I am a programmer/security researcher who is mainly interested in Linux.

The most of my active projects are now on

Note that only contributions on GitHub are counted here. No contributions on Codeberg and no commits with an unverified email address.

Want to add stats to your profile?

Want to add trophies to your profile?

• advent-of-code – Advent of Code
• crabjail – Linux sandboxing tool
• crablock – Yet another Linux sandboxing tool.
• crabsecco – crabjail seccomp compiler
• ddiceware – diceware passphrase generator.
• fedora-extras – Additional package for Fedora, missing in the offical repositories and RPMFusion.
• firefox-config – My config for a hardened, secure, privacy friendly firefox.
• flatpak-device-mounter – Workaround for flatpaks limited device permissions.
• getenvtrace – Simple LD_PRELOAD library to trace calls to getenv(3).
• guides –
• kyst – Keep Your Sandbox Tight! – Actually just a collection of my own tight sandbox configurations.
• smem – Show top 10 memory consuming processes.
• SCEE-custom-overlays – A collection of custom overlays for SCEE
• tricks – Collection of useful commands and configs.
• zufall – Zufall, a tool to help on decisions.

• GDriveDL – Google Drive Download Python Script with zenity GUI
• NewsBear – Ein Skript, das tagesschau.de auf Eilmeldungen überwacht und den Benutzer mittels nativer Benachrichtigungen benachrichtigt, wenn es eine neu Eilmeldung gibt.
• Rust Cookbook – My rust cookbook, a list of good, useful crates (with thoughts and comments) + boilerplate snippets.
• Secure Linux Workstation – References to harden a Linux Workstation.
• detect-kpxc-browser – Detect KPXC-Browser PoC
• fdns4users – Allow unprivileged users to start fdns.
• ffx – Install all firefox release channels and use firejail to sandbox them.
• firecfg.py – An improved firecfg written in python.
• firejail-profile-builder –
• firejailed-tor-browser – HOWTO: Firejailed Tor Browser
• fireurl – Fixing the firejail URL open issue.
• fjp – A handy command line program to work fast and straightforward with firejail profiles.
• fstracer – A filesystem-tracer.
• hexbot – My solution for: https://noopschallenge.com/challenges/hexbot
• language-race – Comparison of the speed of different programming languages.
• manual-for-esoteric-it-security – Manual for esoteric it security
• ns-utils – Simple Linux namespaces debugging util
• raudit – A configurable audit program for firejail-sandboxes with metrics.
• uhb2dnsmasq – Download the Ultimative.Hosts.Blacklist and convert it into a dnsmasq configuration.

• Flatseal – Manage Flatpak permissions
• arkenfox user.js – Firefox privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening
• bubblejail – Bubblewrap based sandboxing for desktop applications
• firejail – Linux namespaces and seccomp-bpf sandbox
• libseccomp-rs – Native Rust crate for libseccomp library

• seccomp-bpf based MDWE bypass – Bypass seccomp-bpf based memory-deny-write-execute with READ_IMPLIES_EXEC.
• cu2ub.py – ClearURLs to µBlock origin converter
• maintenance-status.md – Proposal to easily show the maintenance status of a project.
• seccomp_init_btree.rs – LD_PRELOAD library to change the default optimization level of libseccomp to build btree optimized filters.
• seccomp_load_debug.rs – LD_PRELOAD library to export the seccomp-bpf filter when it is loaded.
• xdg-open.c – A xdg-open drop-in wrapper to make xdg-open work nicely with firejail.