Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Whonix

Debian-based anonymity platform routing traffic through Tor

specializedbased on Debian

Whonix has no official, structured tool listing we can auto-sync (unlike Kali, BlackArch, REMnux, and Tails). The tools below are maintained by hand and may be incomplete or outdated — check the official docs for the current tool set.

Official docs ↗

Last verified September 5, 2026

Whonix is an anonymity-focused platform built around a two-VM architecture that isolates your applications from your real network identity, rather than a general-purpose pentest toolkit.

Use it only against systems you own or are explicitly authorized to test — see the disclaimer.

Notable bundled toolsmanually maintained

tor

Obfuscate your origins by routing traffic through a network of anonymizing nodes.

Getting started

Whonix runs as a pair of Debian-based virtual machines — a Gateway that routes all traffic through Tor, and a Workstation that can only reach the network through that Gateway — so an application compromise on the Workstation can't leak your real IP even if Tor itself is bypassed. It ships as VirtualBox/KVM images plus a Qubes OS template, not a standalone bootable ISO. Its documentation is organized as security guides (browsing, communications, hardening) rather than a tool-by-tool reference.