Childflow
Offensive & PentestingA per‑command‑tree network sandbox for Linux that isolates DNS, hosts, proxy, policy and capture controls to a single command and its children
Features
- Isolates a single command tree in its own network namespace
- Enforces custom DNS resolution, /etc/hosts overrides, and forced proxy usage for that tree only
- Applies allow/deny CIDR policies with default‑deny semantics to outbound traffic
- Captures and logs structured flow events (DNS, connect, policy) without full packet inspection
- Supports reusable TOML profiles and both rootless and rootful backends
Recent releases
View all 8 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
cargo
Platforms
linux
