OpenBSD Handbook

    Theme
    • Part I. Install & Configure
      • Introduction to OpenBSD
      • Installing OpenBSD
      • The X Window System
      • Networking on OpenBSD
      • System Configuration
      • OpenBSD Basics
      • Managing Software: Packages and Ports
    • Part II. Daily Operations
      • OpenBSD Desktop Environments
      • Multimedia
      • Printing
      • Linux Compatibility
      • Windows Compatibility
      • Games
    • Part III. System Administration
      • Virtualization
      • Storage and File Systems
      • Updating and Upgrading
      • Localization
      • The OpenBSD Boot Process
      • Security
    • Part IV. Networking & Daemons
      • Services
        • Database
          • MariaDB
          • PostgreSQL
          • Redis
          • memcached
        • Directory
          • YP (NIS)
          • LDAP
        • File
          • NFS
          • Samba
        • FTP Services
          • ftpd
          • ProFTPD
          • vsftpd
          • Pure-FTPd
          • TFTP
        • Mail
          • OpenSMTPD Mail Server
          • Dovecot IMAP and POP3 Server
          • Postfix
          • Exim
          • Rspamd
        • Name
          • Unbound DNS Resolver
          • NSD Authoritative DNS Server
          • BIND DNS Server
        • Networking
          • OpenBGPD
          • rad
          • DHCP on OpenBSD
          • slaacd
        • Web
          • Apache HTTP Server
          • nginx Web Server
          • OpenBSD httpd Web Server
          • relayd Reverse Proxy
        • Logging
          • syslogd
        • Monitoring
          • SNMP
        • Remote Access
          • Audit OpenSSH
          • OpenSSH Server
        • File Synchronization
          • rsync
        • Messaging
          • RabbitMQ Message Broker
        • Time
          • NTP Time Synchronization
      • PF
        • pfctl cheat sheet
        • PF Anchors
        • PF Filter Rules
        • PF Forwarding
        • PF Lists and Macros
        • PF Load Balancing
        • PF Logging
        • PF NAT
        • PF Options
        • PF Policies
        • PF Shortcuts
        • PF Tables
      • Advanced Networking
        • High Availability and State Replication
        • Multi-WAN and Policy-Based Routing
        • VPN and Cryptographic Tunneling
        • Classic and Lightweight Tunnels
        • IPv6 at Scale
        • QoS and Traffic Shaping
        • MPLS and Label Distribution
        • Network Services at Scale
        • Virtualization and Host Networking
        • Large-Scale L2 and L3 Design
        • Telemetry, Logging, and Flow Export
        • Hardening and Operational Safety
        • Reference Architectures
        • Troubleshooting Playbooks
      • Serial Communication
    • Part V. Miscellaneous
      • Virtualization Cheat Sheet
      • OpenBSD Cheatsheet
      • How-to Guides
        • Complete the First 30 Minutes After Installation
        • Check Hardware Compatibility Before Installing
        • Bootstrap Wi-Fi Firmware Without Ethernet
        • Set Up OpenBSD as a Laptop or Workstation
        • Configure Laptop Power Management
        • Run OpenBSD as a Virtual Machine Guest
        • Install OpenBSD on a VPS or Cloud Server
        • Install OpenBSD with Full-Disk Encryption
        • Troubleshoot Web Browsers on OpenBSD
        • Create an Administrator Account with doas and SSH Keys
        • Establish a Conservative Security Baseline
        • Manage OpenBSD with Ansible
        • Recover Access and Reset the Root Password
        • Collect OpenBSD Diagnostic Evidence
        • Configure Secure Remote Access with OpenSSH
        • Set Up WordPress on OpenBSD
        • Build Third-Party Software from Ports
        • Use FIDO Security Keys with OpenSSH
        • Build OpenBSD from Source
        • Configure Wi-Fi Roaming and Wired Failover
        • Dual-Boot OpenBSD on a UEFI System
        • Troubleshoot PF, NAT, and Routing
        • Automate OpenBSD Installation with Autoinstall and PXE
        • Route Multiple VLANs with PF
        • Configure a Road-Warrior WireGuard VPN
        • Troubleshoot Package Installation and Update Failures
        • Route IPv6 Networks without NAT
        • Schedule Recurring Maintenance
        • Plan a Docker Workload Migration to OpenBSD
        • Build a Mail Server with OpenSMTPD, Dovecot, and Rspamd
        • Build a Simple Router and Firewall
        • Monitor an OpenBSD System
        • Back Up and Restore an OpenBSD System
        • Configure softraid RAID1
        • Recover an OpenBSD System That Does Not Boot
        • Install Z shell (zsh)
      • OpenBSD for Linux Users
      • OpenBSD for FreeBSD Users
      • OpenBSD for macOS Users
    • OpenBSD FAQ
    • OpenBSD Architectures
      • OpenBSD Package Search

