awesome-qubes-os

We’re hands-on firmware experts with years of experience writing elegant, scalable and custom code for clients.

Learn how and why to back up your data on Qubes OS.

“Qubes OS: Security Oriented Operating System”

An OpenMdev Project (Qubes OS Summit 2022)

The goals of the Admin API system is to provide a way for the user to manage the domains without direct access to dom0.

Automation with Ansible.

help back up Qubes VMs and ZFS file systems.

Colorful network information with iptables & ip.

A collection of guides about creating Salt formulas in Qubes OS and distributing them as RPM packages to take advantage of the secure updates mechanism for dom0.

Here we try to create restricted sys-guis, where they only need to see the parts that pertain to them. Basically a administrative gui login (dom0), and a restricted user sys-gui login.

Xen Hypervisor VM Escape

AFL++ is a superior fork to Google's AFL - more speed, more and better mutations, more and better instrumentation, custom module support, etc.

A curated list of references to awesome Fuzzing for security testing. Additionally there is a collection of freely available academic papers, tools and so on.

Hacking the Hypervisor

Lessons Learned from Eight Years of Breaking Hypervisors

Attacking Hypervisors Using Firmware And Hardware

All the awesome lists.

Analyze Qubes OS VM startup performance.

Change the system’s time zone in terminal you can issue the timedatectl command with the option set-timezone.

Useful for data recovery.

There are multiple “android on PC” type distributions that one could try in a VM. Here are the 3!

This is a community guide, not an official guide.

An audio qube acts as a secure handler for potentially malicious audio devices, preventing them from coming into contact with dom0

This page summarizes how to automate debian-minimal based template creation.

If you don’t like using one of the existing templates because of specific administration, package management or other building needs, you can build a TemplateVM for your distribution of choice.

The Debian template is an officially supported template in Qubes OS.

Although the MAC address is not the only metadata broadcast by network hardware, changing your hardware's default MAC Address could be an important step in protecting privacy.

A user who frequently travels with a Qubes laptop holding sensitive data may be at a much higher risk of Evil Maid attacks than a home user with a stationary Qubes desktop.

Create Apparmor profile.

The initial_preferences json file can be used to configure the preferences that will be used by default in newly created profiles.

Firewalling in Qubes is not intended to be a leak-prevention mechanism.

Any additional ability a VM gains is additional attack surface.

The place to be for all topics regarding privacy, anonymity and other subjects. Rooms are click-to-join.

For those who wish to read over the anonymous Tor network.

Free ebooks to help your journey!