Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

SystemRescue

Arch-based live system for disk repair, imaging, and data recovery

forensicsbased on Arch Linux

SystemRescue has no official, structured tool listing we can auto-sync (unlike Kali, BlackArch, REMnux, and Tails). The tools below are maintained by hand and may be incomplete or outdated — check the official docs for the current tool set.

Official docs ↗Download ↗

Last verified September 5, 2026

SystemRescue is a general system-repair and rescue distribution — not pentest-focused — but its bundled data-recovery and disk-imaging tooling (TestDisk, PhotoRec, GParted, ddrescue) gives it a legitimate niche in forensic acquisition and incident-response workflows, alongside CAINE and SIFT.

Use it only against systems/media you own or are explicitly authorized to access — see the disclaimer.

Notable bundled toolsmanually maintained

ddrescue

Data recovery and protection tool

gparted

GNOME partition editor

testdisk

Partition scanner and disk recovery tool

Getting started

SystemRescue ships as a bootable ISO (also installable to a USB stick) and boots into a lightweight Xfce desktop or a text console. Its own "detailed package list" is a flat, alphabetical dump of every Arch package on the image — including ordinary system libraries with no security relevance and no per-package description or link — so it isn't a source this site can sync from; the notable tools above were cross-checked by hand instead. The official manual covers boot options, network configuration, and its bundled disk/partition/data- recovery toolset.