        security packages — Page 6

        OpenBSD 7.9 release Current snapshot

        All categories

        603 packages · A–Z

        Ports catalogue: amd64.

        Jump to:0–9ABCDEFGHIJKLMNOPQRSTUVWXYZ
        Previous · Page 6 of 7 · Next
        • ruby40-bcrypt-3.1.19

          Ruby binding for the bcrypt() password hashing algorithm

          security/ruby-bcrypt,ruby40
        • ruby40-ed25519-1.3.0

          ruby binding Ed25519 EC public-key signature system

          security/ruby-ed25519,ruby40
        • ruby40-gpgme-2.0.25p0

          Ruby language binding for gpgme

          security/ruby-gpgme,ruby40
        • ruby40-ntlm-0.6.5

          creator/parser for the NTLM authentication

          www/ruby-ntlm,ruby40
        • ruby40-pledge-1.2.0

          ruby wrapper for pledge(2) and unveil(2)

          security/ruby-pledge,ruby40
        • rust-openssl-tests-20260411

          source of the rust-openssl crate for regression testing

          security/rust-openssl-tests
        • rust-ring-0.16.20p9

          ring crate source patched for x-only assembly

          security/rust-ring
        • samba-4.24.1v0

          SMB and CIFS client and server for UNIX

          net/samba
        • samba-docs-4.24.1v0

          additional documentation and examples for Samba

          net/samba,-docs
        • scanlogd-2.2.8p0

          TCP port scan detection tool

          security/scanlogd
        • scanssh-2.1.4

          SSH remote version scanner

          security/scanssh
        • scrypt-1.3.3

          command-line encryption using scrypt key derivation function

          security/scrypt
        • seahorse-47.0.1p1

          GNOME encryption interface

          x11/gnome/seahorse
        • secrets-8.0p4

          GNOME password manager (Keepass)

