An advanced, all-in-one operational security (OPSEC) utility designed for ethical hackers, researchers, and privacy advocates.
- Overview
- Key Features & Modules
- Advanced OPSEC Hardening
- Prerequisites
- Installation
- Usage
- Under the Hood
- Troubleshooting
- Disclaimer
- License
In today's digital landscape, relying solely on a VPN is often insufficient for true operational security. Anon is a powerful Bash-based framework that forcibly routes your entire system's network traffic through the Tor network using strict iptables rules.
Beyond network routing, Anon actively hardens your machine's footprint by randomizing hardware identifiers (MAC addresses), blocking hardware tracking (Bluetooth), wiping volatile memory (Anti Cold Boot), spoofing OS fingerprints, and thwarting Man-in-the-Middle (MITM) attacks.
Anon is modular. You can toggle any combination of the following security layers:
- 🌐 Anti-MITM (Man-in-the-Middle) Detects and blocks ARP spoofing and malicious packet injections on your local network.
- 🧹 Log Killer
Uses
secure-delete(srm) to overwrite and completely obliterate system logs (/var/log/*), ensuring no traces of your activities remain on the disk. - 🎭 IP Changer (Transparent Proxy)
Configures
iptablesto drop all non-Tor traffic. Forces all TCP/UDP connections through Tor's transparent proxy, effectively masking your real IP address. - 📡 DNS Changer
Prevents DNS leaks by modifying
/etc/resolv.confand forcing DNS resolution through Tor's isolated DNS port (Port 5300). - 📱 MAC Changer Randomizes the physical MAC addresses of all active Network Interface Cards (NICs) to prevent device tracking on local networks (e.g., public Wi-Fi).
- 🏷️ Hostname Changer Temporarily changes your machine's hostname to a randomized string, masking your device's identity on local networks.
- 🕵️ Browser Anonymization Injects secure, anti-fingerprinting configurations into supported browsers to prevent Canvas fingerprinting and WebRTC IP leaks.
- ❄️ Anti Cold Boot
Wipes remaining RAM contents (
sdmem) upon system shutdown to protect encryption keys and sensitive data from Cold Boot physical attacks. - 🛑 Kill Switch
In an emergency, instantly drops all
iptablestraffic rules, completely cutting off your machine from the internet.
These modules elevate Anon from a simple proxy router to a state-of-the-art OPSEC utility designed to counter deep-packet inspection and advanced tracking:
- 🌉 Tor Bridges (Obfs4) Bypasses Tor censorship (e.g., in China or corporate networks) by obfuscating your Tor traffic as random, meaningless data using obfs4 pluggable transports.
- 💻 OS Obfuscation (TCP/IP Fingerprinting)
Modifies kernel
sysctlparameters (such as TTL and TCP Window sizes) so that network scanners (like Nmap) identify your Linux machine as a generic Windows 10 client. - 📴 Bluetooth Disabler (Beacon Tracking Protection)
Actively blocks all Bluetooth receivers and transmitters using
rfkill, preventing passive beacon tracking and Bluejacking attacks. - 👻 Process Obfuscation
Spoofs the process names of common hacking tools (e.g.,
nmap,sqlmap,tor) by wrapping them inexec -a "[kworker/u4:2]". They will appear as benign system background tasks in the process tree, hiding them from local malware or monitoring. - ⛓️ Proxychains-ng Integration
Automatically configures
proxychains4.confto hook into Tor's Socks5 port (9050). This forces stubborn tools that ignore system proxies to route securely through the Tor network. - ⏳ Fake Timezone Synchronization
Defeats time-based fingerprinting by randomly selecting a global timezone (e.g.,
Asia/Tokyo,America/New_York) instead of just defaulting to UTC.
Anon features an Interactive Dependency Checker. If any core packages are missing upon launch, Anon will automatically prompt to install them for you using apt-get. Key dependencies include:
tor,obfs4proxy,proxychains4iptables,macchanger,network-manager,rfkillsecure-delete,python3-scapy,curl
# Clone the repository
git clone https://github.com/egnake/anon.git
cd anon
# Install dependencies and global shortcut
sudo make install
# Run the tool
sudo anonAnon fully supports Windows environments by leveraging the Windows Subsystem for Linux (WSL).
- Ensure WSL 2 is installed.
- Run the
setup.batfile as a standard user.- It will automatically set up your global Windows
PATH. - It will boot into WSL, install dependencies, and compile the tool.
- It will automatically set up your global Windows
- Open a new Command Prompt or PowerShell and type:
anonAnon features an interactive, user-friendly Command Line Interface.
Just type anon to open the interface. Type the number of the module you want to toggle. Green [ ✔ ON ] indicates the module is active. Once configured, press 0 to apply settings and route your traffic.
sudo anonYou can bypass the menu for rapid execution:
# Immediately start Anon with your last saved configuration
sudo anon --start
# Stop all anonymization and restore default network settings
sudo anon --stop
# Show system status and active modules
sudo anon --status
# Show help menu
anon --helpWhen you trigger the IP Changer, Anon does not just set a local proxy. It actively flushes your current iptables and establishes a Transparent Tor Proxy. It sets up DNAT rules to redirect DNS requests to Tor's DNS port, and uses REDIRECT rules for all TCP traffic to Tor's TransPort. Any traffic that bypasses Tor is strictly DROPPED, ensuring zero leakage even if an application ignores proxy settings.
Anon is built for educational, research, and ethical hacking purposes only. The developers and contributors of this project do not endorse, encourage, or support any illegal activities. You are solely responsible for your actions and ensuring that your use of this tool complies with all local, state, and federal laws.
This project is licensed under the MIT License.