[ + ] akhanda-os v0.1.0-alpha · amd64 · ready

Akhanda

the whole connected world

EMBEDDED / HACKING / OS

for the wires, the radios, the silicon

Firmware Hardware Bluetooth Wi-Fi NFC / RFID RF / SDR Automotive ICS / SCADA Network Android Medical Forensics Cloud / Container Drone / UAV Web / App AI / LLM iOS / Apple VoIP / Telecom Supply Chain

$ download iso $ list tools $ source

// why akhanda

Built for the connected, embedded, and cyber-physical world. Not a general-purpose pentest distro.

niche

Hardware and protocols, not webapps

CAN bus, Modbus, S7, DICOM, BLE, Zigbee, JTAG, SPI flash, RF capture. Tools and udev rules preconfigured so probes work the second you plug them in.

safe by default

Lab-isolated networking

Default firewall blocks egress to anything that isn't apt or DNS. ICS protocols allowed only on a designated lab interface. Switch to open mode requires an explicit flag, and is logged.

debian-native

No bespoke build system

Pure Debian live-build plus a signed apt repo. Custom metapackages for nine domains, ~60 tools packaged by us, the rest pulled from upstream archives.

layered

Install only what you need

Nine domain metapackages. Pick the ones that match your work: apt install akhanda-iot akhanda-rf. Or get everything with akhanda-everything.

// domains

Domain-specific metapackages, install only what you need.

akhanda-iot

IoT

Wi-Fi (WPA/WPA2/WPA3, WPS), BLE, Zigbee, Thread, MQTT, CoAP, mDNS, Matter. Consumer and prosumer connected devices.

akhanda-automotive

Automotive

SocketCAN, ISO-TP, UDS, DoIP, OBD-II, caringcaribou, ICSim. vcan0 brought up automatically at boot.

akhanda-ics

ICS / SCADA

Modbus, Siemens S7, EtherNet/IP, DNP3, BACnet, OPC-UA. Includes conpot for safe lab targets.

akhanda-medical

Medical

DICOM (DCMTK, pynetdicom), HL7 v2, FHIR R4/R5, BLE medical profiles for glucometers, pulse ox, infusion pumps.

akhanda-embedded

Embedded

JTAG, SWD, UART, SPI, I2C, MCU flashing (AVR, STM32, ESP), logic analysis, cross-compile toolchains.

akhanda-rf

RF / SDR

GNU Radio, HackRF, RTL-SDR, Airspy, URH, rtl_433, multimon-ng. Reverse-engineer wireless protocols visually.

akhanda-firmware

Firmware

binwalk + unblob extraction, radare2 / Ghidra static analysis, frida + QEMU rehosting, AFL++ / honggfuzz fuzzing.

akhanda-forensics

Forensics

Sleuth Kit, Volatility 3, Plaso, EnCase image support. Tailored for embedded artifacts (SquashFS, JFFS2, UBIFS).

akhanda-core

Core

Required base. Shells, editors, networking, build toolchain, Wireshark, nmap, scapy. Always installed.

// principles

What you can count on from every release.

no fluff

Only tools that get used in the field

Curated, not exhaustive. Every package in a metapackage has a real use case for IoT, automotive, ICS, medical, embedded, RF, or firmware work. Nothing shipped just to inflate the count.

no surprises

Signed apt repo, reproducible where Debian is

Every .deb is signed by an offline release key. SHA256 + SHA512 + detached PGP for every ISO. SBOM published per release. We track upstream CVEs against shipped versions.

no defaults that bite

Lab-isolated networking on first boot

nftables blocks every outbound port except DNS and apt. ICS ports are allowed only on a designated lab interface. Switching to open mode is one command, logged, and intentional.

no closed source

Pure OSS in the base image

Every tool inside the metapackages ships under an OSI-approved license. Closed-source vendor tools (IDA, Codenomicon, vendor IDEs) get install scripts, not silent bundling.

// at a glance

524⁺

tools shipped

tool domains

menu categories

amd64

v0.x architecture

GPL-3

license

debian

base + live-build

// install

Add the apt repo on Debian / Kali, or download the full ISO.

$ sudo curl -fsSL https://akhanda-os.github.io/akhanda-os/akhanda-archive-keyring.asc \
    | sudo gpg --dearmor -o /usr/share/keyrings/akhanda-archive-keyring.gpg

$ echo "deb [signed-by=/usr/share/keyrings/akhanda-archive-keyring.gpg] \
    https://akhanda-os.github.io/akhanda-os akhanda-rolling main contrib non-free" \
    | sudo tee /etc/apt/sources.list.d/akhanda.list

$ sudo apt update
$ sudo apt install akhanda-iot akhanda-rf      # or akhanda-everything

$ download.iso $ browse 524+ tools

// the name

Akhanda · from Sanskrit · meaning indivisible, whole, unbroken.

Akhanda English

अखण्ड Sanskrit

अखंड Hindi

अखंड Marathi

अखण्ड Nepali

अखंड Konkani

অখণ্ড Bengali

অখণ্ড Assamese

અખંડ Gujarati

ਅਖੰਡ Punjabi

அகண்ட Tamil

అఖండ Telugu

ಅಖಂಡ Kannada

അഖണ്ഡ Malayalam

ଅଖଣ୍ଡ Odia

اَکَنڈ Urdu

اَکَنڈ Kashmiri