privacy-toolkit/TOOLS-REFERENCE.md

# Privacy Toolkit - Tool Candidates

## 🛡️ Document Sanitization
- **Dangerzone** - PDF/Office document sanitizer using container isolation
  - Threat: Malicious documents with embedded exploits
  - Status: Installation script ready (needs chmod fix for GPG key)
  - Source: Freedom of the Press Foundation
  - Platform: Linux (Debian/Ubuntu/Fedora)

- **ExifCleaner** - Metadata removal from images/PDFs/videos
  - Threat: EXIF data leaking location, camera info, timestamps
  - Source: https://github.com/szTheory/exifcleaner
  - Platform: Cross-platform (AppImage for Linux)

- **mat2** (Metadata Anonymization Toolkit)
  - Threat: Document metadata revealing identity/system info
  - Source: apt package, part of Tails
  - Platform: Linux

## 🔐 Encryption & Secure Storage
- **VeraCrypt** - Full disk encryption and encrypted containers
  - Threat: Physical device seizure, data theft
  - Status: Already in use
  - Source: https://veracrypt.fr
  - Platform: Cross-platform

- **age** - Modern file encryption (simpler than GPG)
  - Threat: Sensitive files at rest
  - Source: https://github.com/FiloSottile/age
  - Platform: Cross-platform, Go binary

- **Cryptomator** - Client-side cloud storage encryption
  - Threat: Cloud provider access to files
  - Source: https://cryptomator.org
  - Platform: Cross-platform

## 📡 Secure Communication
- **Signal Desktop** - E2E encrypted messaging
  - Threat: Message interception, surveillance
  - Source: https://signal.org
  - Platform: Linux (official .deb)

- **SimpleX** - E2E encrypted messaging without identifiers
  - Threat: Metadata correlation, phone number linking
  - Status: Already documented in PAI
  - Source: https://simplex.chat
  - Platform: Cross-platform

- **Jami** - P2P encrypted video/audio calls
  - Threat: Centralized communication surveillance
  - Source: https://jami.net
  - Platform: Cross-platform

## 🌐 Anonymity & Network Privacy
- **Tor Browser** - Anonymous web browsing
  - Threat: IP tracking, browser fingerprinting
  - Source: https://torproject.org
  - Platform: Cross-platform

- **ProtonVPN** - Privacy-focused VPN
  - Status: Already installed
  - Source: https://protonvpn.com
  - Platform: Cross-platform

- **OnionShare** - Anonymous file sharing over Tor
  - Threat: File transfer metadata, IP exposure
  - Source: https://onionshare.org
  - Platform: Cross-platform

## 🔍 Metadata & Privacy Analysis
- **ExifTool** - View/edit metadata in files
  - Threat: Understanding what metadata you're leaking
  - Source: apt package
  - Platform: Cross-platform

- **Sherlock** - Username enumeration across platforms
  - Threat: Understanding your digital footprint
  - Source: https://github.com/sherlock-project/sherlock
  - Platform: Python tool

## 🗑️ Secure Deletion
- **BleachBit** - Secure file deletion and system cleaning
  - Threat: Forensic recovery of deleted files
  - Source: apt package
  - Platform: Linux/Windows

- **shred** - Overwrite files securely
  - Threat: File recovery after deletion
  - Source: GNU coreutils (already installed)
  - Platform: Linux

## 🔒 Password & Secret Management
- **KeePassXC** - Offline password manager
  - Status: Already in use
  - Source: https://keepassxc.org
  - Platform: Cross-platform

- **Bitwarden** - Open source password manager (self-hostable)
  - Threat: Password reuse, weak passwords
  - Source: https://bitwarden.com
  - Platform: Cross-platform + self-hosted

## 📧 Email Privacy
- **Thunderbird + Enigmail** - PGP email encryption
  - Threat: Email content surveillance
  - Source: apt package
  - Platform: Cross-platform

- **ProtonMail Bridge** - Use ProtonMail with desktop clients
  - Threat: Email metadata, provider access
  - Source: https://proton.me
  - Platform: Cross-platform

## 🛡️ System Hardening
- **firejail** - Application sandboxing
  - Threat: Application exploits compromising system
  - Source: apt package
  - Platform: Linux

- **AppArmor** - Mandatory Access Control
  - Threat: Privilege escalation
  - Source: Built into Debian
  - Platform: Linux

## 🌐 DNS Privacy
- **dnscrypt-proxy** - Encrypted DNS queries
  - Threat: DNS surveillance, ISP tracking
  - Source: https://github.com/DNSCrypt/dnscrypt-proxy
  - Platform: Cross-platform

- **Unbound** - Validating DNS resolver
  - Threat: DNS spoofing, MITM
  - Source: apt package
  - Platform: Linux

## 📱 Mobile Companion Tools
- **scrcpy** - Control Android via ADB (for testing privacy apps)
  - Source: apt package
  - Platform: Linux/Windows/macOS

## 🎯 Priority Tools (Install First)
1. Dangerzone - Document sanitization
2. mat2 - Metadata removal
3. Signal Desktop - Secure messaging
4. Tor Browser - Anonymous browsing
5. BleachBit - Secure deletion
6. firejail - App sandboxing

## 📁 Repository Structure Proposal
```
privacy-toolkit/
├── README.md                          # Overview, threat model intro
├── install.sh                         # Master handler script
├── tools/
│   ├── dangerzone/
│   │   ├── install.sh                # Individual install script
│   │   ├── README.md                 # What it does, why you need it
│   │   └── verify.sh                 # Post-install verification
│   ├── mat2/
│   │   ├── install.sh
│   │   ├── README.md
│   │   └── examples/                 # Usage examples
│   ├── signal-desktop/
│   └── tor-browser/
├── categories.md                      # Tools organized by threat model
├── threat-models.md                   # Common threat scenarios
└── docs/
    ├── installation-guide.md
    ├── verification-guide.md          # How to verify tools work
    └── threat-modeling.md             # Help users choose tools
```

## 🔧 Installation Script Template
Each tool should have:
- Distro detection (Debian/Ubuntu/Fedora/Arch)
- GPG key verification (with chmod fix for keyrings!)
- Dependency checking
- Version verification
- Post-install testing
- Cleanup on failure
- Usage examples

## 📝 Notes
- Focus on FOSS tools (auditability)
- Prefer official repositories
- Include threat model for each tool
- Provide usage examples
- Link to official documentation
- Security-focused: verify signatures, check hashes