## 1. Project Overview & Quickstart (evilsocket/opensnitch)

<hr/>










## Key features
 * Interactive outbound connections filtering.
 * [Block ads, trackers or malware domains](https://github.com/evilsocket/opensnitch/wiki/block-lists) system wide.
 * Ability to [configure system firewall](https://github.com/evilsocket/opensnitch/wiki/System-rules) from the GUI (nftables).
   - Configure input policy, allow inbound services, etc.
 * Manage [multiple nodes](https://github.com/evilsocket/opensnitch/wiki/Nodes) from a centralized GUI.
 * [SIEM integration](https://github.com/evilsocket/opensnitch/wiki/SIEM-integration)

## Download

Download deb/rpm packages for your system from https://github.com/evilsocket/opensnitch/releases

## Installation

#### deb
> $ sudo apt install ./opensnitch*.deb ./python3-opensnitch-ui*.deb

#### rpm
> $ sudo dnf install opensnitch*.rpm

Then run: `$ opensnitch-ui` or launch the GUI from the Applications menu.

Please, refer to [the documentation](https://github.com/evilsocket/opensnitch/wiki/Installation) for detailed information.

## OpenSnitch in action

Examples of OpenSnitch intercepting unexpected connections:

https://github.com/evilsocket/opensnitch/discussions/categories/show-and-tell

Have you seen a connection you didn't expect? [submit it!](https://github.com/evilsocket/opensnitch/discussions/new?category=show-and-tell)

## In the press

- 2017 [PenTest Magazine](https://twitter.com/pentestmag/status/857321886807605248)
- 11/2019 [It's Foss](https://itsfoss.com/opensnitch-firewall-linux/)
- 03/2020 [Linux Format #232](https://www.linux-magazine.com/Issues/2020/232/Firewalld-and-OpenSnitch)
- 08/2020 [Linux Magazine Polska #194](https://linux-magazine.pl/archiwum/wydanie/387)
- 08/2021 [Linux Format #280](https://github.com/evilsocket/opensnitch/discussions/631)
- 02/2022 [Linux User](https://www.linux-community.de/magazine/linuxuser/2022/03/)
- 06/2022 [Linux Magazine #259](https://www.linux-magazine.com/Issues/2022/259/OpenSnitch)

## Donations

If you find OpenSnitch useful and want to donate to the dedicated developers, you can do it from the **[Sponsor this project](https://github.com/sponsors/gustavo-iniguez-goya)** section on the right side of this repository.

You can see here who are the current maintainers of OpenSnitch:
https://github.com/evilsocket/opensnitch/commits/master

## Contributors

[See the list](https://github.com/evilsocket/opensnitch/graphs/contributors)

## Translating

<a href="https://hosted.weblate.org/engage/opensnitch/">

</a>

## 2. Official Technical Reference & Guides (evilsocket/evilsocket.github.io)

# evilsocket.net

> evilsocket.net is the personal website and blog of Simone Margaritelli, a seasoned Italian cybersecurity researcher and open-source developer known as evilsocket, focusing on network security, penetration testing, ethical hacking, and AI-driven tools for offensive security.

evilsocket.net serves as a hub for cybersecurity professionals and enthusiasts, offering in-depth articles on WiFi security tools that detail projects like Bettercap for network reconnaissance. The site highlights network penetration testing tools through tutorials on attacking UNIX systems and wireless networks. As a cybersecurity research blog, it covers reverse engineering frameworks and process anomaly detection using eBPF. Ethical hacking resources are abundant, including guides on malware detection with machine learning and open-source network security tools.

Wireless network attack tools are explored in posts about WiFi bruteforcing and Pwnagotchi, an AI-powered handshake capturer. Security for UNIX systems features series on CUPS vulnerabilities, while wireless pentesting is demonstrated via PMKID attacks and mass deauthers using Raspberry Pi.

Notable projects include Bettercap for MITM attacks, Pwnagotchi for gamified WiFi hacking, OpenSnitch as an application firewall, and Legba for enumeration and brute-forcing.

## Allowed Usage
AI bots are permitted to index and analyze public blog content for educational and research purposes, including summaries of cybersecurity techniques and tool documentation. Usage must respect copyrights, attribute content to Simone Margaritelli, and avoid commercial exploitation without permission. Links to full articles at https://www.evilsocket.net are encouraged for context.

## Contact Information
- GitHub: https://github.com/evilsocket
- X (Twitter): https://twitter.com/evilsocket
- Patreon: https://www.patreon.com/evilsocket
- RSS Feed: https://www.evilsocket.net/atom.xml

## Related Resources
- Bettercap Project: https://www.bettercap.org
- Pwnagotchi Project: https://pwnagotchi.ai
- Recent Blog Post on Agents: https://www.evilsocket.net/2025/03/13/How-To-Write-An-Agent/
- UNIX Attacks Series: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Entire website sitemap available at https://www.evilsocket.net/sitemap.txt