SecArsenal
A searchable reference for penetration-testing operating systems and tools: what they are, what they're for, and where to get the real thing from the official source.
Top categories
Most-represented categories across the tools collection.What do these icons mean?
Operating Systems (52)
AndroL4b
Ubuntu MATE-based VM for Android app assessment, reverse engineering, and malware analysis
ArchStrike
Arch Linux-based distribution for penetration testing and security research
Athena OS
Arch/NixOS-based distribution built on BlackArch's package repositories
BackBox
Ubuntu-based distribution for penetration testing and security assessment
Berserk Arch
Rolling-release Arch-based distro for security researchers and developers
BlackArch
Arch Linux-based distribution with one of the largest pentest tool repositories
CAINE
Ubuntu-based digital forensics live distribution
CAPEv2
Automated malware sandbox for dynamic analysis and config/payload extraction
CommandoVM
PowerShell-provisioned Windows red-team toolkit
CSI Linux
Ubuntu-based platform for OSINT, digital forensics, and incident response
Cuckoo3
CERT-EE's Python 3 rewrite of Cuckoo Sandbox for automated malware analysis
Demon Linux
Debian-based distribution focused on web and cloud penetration testing
DragonOS
Debian/Ubuntu-based platform for software-defined radio (SDR) and RF work
DShield Sensor
SANS Internet Storm Center's honeypot sensor for contributing threat data, with an ELK dashboard
Exegol
Community-driven Docker hacking environment with 100+ pre-installed offensive tools
FACT
Fraunhofer FKIE's firmware analysis and comparison platform for routers, IoT, and UEFI images
Fedora Security Lab
Fedora spin for security auditing, forensics, and teaching security testing
FLARE VM
Windows-based reverse-engineering and malware-analysis distribution
Frieren
Open-source WiFi Pineapple-style framework for routers and single-board computers
HackerOS (Cybersecurity Edition)
Polish Debian-based distro with a dedicated red-team-focused Cybersecurity Edition
Kali Linux
Debian-based distribution built for penetration testing and security auditing
Kali NetHunter
Kali Linux's penetration testing platform for Android devices
Kali Purple
Kali Linux's defensive/purple-team security operations platform
Linux Kodachi
Debian-based privacy and anonymity platform
Malcolm
CISA/Idaho National Laboratory network traffic analysis tool suite
MISP
Open-source threat intelligence and sharing platform, with an official test VM
Mobexler
Linux Lite-based VM for combined Android and iOS application penetration testing
NetHydra
Debian-based pentest distro running a real-time (PREEMPT_RT) kernel by default
NST
Fedora-based network security monitoring and analysis toolkit
Open Secure-K OS
Debian-based encrypted live-USB OS for secure communication and anonymous browsing
PALADIN
SUMURI's forensic disk-imaging and write-blocking live distribution
Parrot Security OS
Debian-based distribution for pentesting, digital forensics, and privacy
Pentoo
Gentoo-based live distribution for penetration testing
Predator-OS
Debian-based distro bundling around 1,200 tools across offense, defense, and privacy
Pwnagotchi
Raspberry Pi companion that automates WPA/WPA2 handshake capture via bettercap
Qubes OS
Security-by-compartmentalization OS built on the Xen hypervisor
REMnux
Ubuntu-based toolkit for reverse-engineering and analyzing malicious software
SamuraiWTF
OWASP-maintained web-app pentest training environment
SecBSD
OpenBSD-based distribution for penetration testing and ethical hacking
Security Onion
Ubuntu-based network security monitoring and threat hunting platform
SIFT
SANS forensic workstation for digital forensics and incident response
SigintOS
Ubuntu-based distro for SDR-driven signals intelligence operations
SystemRescue
Arch-based live system for disk repair, imaging, and data recovery
T-Pot
All-in-one multi-honeypot platform with 20+ honeypots and Elastic Stack visualization
Tails
Amnesic live OS focused on privacy and anonymity, routing all traffic through Tor
TheHive
Incident-response case management platform with an official demo VM
Trace Labs OSINT VM
Debian-based virtual machine purpose-built for OSINT investigations
Tsurugi Linux
Ubuntu-based distribution for digital forensics, OSINT, and malware analysis
Wazuh
Open-source SIEM/XDR platform distributed as an official VM appliance
Whonix
Debian-based anonymity platform routing traffic through Tor
Wifislax
Slackware-based distribution focused on wireless network auditing
WinFE
Windows Forensic Environment — a forensically sound Windows PE boot environment
Browse all operating systems →
Tools (4958)
Synced from Kali's, BlackArch's, REMnux's, and Tails' own official tool lists. A few well-known examples:
nmap
The Network Mapper
metasploit-framework
Framework for exploit development and vulnerability research
wireshark
Network traffic analyzer - graphical interface
burpsuite
Platform for security testing of web applications
hashcat
World’s fastest and most advanced password recovery utility
aircrack-ng
Wireless WEP/WPA cracking utilities