          x11/gnome/secrets
        • sequoia-sq-1.3.1

          Sequoia-PGP command line tool

          security/sequoia-sq
        • shash-0.2.6p3-static

          generates or checks digests or mac

          security/shash,static
        • shash-0.2.6p3

          generates or checks digests or mac

          security/shash
        • sing-1.1p7

          send ICMP nasty garbage

          net/sing
        • sleuthkit-4.14.0

          forensic toolkit based on TCT

          sysutils/sleuthkit
        • slowhttptest-1.9.0

          test tool for slow HTTP reads/posts

          www/slowhttptest
        • smtpscan-0.5p1

          Remote SMTP Server Detection

          security/smtpscan
        • smurflog-2.1p1

          logs smurf attacks

          security/smurflog
        • sn0int-0.26.1

          semi-automatic OSINT framework and package manager

          security/sn0int
        • snort-2.9.20p6

          highly flexible sniffer/NIDS

          net/snort
        • snort2pf-4.5p7

          block "nasty" hosts with pf(4) based on Snort's rules

          security/snort2pf
        • softhsm2-2.6.1p1

          software PKCS#11 cryptographic token

          security/softhsm2
        • sops-3.7.3p0

          tool for managing secrets

          security/sops
        • spiped-1.6.4

          utility for creating secure pipes between socket addresses

          security/spiped
        • sqlmap-1.8.11p0

          penetration testing tool to detect/exploit SQL injection

          security/sqlmap
        • squealer-1.2.12

          filesystem secrets scanner

          security/squealer
        • ssdeep-2.14.1p0

          fuzzy hashing program and library

          security/ssdeep
        • ssh-askpass-fullscreen-1.3

          good-looking ssh-agent pass-phrase dialog

          security/ssh-askpass-fullscreen
        • ssh-audit-3.3.0p1

          ssh configuration security auditing tool

          security/ssh-audit
        • ssh-ldap-helper-8.0p1

          fetch ssh AuthorizedKeys from LDAP

          security/ssh-ldap-helper
        • sshguard-2.5.1

          protect against brute force attacks on sshd and others

          security/sshguard
        • sshlockout-0.20190130p0

          protect against brute force attacks on sshd(8)

          security/sshlockout
        • sshuttle-1.3.2p0

          VPN over an SSH tunnel

          net/sshuttle
        • sslh-1.22cp2

          SSL/SSH multiplexer

          net/sslh
        • sslscan-2.2.2p0

          SSL/TLS scanner (identify version, ciphers, etc)

          security/sslscan
        • sslsniffer-1.21p1

          SSLv3/TLS and SSLv2 sniffer

          net/sslsniffer
        • sslsplit-0.5.5p5

          transparent and scalable SSL/TLS interception

          security/sslsplit
        • ssss-0.5p2

          split secrets using Shamir's Secret Sharing Scheme

          security/ssss
        • stegdetect-0.6pl20181031

          steganography detection tool (unmaintained)

