List of applications/Security - ArchWiki

Jump to content

# List of applications/Security

From ArchWiki
< List of applications

For detailed guides, see the main ArchWiki page, Security.

## Network security

See also Wikipedia:Comparison of packet analyzers.

- airgeddon — Multi-use bash script to audit wireless networks

  https://github.com/v1s1t0r1sh3r3/airgeddon || airgeddonAUR

- bettercap — Swiss army knife for network attacks and monitoring.

  https://www.bettercap.org/ || bettercap

- dsniff — Collection of tools for network auditing and penetration testing.

  https://www.monkey.org/~dugsong/dsniff/ || dsniff

- Ettercap — Multipurpose Network sniffer/analyser/interceptor/logger.

  https://www.ettercap-project.org/ || CLI: ettercap, GUI: ettercap-gtk

- hping — Command-line oriented TCP/IP packet assembler/analyzer.

  https://www.hping.org/ || hping

- justniffer — Network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic.

  https://sourceforge.net/projects/justniffer/ || justnifferAUR

- Kismet — 802.11 layer2 wireless network detector, sniffer, and intrusion detection system.

  https://www.kismetwireless.net/ || kismet

- Nemesis — Command-line network packet crafting and injection utility.

  https://nemesis.sourceforge.net/ || nemesisAUR

- Nmap — Security scanner used to discover hosts and services on a computer network, thus creating a "map" of the network.

  https://nmap.org/ || CLI: nmap, GUI: zenmap

- ooniprobe-cli — Official OONI Probe CLI for detecting internet censorship, website blocking, and traffic manipulation.

  https://ooni.org/ || ooniprobe-cliAUR

- reaction — A daemon that scans program outputs for repeated patterns, and takes action. A lightweight alternative to fail2ban.

  https://framagit.org/ppom/reaction || reactionAUR

- Snort — Network intrusion prevention and detection system.

  https://www.snort.org/ || snortAUR

- ssh-audit — SSH configuration auditing.

  https://github.com/jtesta/ssh-audit/ || ssh-audit

- Sshguard — Daemon that protects SSH and other services against brute-force attacks, similar to Fail2ban.

  https://www.sshguard.net/ || sshguard

- Suricata — High performance Network IDS, IPS and Network Security Monitoring engine.

  https://suricata.io/ || suricataAUR

- Xplico — Network forensics analysis tool (NFAT), which is a software that reconstructs the contents of acquisitions performed with a packet sniffer.

  https://www.xplico.org/ || xplicoAUR

- Zeek — Powerful network analysis framework that is much different from the typical IDS you may know.

  https://zeek.org/ || zeekAUR

## Firewall management

See nftables#Front-ends (or iptables#Front-ends for the legacy framework).

## Threat and vulnerability detection

- AFICK — Security tool that allows to monitor the changes on your file systems, and so can detect intrusions.

  https://afick.sourceforge.net/ || afickAUR

- Chipsec — a framework for analyzing platform level security of hardware, devices, system firmware, low-level protection mechanisms, and the configuration of various platform components.It contains a set of modules, including simple tests for hardware protections and correct configuration, tests for vulnerabilities in firmware and platform components, security assessment and fuzzing tools for various platform devices and interfaces, and tools acquiring critical firmware and device artifacts.

  https://chipsec.github.io/ || chipsec-gitAUR, chipsec-dkms-gitAUR

- Lynis — Security and system auditing tool to harden Unix/Linux systems.

  https://cisofy.com/lynis/ || lynis

- Metasploit Framework — An advanced open-source platform for developing, testing, and using exploit code.

  https://www.metasploit.com/ || metasploit

- Nessus — Comprehensive vulnerability scanning program.

  https://www.tenable.com/products/nessus || nessusAUR

- OpenVAS — Framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. FOSS Nessus fork.

  https://www.openvas.org/ || openvas-scannerAUR

- OSSEC — Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

  https://ossec.net/ || ossec-hids-localAUR, ossec-hids-serverAUR, ossec-hids-agentAUR

- OWASP ZAP — Web application security scanner.

  https://www.zaproxy.org/ || zaproxy

- Samhain — Host-based intrusion detection system (HIDS) provides file integrity checking and log file monitoring/analysis, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes.

  https://www.la-samhna.de/samhain/index.html || samhain-clientAUR, samhain-serverAUR, samhain-standaloneAUR

- Tiger — Security tool that can be used both as a security audit and intrusion detection system.

