$ show Und3rf10w/kali-anonsurf
A Debian-packaged Bash toolset that ports ParrotSec's anonsurf and pandora tools to Kali Linux. The anonsurf component makes the whole system use a Tor transparent proxy: it saves existing iptables rules, flushes them, redirects DNS to a local Tor DNSPort, forwards TCP/UDP/ICMP through Tor's TransPort on port 9040, excludes private and local networks, disables IPv6 through sysctl, and supports changing Tor identity. The pandora component is a shutdown service that drops kernel caches and scrubs RAM with sdmem from secure-delete. The repository is not a library or service; it is an installer plus a .deb source tree, with GitHub Actions that build the package and verify it installs in Kali rolling containers. The code is functional and has some good operational detail, including UID-based iptables owner rules, resolvconf vs. plain resolv.conf handling, and package maintainer scripts that swap torrc files. It is also rough around the edges: it is largely monolithic shell, has no unit tests for the iptables logic, relies on outdated actions/checkout@v2 CI actions, and the IPv6 re-enable function has a filename typo that checks /etc/sysctl.d/98-kali-anonsurf but removes /etc/sysctl.d/98-kali-anonsurf.conf, which can prevent IPv6 from being re-enabled after stop.
The LLM identified 2 files worth highlighting for reuse:
Self-contained Bash init script that implements system-wide transparent proxying through Tor. It records and restores iptables state, redirects DNS and TCP/UDP/ICMP traffic by UID to Tor, excludes RFC1918 and local networks, and conditionally handles resolvconf-based DNS. It can be extracted and adapted as a reference implementation for any transparent proxy or network-isolation tool.
Small, self-contained shutdown script that drops page caches and securely wipes RAM using sdmem. It demonstrates a reusable pattern for adding memory sanitization to a system shutdown path, and it is independent enough to be ported to other init systems.