$ akhanda-os --download

// download

v0.1 releases ship amd64 only. Pick the format that matches your workflow. Add the apt repo to an existing Debian or Kali install for the lightest footprint.

// option 1 - live iso

Boot from USB, or run in a VM. Persistence opt-in.

recommended

akhanda-os-everything-amd64.iso

Full image with every domain metapackage installed. ~6 GB. Use for general assessment work.

$ get latest release

slim

akhanda-os-iot-edition-amd64.iso

IoT + RF + Core only. ~2.5 GB. Faster to boot, lighter on USB drives, perfect for field BLE / Wi-Fi / SDR work.

$ get latest release

// option 2 - vm appliances

For lab use. Boots straight into the desktop, no installer step.

akhanda-os.qcow2

QEMU / KVM / Proxmox. 40 GiB sparse disk. Default user akhanda / akhanda.

akhanda-os.ova

VMware Workstation, VirtualBox, ESXi. Same disk image wrapped in an OVF descriptor.

// option 3 - apt repo on existing host

Run akhanda-os tools on your current Debian 12+ or Kali rolling install.

$ # trust the akhanda-os release key
$ sudo curl -fsSL https://akhanda-os.github.io/akhanda-os/akhanda-archive-keyring.asc \
    | sudo gpg --dearmor -o /usr/share/keyrings/akhanda-archive-keyring.gpg

$ # add the repo
$ echo "deb [signed-by=/usr/share/keyrings/akhanda-archive-keyring.gpg] \
    https://akhanda-os.github.io/akhanda-os akhanda-rolling main contrib non-free" \
    | sudo tee /etc/apt/sources.list.d/akhanda.list

$ # install any subset you need
$ sudo apt update
$ sudo apt install akhanda-iot          # Wi-Fi, BLE, MQTT, ...
$ sudo apt install akhanda-automotive   # CAN, UDS, OBD-II, ICSim
$ sudo apt install akhanda-ics          # Modbus, S7, BACnet, OPC-UA
$ sudo apt install akhanda-medical      # DICOM, HL7, FHIR
$ sudo apt install akhanda-embedded     # JTAG, SPI, MCU flashing
$ sudo apt install akhanda-rf           # GNU Radio, HackRF, URH
$ sudo apt install akhanda-firmware     # binwalk, unblob, ghidra, AFL++
$ sudo apt install akhanda-forensics    # sleuthkit, volatility3, plaso

$ # or the kitchen-sink option
$ sudo apt install akhanda-everything

// verify your download

Every release is signed. Always verify before booting unknown ISOs.

$ # fetch the release signing key and checksum bundle
$ curl -LO https://github.com/akhanda-os/akhanda-os/releases/latest/download/SHA256SUMS
$ curl -LO https://github.com/akhanda-os/akhanda-os/releases/latest/download/SHA256SUMS.asc
$ curl -LO https://akhanda-os.github.io/akhanda-os/akhanda-archive-keyring.asc
$ gpg --import akhanda-archive-keyring.asc
$ gpg --verify SHA256SUMS.asc SHA256SUMS
$ sha256sum -c SHA256SUMS --ignore-missing
akhanda-os-everything-amd64.iso: OK

// minimum requirements

CPU

x86_64 with virtualization extensions (VT-x / AMD-V) recommended for QEMU rehosting.

RAM

4 GiB minimum. 8 GiB for Ghidra, angr, AFL++ workloads.

Disk

16 GiB for live + persistence. 40 GiB for the VM appliance.

USB

USB 3 ports for SDR (HackRF, Airspy), USB 2 fine for JTAG / UART / CAN dongles.

GPU

Not required. Discrete GPU only helps if you run hashcat or train ML models on captures.

Network

Lab-isolated mode is on by default. Outbound restricted to apt + DNS until you flip it.

// legal

akhanda-os ships tools that can disrupt CAN buses, PLCs, medical devices, RF systems, and more. Run them only on hardware you own, or under a written authorization signed by the owner. ICS and medical devices in particular are often regulated; in many jurisdictions unauthorized testing is a criminal offence. The project, the maintainers, and the contributors accept no liability for misuse.