akhanda-os-everything-amd64.iso
Full image with every domain metapackage installed. ~6 GB. Use for general assessment work.
v0.1 releases ship amd64 only. Pick the format that matches your workflow. Add the apt repo to an existing Debian or Kali install for the lightest footprint.
Boot from USB, or run in a VM. Persistence opt-in.
Full image with every domain metapackage installed. ~6 GB. Use for general assessment work.
IoT + RF + Core only. ~2.5 GB. Faster to boot, lighter on USB drives, perfect for field BLE / Wi-Fi / SDR work.
For lab use. Boots straight into the desktop, no installer step.
QEMU / KVM / Proxmox. 40 GiB sparse disk. Default user akhanda / akhanda.
VMware Workstation, VirtualBox, ESXi. Same disk image wrapped in an OVF descriptor.
Run akhanda-os tools on your current Debian 12+ or Kali rolling install.
$ # trust the akhanda-os release key $ sudo curl -fsSL https://akhanda-os.github.io/akhanda-os/akhanda-archive-keyring.asc \ | sudo gpg --dearmor -o /usr/share/keyrings/akhanda-archive-keyring.gpg $ # add the repo $ echo "deb [signed-by=/usr/share/keyrings/akhanda-archive-keyring.gpg] \ https://akhanda-os.github.io/akhanda-os akhanda-rolling main contrib non-free" \ | sudo tee /etc/apt/sources.list.d/akhanda.list $ # install any subset you need $ sudo apt update $ sudo apt install akhanda-iot # Wi-Fi, BLE, MQTT, ... $ sudo apt install akhanda-automotive # CAN, UDS, OBD-II, ICSim $ sudo apt install akhanda-ics # Modbus, S7, BACnet, OPC-UA $ sudo apt install akhanda-medical # DICOM, HL7, FHIR $ sudo apt install akhanda-embedded # JTAG, SPI, MCU flashing $ sudo apt install akhanda-rf # GNU Radio, HackRF, URH $ sudo apt install akhanda-firmware # binwalk, unblob, ghidra, AFL++ $ sudo apt install akhanda-forensics # sleuthkit, volatility3, plaso $ # or the kitchen-sink option $ sudo apt install akhanda-everything
Every release is signed. Always verify before booting unknown ISOs.
$ # fetch the release signing key and checksum bundle $ curl -LO https://github.com/akhanda-os/akhanda-os/releases/latest/download/SHA256SUMS $ curl -LO https://github.com/akhanda-os/akhanda-os/releases/latest/download/SHA256SUMS.asc $ curl -LO https://akhanda-os.github.io/akhanda-os/akhanda-archive-keyring.asc $ gpg --import akhanda-archive-keyring.asc $ gpg --verify SHA256SUMS.asc SHA256SUMS $ sha256sum -c SHA256SUMS --ignore-missing akhanda-os-everything-amd64.iso: OK
x86_64 with virtualization extensions (VT-x / AMD-V) recommended for QEMU rehosting.
4 GiB minimum. 8 GiB for Ghidra, angr, AFL++ workloads.
16 GiB for live + persistence. 40 GiB for the VM appliance.
USB 3 ports for SDR (HackRF, Airspy), USB 2 fine for JTAG / UART / CAN dongles.
Not required. Discrete GPU only helps if you run hashcat or train ML models on captures.
Lab-isolated mode is on by default. Outbound restricted to apt + DNS until you flip it.
akhanda-os ships tools that can disrupt CAN buses, PLCs, medical devices, RF systems, and more. Run them only on hardware you own, or under a written authorization signed by the owner. ICS and medical devices in particular are often regulated; in many jurisdictions unauthorized testing is a criminal offence. The project, the maintainers, and the contributors accept no liability for misuse.