n01d-forge
π₯ n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification
git clone https://github.com/bad-antics/n01d-forge.gitbad-antics/n01d-forgen01d-forge
π₯ Secure Cross-Platform Image Burner with Encryption
Flash β’ Encrypt β’ Verify β’ Secure
Features β’ Security β’ Download β’ Usage β’ Building
What is n01d-forge?
n01d-forge is a secure, cross-platform image burning tool similar to Balena Etcher, but with advanced security features including full-disk encryption, secure erase, and hash verification. Perfect for creating bootable USB drives with security in mind.
Features
π₯ Image Flashing
- Multiple Formats - ISO, IMG, RAW, DMG, BIN
- High Performance - 4MB buffer for fast writes
- Progress Tracking - Real-time speed, ETA, and bytes written
- Auto-Detection - Automatically detect USB and removable drives
π Encryption Support
- LUKS/LUKS2 - Linux Unified Key Setup (Linux native)
- VeraCrypt - Cross-platform encryption container
- Multiple Ciphers - AES-256-XTS, Serpent, Twofish
- Strong Key Derivation - Argon2id with configurable iterations
π‘οΈ Security Features
- Secure Erase - Zero fill, random data, DoD 5220.22-M, Gutmann (35-pass)
- Hash Verification - SHA-256, SHA-512, MD5 before and after write
- Wipe on Error - Automatically wipe encryption headers on failure
- Safe Drive Selection - System drives are protected
βοΈ Bootloader Options
- UEFI - Modern UEFI boot support
- Legacy BIOS - Traditional MBR boot support
- Hybrid - Both UEFI and Legacy for maximum compatibility
π¨ User Interface
- Modern Dark UI - Cyberpunk-inspired theme matching n01d-machine
- Step-by-Step Wizard - Easy 3-step process
- Confirmation Dialogs - Prevent accidental data loss
- Real-time Progress - Visual progress with speed and ETA
Security
π Encryption Types
| Type | Platform | Description |
|---|---|---|
| LUKS2 | Linux | Latest LUKS standard with Argon2id |
| LUKS | Linux | Legacy LUKS for older systems |
| VeraCrypt | All | Cross-platform, plausible deniability |
π Encryption Ciphers
| Cipher | Key Size | Description |
|---|---|---|
| AES-256-XTS | 512-bit | Industry standard, hardware accelerated |
| Serpent-XTS | 512-bit | Conservative design, very secure |
| Twofish-XTS | 512-bit | Fast, no known weaknesses |
π§Ή Secure Erase Methods
| Method | Passes | Description |
|---|---|---|
| Zero Fill | 1 | Fast, fills with zeros |
| Random | 1 | Cryptographically random data |
| DoD 5220.22-M | 3 | U.S. Department of Defense standard |
| Gutmann | 35 | Maximum security for older drives |
β Verification
- Pre-write Hash - Calculate SHA-256 of source image
- Post-write Verify - Read back and compare hash
- Mismatch Alert - Clear warning if verification fails
Download
Latest Release (v1.0.0)
| Platform | Download |
|---|---|
| π§ Linux (AppImage) | n01d-forge_1.0.0_amd64.AppImage |
| π§ Linux (Debian) | n01d-forge_1.0.0_amd64.deb |
| πͺ Windows | n01d-forge_1.0.0_x64-setup.exe |
| π macOS | n01d-forge_1.0.0_x64.dmg |
Prerequisites
Required Tools
Linux
# For image writing (usually pre-installed) sudo apt install coreutils # For encryption (optional) sudo apt install cryptsetup # For secure erase (optional) sudo apt install util-linux
Windows
- Administrator privileges required
- No additional tools needed
macOS
- Administrator privileges required
- No additional tools needed
Usage
Basic Image Flash
- Select Image - Click "Browse" and choose your ISO/IMG file
- Select Drive - Click on the target USB drive
- Flash - Click "Flash Image" and confirm
Encrypted Bootable USB
- Select your image file
- Select target drive
- Enable "Enable Encryption" toggle
- Choose encryption type (LUKS2 recommended for Linux)
- Set a strong password
- Click "Flash Image"
Secure Erase Before Write
- Select image and drive
- Enable "Secure Erase First" toggle
- Choose erase method:
- Zero Fill - Fast, good for SSDs
- Random - Better for HDDs
- DoD - Government standard
- Gutmann - Maximum security
- Proceed with flash
Verify After Write
- Enable "Verify After Write" (enabled by default)
- After writing, n01d-forge will:
- Read back the written data
- Calculate SHA-256 hash
- Compare with source hash
- Show verification result
Building from Source
Prerequisites
- Rust 1.70+
- Node.js 18+ (optional)
- Platform-specific dependencies
Linux
# Install dependencies sudo apt install libgtk-3-dev libwebkit2gtk-4.0-dev libappindicator3-dev librsvg2-dev # Clone repository git clone https://github.com/bad-antics/n01d-forge.git cd n01d-forge # Build cargo install tauri-cli cargo tauri build
Windows
# Clone repository git clone https://github.com/bad-antics/n01d-forge.git cd n01d-forge # Build cargo install tauri-cli cargo tauri build
macOS
# Clone repository git clone https://github.com/bad-antics/n01d-forge.git cd n01d-forge # Build cargo install tauri-cli cargo tauri build
Project Structure
n01d-forge/
βββ public/
β βββ index.html # Web UI
βββ src-tauri/
β βββ src/
β β βββ main.rs # Main application logic
β β βββ encryption.rs # Encryption module
β β βββ drives.rs # Drive detection
β β βββ secure_erase.rs # Secure erase methods
β βββ Cargo.toml # Rust dependencies
β βββ tauri.conf.json # Tauri configuration
βββ assets/
β βββ n01d-forge-icon.svg # Application icon
βββ .github/
β βββ workflows/
β βββ release.yml # CI/CD
βββ README.md
Related Projects
- n01d-machine - Secure VM Manager with Sandboxing & Tor
- nullsec - Security research framework
Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
License
MIT License - see LICENSE
Made with π₯ by NullSec Team
π Forge your security
more like this
jasspa
Jasspa's MicroEmacs is a powerful and efficient terminal and window based text editor. Designed to be lightweight yet fβ¦