Childflow
Offensive & PentestingA per‑command‑tree network sandbox for Linux that isolates DNS, hosts, proxy, policy, and capture controls to a single command and its children
Features
- Isolates one command tree in its own network namespace
- Forces custom DNS resolution, /etc/hosts overrides, and proxy usage regardless of environment variables
- Applies allow/deny CIDR policies and default‑deny rules to outbound traffic
- Captures only the target tree’s traffic as PCAPNG or structured flow logs
- Supports reusable TOML profiles for consistent sandbox configurations
Recent releases
View all 8 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
cargo
Platforms
linux
