Seven public cybersecurity projects with NSA ties

Some of these projects are tools you can use today. Others are historical references or source code you can study. The project links below explain what each one does and where it came from.

Ghidra

Ghidra helps analysts inspect compiled programs. It disassembles machine instructions and can translate some of them into a C-like view. Try it on a small program you compiled yourself so you can compare the decompiler output with the original code. If you need to execute a suspicious sample, use an isolated analysis environment. Ghidra repository and releases

Mitigating Web Shells

A web shell lets someone control a compromised server through web requests. The NSA repository publishes detection guidance and sample rules. Use them as starting points when reviewing server files and logs. A rule match warrants investigation, and a clean scan has limited scope. Web shell mitigation repository

SELinux

Originally developed by the NSA, SELinux applies policy rules that constrain what Linux processes can access. If you administer a system that uses it, your distribution’s documentation can help you diagnose a denial before changing a policy. Red Hat’s explanation of SELinux

Apache NiFi

NiFi began at the NSA as NiagaraFiles and became an Apache project. It moves data between systems and lets operators see how data passed through a configured flow. A common use is routing logs to different destinations. Check what the flow records and where it sends data before connecting production sources. Apache’s project history · NiFi documentation

RandPassGenerator

This Java command-line project generates passwords, passphrases and raw keys. Its repository explains the supported inputs and generation methods. For everyday account passwords, a password manager with a built-in generator also keeps the result with the right login. RandPassGenerator repository

Enigma Simulator

The simulator lets you work through a historical cipher and see how its rotor settings affect a message. It is an educational demonstration of breaking Enigma. Enigma Simulator repository

SIMON and SPECK

The repository documents two lightweight block-cipher families and includes implementation material. It is a reference for studying cipher design. For a product that needs encryption, use the established cryptographic libraries and protocols required for that product. SIMON and SPECK repository