  https://www.nongnu.org/tiger/ || tigerAUR

- Tripwire — Intrusion detection system.

  https://github.com/Tripwire/tripwire-open-source || tripwire-gitAUR

## File security

- AIDE — File and directory integrity checker.

  https://aide.github.io || aideAUR

- Logwatch — Customizable log analysis system.

  https://sourceforge.net/projects/logwatch/ || logwatch

## Anti malware

- ClamAV — Open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.

  https://www.clamav.net/ || clamav

- ClamTk — Graphical front-end for ClamAV using Perl and Gtk libraries. It is designed to be an easy-to-use, lightweight, on-demand antivirus scanner for Linux systems.

  https://gitlab.com/dave_m/clamtk/ || clamtk, Nautilus plugin: clamtk-gnomeAUR, Thunar plugin: thunar-sendto-clamtkAUR

- Hostsblock — A script that downloads, sorts, and compiles multiple ad- and malware-blocking `hosts` files.

  https://gaenserich.github.io/hostsblock/ || hostsblockAUR

- Lenspect — Lightweight security threat scanner powered by VirusTotal.

  https://github.com/vmkspv/lenspect || lenspectAUR

- Linux Malware Detect — Malware scanner designed around the threats faced in shared hosted environments.

  https://www.rfxn.com/projects/linux-malware-detect/ || maldetAUR

- Rootkit Hunter — Checks machines for the presence of rootkits and other unwanted tools.

  https://rkhunter.sourceforge.net/ || rkhunter

## Screen lockers

This article or section is a candidate for merging with Session lock#By environment.

Notes: Same purpose. (Discuss in Talk:List of applications/Security)

See also Session lock.

Warning Only sflock, physlock, Cinnamon Screensaver and MATE Screensaver are able to block tty access. See Xorg#Block TTY access on how to manually block tty access.

- betterlockscreen — i3lock-color wrapper. Betterlockscreen allows you to cache images with different filters and lockscreen with blazing speed.

  https://github.com/betterlockscreen/betterlockscreen || betterlockscreenAUR

- Cinnamon Screensaver — Screen locker for the Cinnamon desktop.

  https://github.com/linuxmint/cinnamon-screensaver || cinnamon-screensaver

- Deepin Screensaver — A lightweight Qt5 based screensaver.

  https://github.com/linuxdeepin/deepin-screensaver || deepin-screensaver

- gtklock — GTK-based lockscreen for Wayland.

  https://github.com/jovanlanik/gtklock || gtklock

- i3lock — A simple screen locker. Provides user feedback and uses PAM authentication. The background can be set to an image or solid color.

  https://i3wm.org/i3lock/ || i3lock

- i3lock-blur — Fork of i3lock which can use your desktop with the blur effect applied as a background.

  https://github.com/karulont/i3lock-blur || i3lock-blurAUR

- i3lock-color — Fork of i3lock with color and positioning configuration support and can use your desktop with the blur effect applied as a background.

  https://github.com/Raymo111/i3lock-color || i3lock-colorAUR

- Light-locker — A simple locker (forked from gnome-screensaver) that aims to have simple, sane, secure defaults and be well integrated with the desktop while not carrying any desktop-specific dependencies. It relies on LightDM for locking and unlocking your session via ConsoleKit/UPower or logind/systemd.

  https://github.com/the-cavalry/light-locker || light-locker

- MATE Screensaver — Screensaver and locker for MATE Desktop Environment.

  https://github.com/mate-desktop/mate-screensaver || mate-screensaver

- physlock — Screen and console locker.

  https://github.com/xyb3rt/physlock || physlockAUR

- sflock — Simple screen locker utility for X, based on slock. Provides a very basic user feedback.

  https://github.com/benruijl/sflock || sflock-gitAUR

- slock — Very simple and lightweight X screen locker. Offers only a black background when locked, there are no animations or text fields.

  https://tools.suckless.org/slock/ || slock

- swaylock — Screen locker for Wayland.

  https://github.com/swaywm/swaylock || swaylock

- swaylock-effects — Swaylock, with fancy effects.

  https://github.com/jirutka/swaylock-effects || swaylock-effects-gitAUR

- tsscreenlock — Screen locker used in theShell. Shows music controls, and if used with theShell, also shows desktop notifications.

  https://github.com/vicr123/tsscreenlock || tsscreenlockAUR

- vlock — TTY locker. A mirror of the original vlock is available at github[dead link 2025-11-17—HTTP 404].

