Atumos
Reproducible security research environment
A reproducible NixOS-based security research environment for vulnerability discovery, reverse engineering, fuzzing, and low-level systems research.
Designed for controlled experimentation.
Atumos uses NixOS to describe the research environment as code. Toolchains, dependencies, and utilities can be rebuilt from a known configuration instead of relying on an undocumented workstation.
What is inside.
- Pinned research environment
- Debugging and tracing tools
- Fuzzing toolchains
- Reverse-engineering workflow
Make the boundary visible.
Redoubt projects document their important boundaries so the system can be inspected before it is trusted.
Inspect the flow.
Atumos uses NixOS to describe the research environment as code. Toolchains, dependencies, and utilities can be rebuilt from a known configuration instead of relying on an undocumented workstation.
From setup to repeatable result.
A documented workflow makes an experiment easier to reset, compare, and reproduce.
| STEP | ACTION |
|---|---|
| 01 | Pin the environment inputs |
| 02 | Build the research shell or host |
| 03 | Prepare a target and instrumentation |
| 04 | Run fuzzing, tracing, or reverse engineering |
| 05 | Record findings and rebuild the environment |
Boundaries before convenience.
These are design constraints, not claims of absolute security.
Only test software you are authorized to analyze.
Keep untrusted samples isolated.
Record versions and hashes for meaningful reproduction.
Prefer disposable targets when executing hostile binaries.
Inspect the repository first.
Clone or obtain the project source, read the documentation, verify inputs, then reproduce the environment in a disposable or appropriately isolated system.
$ git clone <project-source> $ cd atumos $ read the documentation $ verify inputs before execution