A secure and fully isolated from you machine enviroment with built-in support for nested VPNs. Just like a VM but you start it in one click, and optimized for bad hardware and pentesters!
- Uses Bubblewrap for filesystem and process isolation
- Strict CPU, memory, and process limits prevent resource exhaustion problems
- Multiple layers of protection against resource attacks
- Support for nested VPN connections for extra anonymity
- All session data is temporeral and will clean up on exit
- Easy-to-use (lie) GUI for customizing security settings - python3 gui_setup.py
- Your computer's filesystem is isolated from the Anomal enviroment
- Think of anomal as an Virtual Machine but way more light, and easier to use
- Anonmal has also capabiity to utilize OpenVPN and Wireguard as another protection layer
- If the Anonmal envorment fails it will just clean up and exit, you system will be safe.
- Testing malwares
- Pentesting stuff
- Just trying to be anonymous and safe :p
- You wanna try some risky stuff ;)
# Install required system packages
sudo apt update
sudo apt install -y python3 python3-pip python3-venv
sudo apt install -y debootstrap bubblewrap
# For VPN support (optional)
sudo apt install -y openvpn wireguard-tools
-
Clone and setup the project:
git clone https://github.com/pythontooth/anomal.git cd anonmal python3 -m venv venv (optional but for extra safety) source venv/bin/activate (optional but for extra safety) pip install -r requirements.txt
-
Configure settings (optional):
python3 -m anonmal.gui_setup
-
Make setup script executable:
chmod +x scripts/setup_container.sh
-
Run Anonmal:
sudo python3 -m anonmal.main
cpu_limit
: CPU usage limit (0.1-2.0) - 2.0 = 2 coresmemory_limit
: RAM limit (e.g., "512m", "1g")pids_limit
: Maximum number of processes (recommended: 32-128)default_packages
: Packages to install in the container, they will be saved in template container
Contributions are welcome! Please:
- Fork the repository
- Create a feature branch
- Add tests for new functionality or nah
- Document your changes
- Submit a pull request
While Anonmal provides strong isolation, no security solution is perfect.
- Keep your host system updated
- Use trusted VPN providers (they might spy on you ;0)
- Regularly review and update configurations
- Test in non-production environments first (especially its like v0.1)
- Build a separate terminal interface for the isolated environment with configuration menu (probably using GTK 3)
- Add installation options: minimal setup with basic tools like curl, wget, nmap, and a full installation packed with comprehensive toolsets
- Implement emergency features for when the host machine runs into trouble or system failures occur
- Consider integrating a collection of free VPNs that work out of the box without manual setup
This project is provided as-is for educational and security research purposes.