  https://kbd-project.org/ || kbd

- xfce4-screensaver — A screen saver and locker that aims to have simple, sane, secure defaults and be well integrated with the xfce desktop.

  https://gitlab.xfce.org/apps/xfce4-screensaver || xfce4-screensaver

- xlockmore — Simple X11 screen lock with PAM support.

  https://sillycycle.com/xlockmore.html || xlockmore

- XScreenSaver — Screen saver and locker for the X Window System.

  https://www.jwz.org/xscreensaver/ || xscreensaver

- XSecureLock — X11 screen lock utility designed with the primary goal of security.

  https://github.com/google/xsecurelock || xsecurelock

- xtrlock — Very lightweight X display locker. Keeps windows visible and displays lock icon instead of mouse cursor. Typing password followed by enter unlocks the screen.

  https://packages.debian.org/sid/xtrlock || xtrlock

## Password auditing

- Hashcat — Multithreaded advanced password recovery utility.

  https://hashcat.net/hashcat || hashcat

- John the Ripper — Password cracker.

  https://www.openwall.com/john || john

- zxcvbn — Password strength estimator inspired by password crackers.

  https://github.com/dropbox/zxcvbn || Perl: perl-data-password-zxcvbnAUR, Python: python-zxcvbn

## Password managers

Note Ensure that you understand the security model of a password manager before adopting one. Not all password managers protect against the same threat models.

### Console

- 1Password CLI — Proprietary tool for 1Password password manager.

  https://1password.com/downloads/command-line/ || 1password-cliAUR

- Bitwarden — Open source password manager with desktop, mobile, browser, and CLI versions. Cloud or self-hosted.

  https://bitwarden.com/ || bitwarden-cli

- gopass — Advanced console based password manager, supporting GnuPG and other backends.

  https://github.com/gopasspw/gopass || gopass

- Himitsu — Secret storage manager.

  https://himitsustore.org/ || himitsuAUR

- KeePassC — Curses-based password manager compatible to KeePass v.1.x.

  https://outerhaven.de/keepassc/ || keepasscAUR

- LastPass — Hosted password manager.

  https://www.lastpass.com/ || lastpass-cliAUR

- pass — Simple console-based password manager featuring flat text file organization and GnuPG encryption. Support for OTP: pass-otp.

  https://www.passwordstore.org/ || pass

- passage — A fork of password-store that uses age as backend.

  https://github.com/FiloSottile/passage/ || passage-gitAUR

- pwsafe — Unix command-line program that manages encrypted password databases.

  https://github.com/nsd20463/pwsafe || pwsafeAUR

- tpm — Tiny password manager, inspired by pass, written entirely in POSIX shell.

  https://github.com/nmeum/tpm || tpmAUR

- Vault — Proprietary tool for managing secrets.

  https://developer.hashicorp.com/vault || vault

- kyp — Local-first terminal password manager with TOTP support. Encrypted SQLite vault, Argon2id key derivation, AES-256-GCM encryption.

  https://github.com/stickpro/kyp || kypAUR

### Graphical

- 1Password — Proprietary graphical user interface for 1Password password manager. Based on the Electron platform.

  https://support.1password.com/install-linux/#arch-linux || 1passwordAUR

- Authenticator — Open source, two-factor authentication application built for GNOME.

  https://apps.gnome.org/Authenticator/ || authenticator

- Bitwarden — Open source password manager with desktop, mobile, browser, and CLI versions. Cloud or self-hosted.

  https://bitwarden.com/ || bitwarden

- Ente Auth — Open source 2FA authenticator, with end-to-end encrypted backups.

  https://ente.com/auth/ || ente-authAUR

- Figaro's Password Manager 2 — GTK2 port of Figaro's Password Manager with some new enhancements.

  https://als.regnet.cz/fpm2/ || fpm2AUR

- Gabbro — Password and passkey manager with YubiKey (FIDO2) support, using Argon2id and AES-256-GCM for quantum resistance. Local only.

  https://github.com/gabbro-foss/gabbro || gabbro-binAUR

- KDE Wallet Manager — Tool to manage the passwords on your system. By using the KDE wallet subsystem, it not only allows you to keep your own secrets but also to access and manage the passwords of every application that integrates with the wallet. Part of kde-utilities.

  https://userbase.kde.org/KDE_Wallet_Manager || kwalletmanager

- KeePass Password Safe — Mono-based password manager, which helps you to manage your passwords in a secure way.

  https://keepass.info/ || keepass

- KeePassXC — Community fork of KeePassX with more active development. Compatible with KeePass v.1.x (import only) and KeePass v.2.x.