          security/stegdetect
        • steghide-0.5.1p11

          software able to hide data in various kind of files

          security/steghide
        • stegseek-0.6v0

          lightning fast steghide cracker

          security/stegseek
        • step-ca-0.30.1

          private certificate authority and ACME server

          security/step-ca
        • step-cli-0.30.1

          swiss army knife for working with X509, OAuth, JWT, OATH OTP

          security/step-cli
        • strobe-1.06p0

          fast scatter/gather TCP port scanner

          security/strobe
        • strongswan-5.9.1p0

          IPsec-based VPN software (IKEv1/IKEv2) with XAUTH and EAP

          net/strongswan
        • stunnel-5.64p2

          SSL encryption wrapper for standard network daemons

          security/stunnel
        • sudo-1.9.17.2p1-gettext-ldap

          execute a command as another user

          security/sudo,gettext,ldap
        • sudo-1.9.17.2p1-gettext

          execute a command as another user

          security/sudo,gettext
        • sudo-1.9.17.2p1

          execute a command as another user

          security/sudo
        • sudo-python-1.9.17.2p1-gettext-ldap

          sudo Python plugin

          security/sudo,gettext,ldap,-python
        • sudo-python-1.9.17.2p1-gettext

          sudo Python plugin

          security/sudo,gettext,-python
        • sudo-python-1.9.17.2p1

          sudo Python plugin

          security/sudo,-python
        • suricata-7.0.7p0

          high performance network IDS, IPS and security monitoring

          security/suricata
        • swatch-3.2.3p2

          simple log monitoring program

          security/swatch
        • tacacs+-4.0.4.28p4v0

          TACACS+ AAA service, often used with network equipment

          net/tacacs+
        • tclgpg-20160615p0

          Tcl interface to GNU Privacy Guard

          security/tclgpg
        • tcltls-1.7.22

          OpenSSL Tcl extension

          security/tcltls
        • tcpdpriv-1.1.10p2

          removes sensitive information from a tcpdump -w file

          net/tcpdpriv
        • tcpshow-1.74p0

          decode tcpdump(1) output

          net/tcpshow
        • tfsec-1.28.14

          static analyzer for Terraform

          security/tfsec
        • theharvester-3.0.6p8

          information gathering suite

          security/theharvester
        • tinc-1.1pre18p0v0

          Virtual Private Network (VPN) daemon

          net/tinc
        • tinyssh-0.0.20250501p0

          minimal SSH server implementation, run from inetd

          security/tinyssh
        • towitoko-2.0.7p3

          library and utilities for towitoko card readers

          security/towitoko
        • tshark-4.6.4

          network protocol analyzer

          net/wireshark,-text
        • uacme-1.8.1

          lightweight C ACMEv2 client, uses external authenticators

          security/uacme
        • vault-1.21.4

          secure secret storage

          security/vault
        • vaultwarden-1.35.7-postgresql

          unofficial bitwarden compatible server

          security/vaultwarden,postgresql
        • vaultwarden-1.35.7-mysql

          unofficial bitwarden compatible server

          security/vaultwarden,mysql
        • vaultwarden-1.35.7

          unofficial bitwarden compatible server

          security/vaultwarden
        • veracrypt-1.25.9p1

          free open source disk encryption software

          security/veracrypt
        • volatility3-2.27.0

          volatile memory extraction framework

          security/volatility3
        • wapiti-3.2.8

          web-application vulnerability scanner

          security/wapiti
        • web-eid-chrome-2.8.0

          Chromium extension

          security/web-eid-app,-chrome
        • web-eid-firefox-2.8.0

          Firefox extension

          security/web-eid-app,-firefox
        • web-eid-native-2.8.0

          native messaging host for Web eID browser extension

          security/web-eid-app
        • wesng-1.0.3

          Windows Exploit Suggester - Next Generation

          security/wesng
        • wfuzz-3.1.0p7

          web fuzzer

          security/wfuzz
        • wireguard-tools-1.0.20210914p3v0

          tools for use with WireGuard VPN

          net/wireguard-tools
        • wireshark-4.6.4

          graphical network protocol analyzer, Qt user-interface

          net/wireshark
        • wpa_supplicant-2.9p7-openssl

          IEEE 802.1X supplicant

          security/wpa_supplicant,openssl
        • wpa_supplicant-2.9p7

          IEEE 802.1X supplicant

          security/wpa_supplicant
        • wpscan-3.8.28p0

          WordPress security scanner

          security/wpscan
        • wycheproof-20260321

          test vectors from C2SP's Project Wycheproof

          security/wycheproof
        • xca-2.9.0

          create and manage certificates, CSRs, keys, etc

          security/xca
        • xmlsec-1.3.9

          XML security library

          security/xmlsec
        • xmlsec-docs-1.3.9

          XML security library documentation

          security/xmlsec,-docs
        • yara-4.5.5

          pattern matching swiss knife

          security/yara/main
        • yersinia-0.8.2p0

          framework for analysis of layer 2 network protocols

          net/yersinia
        • ykclient-2.15p7

          C library to validate an Yubikey OTP against API servers

          security/yubico/yubico-c-client
        • ykpers-1.20.0p3

          library and tools to program YubiKeys

          security/yubico/yubikey-personalization
        • yubico-piv-tool-2.7.1

          Yubico Personal Identity Verification (PIV) Tool

          security/yubico/yubico-piv-tool
        • yubikey-manager-5.8.0

          library and CLI tool (ykman) for configuring a YubiKey

          security/yubico/yubikey-manager
        • yubikey-personalization-gui-3.1.25p3

          Qt GUI to configure YubiKeys

          security/yubico/yubikey-personalization-gui
        • yubikeyedup-0.20201226p8

          standalone Yubikey validation server

          security/yubiserve
        • zaproxy-2.17.0

          web application security tool

          security/zaproxy
        Previous · Page 6 of 7 · Next
        Report a bug