Step right up. The show is about to begin. What you see here cannot be unseen.
Every tool is a standalone Python CLI built with Click. Install one, install all โ each has its own setup.py, README, and entry point.
| # | Tool | Command | Description |
|---|---|---|---|
| 1 | ๐ฎ Sigil | sigil |
Visual hash fingerprinting โ turns any hash into geometric SVG art |
| 2 | ๐ฆ Dead Drop | dead-drop |
LSB steganography โ hide AES-256 encrypted messages in PNG images |
| 3 | ๐ฒ Miasma | miasma |
Shannon entropy analyzer โ detect stego, weak crypto, packed malware |
| 4 | โฐ Temporal | temporal |
Filesystem forensic timestamp analyzer โ detect timestomping |
| 5 | ๐ข Hexspeak | hexspeak |
Hex word encoder/decoder with 150+ word dictionary & poetry |
| 6 | ๐๏ธ Whisper | whisper |
Spectral audio steganography โ voices hidden in spectrograms |
| 7 | ๐บ Skinwalker | skinwalker |
Process mimicry detector โ finds processes wearing other faces |
| 8 | ๐ฎ Ouija | ouija |
File carving & recovery โ summon spirits from deleted files |
| 9 | ๐ป Eidolon | eidolon |
Ghost network packets โ spectral traffic analysis |
| 10 | ๐ฅ Doppelganger | doppelganger |
File identity crisis detector โ unmask file impostors |
| 11 | ๐ฏ๏ธ Seance | seance |
Network necromancy โ resurrect dead connections |
| 12 | ๐ Lamprey | lamprey |
Dependency infection analyzer โ supply chain lamprey detection |
| 13 | ๐ชก Voodoo | voodoo |
Live process memory analysis โ stick pins in memory |
| 14 | ๐ฆ Cryptid | cryptid |
Hidden API & endpoint hunter โ find what shouldn't be found |
| 15 | ๐น Gremlin | gremlin |
Filesystem chaos agent โ anomaly detection & honeypots |
| 16 | ๐ Grimoire | grimoire |
The dark book of password arts โ occult password generator |
| 17 | ๐ฆ Wendigo | wendigo |
Resource devourer detector โ hunt hungry processes |
| 18 | ๐ Harbinger | harbinger |
Log scream detector โ the harbinger hears all |
| 19 | ๐ง Revenant | revenant |
Zombie process hunter โ hunt the undead |
| 20 | ๐ Necronomicon | necronomicon |
System dark assessment โ the book that should not be read |
| 21 | ๐ Chimera | chimera |
Binary polyglot structure validator โ multi-headed file analysis |
| 22 | ๐ Basilisk | basilisk |
DNS resolver security audit โ the paralyzing gaze |
| 23 | ๐ค Apparition | apparition |
Environment variable security audit โ what lurks in your env |
| 24 | ๐ฆ Manticore | manticore |
TLS/SSL certificate chain analyzer โ the venomous sting |
| 25 | ๐น Ghoul | ghoul |
Shared library injection detector โ feeding on .so files |
| 26 | ๐ Lich | lich |
Kernel module & rootkit surface scanner โ commands the dead |
| 27 | ๐ Imp | imp |
Shell history auditor โ mischievous secrets finder |
| 28 | ๐ Shade | shade |
File permission anomaly hunter โ lurking in the shadows |
| 29 | ๐ง Djinn | djinn |
Container escape surface analyzer โ trapped but scheming |
| 30 | ๐ฆ Mothman | mothman |
Network promiscuity & ARP anomaly detector โ watching from the dark |
# Clone the repo
git clone https://github.com/bad-antics/nullsec-freakshow.git
cd nullsec-freakshow
# Install everything (30 tools + meta-suite)
chmod +x install.sh && ./install.sh
# Or install individually
pip install -e nullsec-sigil/
pip install -e nullsec-grimoire/# Visual hash art
sigil stamp sha256 "hello world"
# Generate an occult password
grimoire conjure --style rune --length 32
# Hunt processes pretending to be something else
skinwalker scan
# Full system dark assessment
necronomicon ritual
# DNS security audit
basilisk gaze
# Container escape surface analysis
djinn lamp
# Network anomaly detection
mothman sighting
# Shell history secrets
imp mischief
# Master suite โ see all tools + install status
freakshow rosternullsec-freakshow/ โ This repo
โโโ install.sh โ One-shot installer for all 30 tools
โโโ nullsec-freakshow/ โ Meta-package (freakshow CLI + roster)
โโโ nullsec-sigil/ โ Tool 1
โ โโโ sigil/
โ โ โโโ __init__.py
โ โ โโโ engine.py โ Core logic
โ โ โโโ cli.py โ Click CLI
โ โโโ setup.py
โ โโโ README.md
โโโ nullsec-dead-drop/ โ Tool 2
โโโ ... โ Tools 3-29
โโโ nullsec-mothman/ โ Tool 30
Every tool follows the same pattern: {name}/engine.py (logic), {name}/cli.py (Click interface), setup.py (packaging).
- Python 3.8+
- Linux (some tools read
/proc,/sys, etc.) - No external dependencies beyond
click>=8.0
MIT โ bad-antics / nullsec 2026
The freakshow never closes. It only moves to the next town.