  https://keepassxc.org/ || keepassxc

- KeepSecret — Password manager for viewing, editing, creating, or deleting passwords, suitable for both desktop and mobile platforms.

  https://apps.kde.org/keepsecret/ || keepsecret

- Key Rack — Password manager for GNOME to view and edit keys, like passwords or tokens, stored by apps.

  https://gitlab.gnome.org/World/key-rack || key-rack

- Keysmith — OTP generation software by KDE. Part of kde-utilities.

  https://apps.kde.org/keysmith/ || keysmith

- OTPClient — Highly secure and easy to use GTK software for two-factor authentication that supports both Time-based One-time Passwords (TOTP) and HMAC-Based One-Time Passwords (HOTP).

  https://github.com/paolostivanin/OTPClient || otpclientAUR

- Passbook — Modern password manager for GNOME.

  https://wiki.gnome.org/Apps/Passbook || passbookAUR

- Password Safe — Simple and secure password manager.

  https://pwsafe.org/ || passwordsafeAUR

- Proton Pass — European-hosted password manager.

  https://proton.me/pass || proton-passAUR

- QtPass — GUI for pass, the standard unix password manager.

  https://qtpass.org/ || qtpass

- Revelation — Password manager for the GNOME desktop.

  https://revelation.olasagasti.info/ || revelationAUR

- Seahorse — GNOME application for managing encryption keys and passwords in the GNOME Keyring. Part of gnome-extra.

  https://wiki.gnome.org/Apps/Seahorse || seahorse

- Secrets — Password manager for GNOME which makes use of the KeePass v.4 format.

  https://apps.gnome.org/Secrets/ || secrets

## Cryptography

### Hash checkers

- cfv — Tiny utility to both test and create checksum files, support .sfv, .csv, .crc, .md5, md5sum, sha1sum, .torrent, par, and .par2 files.

  https://cfv.sourceforge.net/ || cfvAUR

- Collision — GUI tool to generate, compare and verify MD5, SHA-1, SHA-256, SHA-512, Blake3, CRC32 and Adler32 hashes.

  https://apps.gnome.org/Collision/ || collision

- GtkHash — A GTK utility for computing message digests or checksums.

  https://gtkhash.org/ || gtkhashAUR

- hashdeep — A cross-platform tools to compute hashes, or message digests, for any number of files.

  https://md5deep.sourceforge.net/ || hashdeepAUR

- Hash-o-matic — Simple hash validator allowing to compare two files, generate the checksum of a file and verify if a hash matches a file.

  https://apps.kde.org/hashomatic/ || hash-o-matic

- MassHash — A set of file hashing tools (both CLI and GTK GUI) written in Python. Supported algorithms include MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512.

  https://jdleicher.github.io/MassHash/ || masshashAUR

- Parchive — Utility which creates and uses PAR2 files to detect damage in data files and repair them if necessary.

  https://github.com/Parchive/par2cmdline || par2cmdline

- Quick Hash GUI — A GUI to enable the rapid selection and subsequent hashing of files (individually or recursively throughout a folder structure) text and (on Linux) disks.

  https://www.quickhash-gui.org/ || quickhash-gui-binAUR

- RHash — Utility for verifying hash sums (SFV, CRC, etc). Supports lots of algorithms.

  https://github.com/rhash/RHash/ || rhash

### Encryption, signing, steganography

- age — A simple, modern and secure encryption tool (and library) with small explicit keys, no config options, and UNIX-style composability.

  https://age-encryption.org/v1 || Go: age, Rust: rage-encryption

- ccrypt — A command-line utility for encrypting and decrypting files and streams based on Rijndael.

  https://ccrypt.sourceforge.net/ || ccryptAUR

- GnuPG — The GNU project's complete and free implementation of the OpenPGP standard as defined by RFC4880. Free and Open Source replacement of PGP, mostly used for digital signing of packages.

  https://gnupg.org/ || gnupg

- GPG-Crypter — Graphical front-end to GnuPG (GPG) using the GTK3 toolkit and GPGME library.

  https://sourceforge.net/projects/gpg-crypter/ || gpg-crypterAUR

- GpgFrontend — GUI for OpenPGP. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

  https://gpgfrontend.bktus.com/ || gpgfrontendAUR

- KeePassXC — Mainly used for password management and generation, but also supports attaching arbitrary files to entries in an encrypted database.

