ security tools pre-installed

🐧 Standard Editions

⚡ Live Boot Images

Boot directly without installation — leaves no trace on host system.

🎯 Specialized Editions (NEW in v5.0)

🖥️ Architecture Support

🔍 Verify Downloads

# Download checksums
wget https://github.com/bad-antics/nullsec-linux/releases/download/v5.0/SHA256SUMS
wget https://github.com/bad-antics/nullsec-linux/releases/download/v5.0/SHA256SUMS.sig

# Verify checksum
sha256sum -c SHA256SUMS 2>/dev/null | grep nullsec

# GPG verification
gpg --keyserver keyserver.ubuntu.com --recv-keys B1F1881F70FB62A7
gpg --verify SHA256SUMS.sig SHA256SUMS

🛡️ Security Features

Kernel Protection

• KASLR, SMEP/SMAP, PTI
• Retpoline (Spectre mitigation)
• Kernel module signing enforced
• Lockdown mode (integrity)
• KFENCE memory safety
• io_uring restrictions
• BPF hardening

Custom Kernel Build

NullSec Linux ships with a custom-compiled kernel built from upstream kernel.org sources.
No Parrot, Debian, or Ubuntu branding remains — uname, /proc/version, and all build
identity strings are NullSec-native.

See kernel/ for build scripts, configs, and documentation.
Download pre-built .deb packages from Releases.

Binary Protection

• PIE, Full RELRO, Stack canaries
• FORTIFY_SOURCE=3
• NX/DEP, CET/IBT
• Shadow stack (x86_64)
• CFI (Control-Flow Integrity)

Network Security

• nftables firewall default
• IPv6 privacy extensions
• SYN cookies, reverse path filtering
• TCP timestamps disabled
• ICMP redirect disabled
• Wireguard built-in

Application Security

• AppArmor + SELinux profiles
• Seccomp-bpf filters
• Namespace isolation
• Landlock LSM
• IMA/EVM integrity
• Bubblewrap sandboxing

🛠️ Pre-Installed Security Tools (115+)

Offensive Security

Network Security

Binary Analysis

Cryptography

Defense & Detection

OSINT & Recon

Mobile Security

Cloud Security (NEW)

AI/ML Security (NEW)

Hardware Hacking (NEW)

Automotive Security (NEW)

Automation & Framework

🚀 Quick Start

System Requirements

Create Bootable USB

# Linux/macOS
sudo dd if=nullsec-pro-5.0-amd64.iso of=/dev/sdX bs=4M status=progress conv=fsync

# Or use Ventoy for multi-ISO boot
sudo ventoy -i /dev/sdX
cp nullsec-*.iso /mnt/ventoy/

First Boot

# Update system
nullsec-update

# Fetch latest tools
nullsec-fetch

# Launch framework
nullsec-framework

# Apply security profile
nullsec-harden --profile maximum

# Start anonymity mode
nullsec-anon --tor --mac-spoof --dns-over-tor

# Launch NullKia (mobile)
nullkia --gui

📁 Directory Structure

/opt/nullsec/
├── bin/           # 115+ NullSec tools
├── configs/       # Configuration files
├── payloads/      # Payload templates
├── wordlists/     # Curated wordlists
├── scripts/       # Automation scripts
├── modules/       # Framework modules
├── ai/            # AI/ML models (NEW)
├── hardware/      # Hardware tool configs (NEW)
└── docs/          # Documentation

/etc/nullsec/
├── security/      # Security profiles
├── firewall/      # nftables rules
├── apparmor/      # AppArmor profiles
├── seccomp/       # Seccomp filters
├── integrity/     # IMA policies
└── cloud/         # Cloud provider configs (NEW)

🔗 Related Projects

📋 Changelog

v5.0.0 (January 2026)

• 140+ tools (25 new)
• NullKia v3.0 integrated
• Cloud pentesting edition (AWS/GCP/Azure/K8s)
• AI/ML security suite (LLM red teaming)
• Hardware hacking edition (SDR/RFID/IoT)
• Automotive security tools (CAN bus)
• Custom Kernel 6.17.13 (built from source, NullSec-branded)
• Wayland + Hyprland compositor
• Full ARM64/Apple Silicon support
• Enhanced isolation (Landlock, CFI)

v4.0.0 (2025)

• 90+ tools
• NullKia v2.0
• Cloud edition
• Apple Silicon via Asahi

v3.0.0 (2024)

• Initial public release
• 60+ tools

📜 License

NullSec Public License v1.0 — For authorized security testing and education only.

🏷️ Keywords

linux distribution security distro penetration testing ethical hacking
kali alternative parrot alternative red team blue team CTF
cybersecurity hacking tools privacy anonymity DFIR OSINT
bad-antics nullsec cloud security kubernetes aws ai security
hardware hacking automotive security mobile security iot security

⭐ Support the Project

If you find NullSec Linux useful, please consider:

• ⭐ Star this repository — helps others discover it!
• 🍴 Fork it — contribute improvements
• 📢 Share it — tell your security community

Related Projects (⭐ Star them too!)

🎯 Version 5.0 Highlights

• New AI/ML Security Edition - Tools for LLM red teaming, prompt injection testing
• Hardware Hacking Edition - SDR, RFID, glitch attacks, JTAG tools
• Automotive Edition - CAN bus, OBD-II, UDS protocol tools
• Apple Silicon Support - Native Asahi Linux builds
• RISC-V Support - For emerging hardware platforms

🔒 Security Features

• Full disk encryption by default
• AppArmor/SELinux profiles for all tools
• Hardened kernel configurations
• Secure boot support
• TPM integration