plutonium --what-is-this

The address bar
is a research tool

!cve log4shell lands on the NVD entry. Not a page of results about it. Sixteen shortcuts, an encrypted vault, Tor-style hardening.

Windows and Linux · MIT · no telemetry

plutonium --demo
NVD — CVE-2021-44228
New tab
Bang shortcuts
resolves as bang shortcut
goes to NVD
nvd.nist.gov/vuln/search/results?query=log4shell
16 built in. Add your own with a URL template.
Security level
StandardSaferSafest
javascript off · media blocked · remote fonts blocked
camera, mic, location denied
Modelled on Tor Browser. Higher levels break more sites — that's the trade.
Content blocking
0
requests dropped on this page
doubleclick.net · google-analytics.com · scorecardresearch.com
adnxs.com · criteo.com · hotjar.com · demdex.net · adsrvr.org
84 built-in rules. Dropped before the connection opens.
Vault
master password
state LOCKED
scrypt N=32768 r=8 · AES-256-GCM · fresh nonce per write
The key stays in the main process and never crosses IPC.
plutonium --resolve

Try the address bar

Type anything. Nothing navigates — it just shows where it would go.

omniboxlive
cat features.md

What's in it

Bang shortcuts

!cve !edb !shodan !crt !gtfo !att and ten more. Straight to the source.

Encrypted vault

scrypt plus AES-256-GCM. Auto-lock, clipboard that clears itself, generator with live entropy.

Security levels

Standard, Safer, Safest. The top one turns JavaScript off entirely.

Content blocking

84 host rules by default, plus yours. Applies in private windows too.

Docked DevTools

Full Chromium inspector, bottom or right. Not a floating window.

Private windows

In-memory session. Nothing recorded, protections still on.

apt install ./plutonium.deb

Two commands on Kali

A .deb for Debian, Ubuntu and Kali. An AppImage for everything else. An installer for Windows.

kali@kali~/Downloads
# debian · ubuntu · kali
$ sudo apt install ./plutonium.deb
$ plutonium

# anywhere else
$ chmod +x plutonium.AppImage
$ ./plutonium.AppImage

Get it

Version 1.0.0. Free, MIT, no account, no telemetry.

PLUTONIUM v1.0.0 win/linux mit detecting