  https://keepassxc.org || keepassxc

- Keybase — Key directory mapping social media identities, with cross platform encrypted chat, cloud storage, and git repositories.

  https://keybase.io/ || keybaseAUR

- Keyoxide ASPE CLI — Ariadne Signature Profile Exchange (ASPE) CLI for identity profile platforms like Keyoxide.

  https://codeberg.org/keyoxide/kx-aspe-cli || kx-aspe-gitAUR

- Keysign — GTK application to use GnuPG for signing other people's keys. Quickly, easily, and securely.

  https://wiki.gnome.org/Apps/Keysign || gnome-keysign

- KGpg — Simple interface for GnuPG, for KDE. Part of kde-utilities.

  https://apps.kde.org/kgpg/ || kgpg

- Kleopatra — Certificate Manager and Unified Crypto GUI for KDE. It supports managing X.509 and OpenPGP certificates in the GpgSM keybox and retrieving certificates from LDAP servers. Part of kde-pim.

  https://apps.kde.org/kleopatra/ || kleopatra

- Lock — Graphical frontend for GnuPG making use of a beautiful LibAdwaita GUI.

  https://konstantintutsch.com/Lock/ || lockAUR

- minisign — Simple program that only implements key signing.

  https://github.com/jedisct1/minisign || minisign

- OpenSSH — De facto SSH implementation that supports message signing.

  https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.sshsig || openssh

- opgpcard — CLI tool to inspect, manage and use OpenPGP cards.

  https://codeberg.org/openpgp-card/openpgp-card-tools || openpgp-card-tools

- passphrase2pgp — Reproducibly generate private key in OpenPGP/OpenSSH formats according to user input passphrase and optionally sign message in one go.

  https://github.com/skeeto/passphrase2pgp || passphrase2pgpAUR

- rsop — Stateless OpenPGP (SOP) based on rpgp.

  https://codeberg.org/heiko/rsop || rsop

- Seahorse — GNOME application for managing encryption keys and passwords in the GNOME Keyring. Part of gnome-extra.

  https://wiki.gnome.org/Apps/Seahorse || seahorse

- scrypt — Command-line encryption utility featuring the memory-hardened `scrypt` key derivation function.

  https://www.tarsnap.com/scrypt.html || scrypt

- shig — CLI utility to create and verify signatures in ssh-keygen(1) § Y compatible format.

  https://github.com/SierraSoftworks/shig || shig-gitAUR

- sq — A command-line frontend for Sequoia, an implementation of OpenPGP.

  https://sequoia-pgp.org/ || sequoia-sq

- sqop — Implementation of the Stateless OpenPGP Interface using Sequoia.

  https://sequoia-pgp.org/ || sequoia-sop

- stegcloak — CLI steganography tool to hide encrypted messages in plain text using invisible characters and passwords.

  https://github.com/KuroLabs/stegcloak || nodejs-stegcloakAUR

- steghide — A steganography utility that is able to hide data in various kinds of image and audio files.

  https://steghide.sourceforge.net || steghideAUR

### Data-at-rest encryption

See Data-at-rest encryption.

### Password hashing

- Argon2 — Key derivation function (KDF) for secure password hashing, resistant to brute-force and side-channel attacks.

  https://github.com/P-H-C/phc-winner-argon2 || C: argon2, Perl: perl-crypt-argon2AUR, Python: python-argon2-cffi

## Privilege elevation

- doas — A portable version of OpenBSD's doas command, known for being substantially smaller in size compared to sudo while pursuing the same goal of running commands as root or another user.

  https://github.com/Duncaen/OpenDoas || opendoas

- pkexec(1) — A Polkit application that allows an authorized user to run commands or an interactive shell as another user. Configured using Polkit rules.

  https://gitlab.freedesktop.org/polkit/polkit/ || polkit

- run0 — An alternative invocation of systemd-run(1) to temporarily and interactively acquire elevated or different privileges. Does not rely on SetUID and SetGID. Uses Polkit for authentication.

  https://systemd.io/ || systemd

- su — Command used to assume the identity of another user on the system.

  https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/about/ || util-linux

- sudo — Command to delegate the ability to run commands as root or another user while providing an audit trail.

  https://www.sudo.ws/sudo/ || sudo

- sudo-rs — A memory safe implementation of sudo and su.

  https://github.com/trifectatechfoundation/sudo-rs || sudo-rs

Categories:

- Applications
- Security
- Lists of software

Hidden categories:

- Pages or sections flagged with Template:Merge
- Pages with dead links

List of applications/Security
Add topic