paranoid-ninja

About

A script to protect your privacy.
Apply a Transparent proxy through Tor with nftables or iptables and optionnaly can spoof a random MAC address, localtime, hostname, private ip.

Firewall

Add basic and secure rules for nftables or iptables, inspired by project like TOR transparent-proxy, anonsurf, kalitorify, iptables-essential.

Test if it work

• Are you using tor ?
• torrent ip
• dns leak
• Ip info

TODO List

• Stop the web browser, clean cache, and restore (Not easy with firejail and bleachbit do not support all web browsers :()

Dependencies

Archlinux

# pacman -S ipcalc tor wget

And add iptables or nftables. wpa_supplicant if use wifi.

Gentoo (ebuild)

# emerge -av paranoid-ninja

Other distribs

The name of the packages may be different but need:
iproute2, shuf, urandom, util-linux, nftables or iptables, systemd, ipcalc, jq, wpa_supplicant if use a wifi card, dhcpcd is comptatible too.

Install

Clone this repository:

# git clone https://github.com/szorfein/paranoid-ninja.git
# make install

Configure

If install, edit the config file at /etc/paranoid-ninja/paranoid.conf.

• Your network card: net_device="wlp2s0"
• The target router: target_router="192.168.1.1"
• Your favorite firewall: firewall="iptables"
• If want forge a random timezone only: randomize=( "timezone" )
• Change the username: # sed -i "s:brakk:your_username:g" /etc/paranoid-ninja/paranoid.conf

Sshuttle (WORKFLOW)

There are a temporary working example of sshuttle.service in the systemd dir, you have to manually edit and copy this file at /lib/systemd/system or /usr/lib/systemd/system, depend of your system and create a ssh key for the root at /root/.ssh/id_ed2559.
A complete howto can be found here.

Systemd service

The Makefile install 2 services, one for ethernet card:

# systemctl start paranoid@<interface>

And one for the wifi card:

# systemctl start paranoid-wifi@<interface>

Usage

# paranoid-ninja -h

Examples

Update your timezone by looking your ip address: (need a working connection)

# paranoid-ninja -t -c /etc/paranoid-ninja/paranoid.conf

Randomize all:

# paranoid-ninja -m -i -p -H -t -c /etc/paranoid-ninja/paranoid.conf

Will randomize the MAC address (-m), the ip address (-i), apply a transparent proxy (-p), change the hostname (-H), and change the time zone (-t).

All command need -c /etc/paranoid-ninja/paranoid.conf except with -s|--status.

Support

Any support will be greatly appreciated, star the repo, coffee, donation... thanks you !