WARNING: EXPERIMENTAL / UNSTABLE RESEARCH PROJECT. NOT INTENDED FOR DAILY USE.
Hardened Slarpx is a Debian-based Linux distribution built with a strict security-first approach. It uses a multi-layered defense model with aggressive mitigations and extensive kernel-level hardening. Due to its highly restrictive firewall policy, anonymization tools and certain network protocols are intentionally unsupported.
The distribution includes two custom security modules: Poison and Xennytsu. Poison disrupts the deterministic timing required by exploit code by injecting random delays when abnormal behavior is detected, reducing the reliability of timing-based attacks. Xennytsu activates if an attacker gains a shell or attempts memory manipulation, detecting such activity within approximately 250 milliseconds and immediately terminating the offending process.
Beyond passive hardening, Slarpx focuses on active intervention, sabotage, and destruction of attack paths when necessary.
Features
- Hardened Kernel Configs
- Xennytsu Engine (Exploit Detection)
- Poison Engine ( Timing sabotage )
- Heavy Mitigations
- Hardened Slarpx Firewall (nftables)
- Quad9 DNS
- Hardened Sudoers.d
- Hardened Limits
- Faillock
- Hardened Profile.d
- Hardened APT
- Modprobe.d Blocked modules ( attack surface reduction )
- Removed Kernel Map
- Hardened Permissions
- Debug tools blocked
- Coldboot Defense
- Experimental
Follow Hardened Slarpx
User Reviews
-
This distribution might be the most secure one I've seen since Qubes. The Poison module is very well thought out. This developer is an inventor.