HawkOpsec

One-tap Linux OPSEC hardening & anonymity toolkit

Pick a profile and HawkOpsec starts Tor, encrypts DNS, spoofs your identity, hardens the kernel and checks for DNS / IP leaks — Reset system rolls everything back.

Architecture

Install

With pipx

# Debian / Ubuntu / Kali / Mint
sudo apt install -y pipx tor nftables policykit-1 iproute2 rfkill
# Arch
sudo pacman -S --needed python-pipx tor nftables polkit iproute2 rfkill

pipx install hawkopsec
sudo "$(command -v hawkopsec-setup)"
hawkopsec

From GitHub (one command)

# Debian / Ubuntu / Kali / Mint
sudo apt install -y git python3-pyqt6 tor nftables policykit-1 iproute2 rfkill && git clone https://github.com/emrekybs/hawkopsec.git && cd hawkopsec && sudo ./packaging/install.sh && hawkopsec
# Arch
sudo pacman -S --needed git python-pyqt6 tor nftables polkit iproute2 rfkill && git clone https://github.com/emrekybs/hawkopsec.git && cd hawkopsec && sudo ./packaging/install.sh && hawkopsec

After installing, start HawkOpsec from the application menu or run hawkopsec.

Leak test from the terminal (DNS, IP, IPv6, WebRTC/STUN, kill-switch):

hawkopsec-leaktest            # add --all for the dark-web checklist, --json for scripts

License

MIT — see LICENSE.