Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

SystemRescue

Arch-based live system for disk repair, imaging, and data recovery

forensicsbased on Arch Linux

SystemRescue has no official, structured tool listing we can auto-sync (unlike Kali, BlackArch, REMnux, and Tails). The tools below are maintained by hand and may be incomplete or outdated — check the official docs for the current tool set.

Official docs ↗Download ↗

Last verified September 5, 2026

SystemRescue is a general system-repair and rescue distribution — not pentest-focused — but its bundled data-recovery and disk-imaging tooling (TestDisk, PhotoRec, GParted, ddrescue) gives it a legitimate niche in forensic acquisition and incident-response workflows, alongside CAINE and SIFT.

Use it only against systems/media you own or are explicitly authorized to access — see the disclaimer.

Notable bundled toolsmanually maintained

ddrescue

Data recovery and protection tool

gparted

GNOME partition editor

testdisk

Partition scanner and disk recovery tool, and PhotoRec file recovery tool

Getting started

SystemRescue ships as a bootable ISO (also installable to a USB stick) and boots into a lightweight Xfce desktop or a text console. Its own "detailed package list" is a flat, alphabetical dump of every Arch package on the image — including ordinary system libraries with no security relevance and no per-package description or link — so it isn't a source this site can sync from; the notable tools above were cross-checked by hand instead. The official manual covers boot options, network configuration, and its bundled disk/partition/data- recovery toolset.