Privacy-focused web browser built with Rust + GTK3

• 🚫 Built-in Ad Blocking
• 🧅 Tor Integration
• 🤖 AI Assistant sidebar
• 🔒 Tab Isolation
• 👤 Anti-Fingerprinting

cargo build --release
./target/release/marshall

Rust 1.70+, GTK 3.0, WebKitGTK

GPL-3.0

How Marshall stacks up against other privacy browsers:

✅ = Full support | ⚠️ = Partial/configurable | ❌ = Not supported

Marshall includes built-in tools designed for security researchers and OSINT professionals:

Right-click context menu options on any page:

• "Lookup IP on Shodan"
• "Check Domain WHOIS"
• "Analyze SSL Certificate"
• "View HTTP Headers"
• "Check Wayback Machine"
• "Search on VirusTotal"
• "DNS Enumeration"

Marshall is designed to protect against:

Neither. Marshall uses WebKitGTK as its rendering engine, which is the same engine that powers Safari and GNOME Web. This provides excellent privacy characteristics and avoids the Chromium/Google ecosystem entirely.

No. Marshall uses its own extension format designed for security. Chrome/Firefox extensions are not compatible. However, we provide similar functionality through our curated extension repository.

Most streaming services work, but some may require adjustments:

• Disable fingerprint protection for specific sites
• Enable DRM (Widevine) in settings if needed
• Some services may detect privacy tools

1. Install Tor: sudo apt install tor or sudo pacman -S tor
2. Start the service: sudo systemctl start tor
3. Launch Marshall with: marshall --tor

Yes! Go to Bookmarks → Import and select:

• Firefox (places.sqlite)
• Chrome/Brave (Bookmarks JSON)
• Safari (Bookmarks.plist)
• HTML export from any browser

Please report security issues privately to: security@nullsec.dev

Do NOT open public GitHub issues for security vulnerabilities.

[network.proxy]
enabled = true
type = "socks5"
host = "127.0.0.1"
port = 9050

[[network.proxy_chain]]
type = "socks5"
host = "127.0.0.1"
port = 9050

[[network.proxy_chain]]
type = "http"
host = "proxy.example.com"
port = 8080

[[sites]]
pattern = "*.github.com"
javascript = true
cookies = "session"
fingerprint_protection = false

[[sites]]
pattern = "*.facebook.com"
block = true

marshall [OPTIONS] [URL]

Options:
  -p, --private          Private browsing mode
  -t, --tor              Route through Tor
  --paranoid             Maximum privacy mode
  --proxy <PROXY>        Use specified proxy
  --profile <NAME>       Use named profile
  --no-extensions        Disable extensions
  --safe-mode            Default settings
  -h, --help             Print help

• 🎉 Initial stable release
• ✨ Full privacy suite with tracker/ad blocking
• 🔒 Extension sandbox with honeypot detection
• 🧅 Tor integration
• 🔐 DNS over HTTPS support

• WebKitGTK — Rendering engine
• GTK4 — UI framework
• Rust — Programming language
• EasyList — Ad blocking filter lists
• Tor Project — Onion routing

Marshall is provided "as is" without warranty. No tool provides 100% anonymity. Use additional measures for high-risk activities. Keep your browser updated.