All-in-One Debian-Based Cybersecurity Distribution
|
All security tools - Offensive + Defensive + Forensics + XFCE Desktop
|
Red Team tools - Pentesting & Ethical Hacking + XFCE Desktop
|
|
Core security tools - CLI focused, lightweight
|
Blue Team tools - SIEM, IDS & Monitoring + XFCE Desktop
|
|
Digital Forensics & IR - Autopsy, Sleuthkit, Binwalk + XFCE Desktop
|
|
Alphha Security OS is a comprehensive cybersecurity distribution built on Debian Bookworm, combining offensive and defensive security tools in a single, powerful platform.
Designed for:
- 🔴 Red Team - Penetration testers & ethical hackers
- 🔵 Blue Team - Security analysts & incident responders
- 🟣 Purple Team - Security researchers & educators
- 🔬 Forensics - Digital forensics investigators
|
|
|
|
# Download the Full Edition ISO (recommended)
wget https://github.com/shibinsp/alphha-security-os/releases/download/v1.0.0/alphha-security-1.0.0-full-amd64.iso
# Or download Minimal Edition (CLI only)
# wget https://github.com/shibinsp/alphha-security-os/releases/download/v1.0.0/alphha-security-1.0.0-minimal-amd64.iso
# Write to USB (replace /dev/sdX with your USB device)
sudo dd if=alphha-security-1.0.0-full-amd64.iso of=/dev/sdX bs=4M status=progress
sync| User | Password | Access |
|---|---|---|
sentinel |
alphha |
sudo enabled |
root |
alphha |
full access |
⚠️ Change passwords immediately after installation!
alphha-menu # Interactive security tools launcher
alphha-update --all # Update system and all tools| Tool | Description | Usage |
|---|---|---|
alphha-menu |
Interactive security tools launcher | alphha-menu |
alphha-recon |
Automated reconnaissance workflow | alphha-recon target.com -a -w |
alphha-vuln |
Vulnerability assessment wrapper | alphha-vuln 192.168.1.1 -t full |
alphha-report |
Professional report generator | alphha-report -i ./scan -f html |
alphha-backup |
Forensic evidence collection | alphha-backup /dev/sda -c CASE001 |
alphha-clean |
Secure cleanup utility | alphha-clean --all --secure |
alphha-update |
System & tools updater | alphha-update --all |
| Edition | Description | Size | Tools | Status |
|---|---|---|---|---|
| Full | All security tools (offensive + defensive + XFCE) | 1.6 GB | 100+ | ✅ Available |
| Offensive | Penetration testing focused + XFCE | 1.58 GB | 80+ | ✅ Available |
| Defensive | Blue team & SIEM tools + XFCE | 1.28 GB | 60+ | ✅ Available |
| Forensics | Digital forensics & IR + XFCE | 1.24 GB | 50+ | ✅ Available |
| Minimal | CLI only, core tools | 951 MB | 50+ | ✅ Available |
# Debian/Ubuntu
sudo apt install -y debootstrap xorriso squashfs-tools grub-pc-bin \
grub-efi-amd64-bin mtools dosfstools isolinux syslinux-common# Clone repository
git clone https://github.com/shibinsp/alphha-security-os.git
cd alphha-security-os
# Build minimal edition
sudo ./build-alphha-security.sh --variant minimal
# Build full edition
sudo ./build-alphha-security.sh --variant full
# Build VM image
sudo ./build-alphha-security-vm.sh --size 20| Component | Minimum | Recommended |
|---|---|---|
| CPU | x86_64 (SSE4.2) | Quad-core 2.0 GHz+ |
| RAM | 2 GB | 4 GB+ |
| Storage | 20 GB | 40 GB+ |
| Display | 1024×768 | 1920×1080 |
01 - Information Gathering
nmap masscan netdiscover arp-scan dnsrecon dnsenum theharvester recon-ng amass enum4linux
02 - Vulnerability Analysis
nikto wpscan sqlmap nuclei testssl.sh sslscan lynis
03 - Web Application Testing
burpsuite zaproxy ffuf gobuster dirb wfuzz whatweb wafw00f
04 - Password Attacks
hashcat john hydra medusa cewl crunch wordlists
05 - Wireless Attacks
aircrack-ng wifite reaver kismet hcxtools
06 - Exploitation
metasploit-framework exploitdb searchsploit crackmapexec
07 - Post-Exploitation
chisel pwncat evil-winrm impacket-scripts bloodhound
08 - Forensics
autopsy sleuthkit volatility3 foremost scalpel binwalk photorec
09 - Reverse Engineering
ghidra radare2 gdb pwndbg ltrace strace checksec
10 - Network Analysis
wireshark tshark tcpdump ettercap bettercap mitmproxy responder
11 - Defensive Security
snort suricata zeek fail2ban rkhunter chkrootkit clamav aide auditd
12 - Anonymity & Privacy
tor torsocks proxychains4 macchanger bleachbit
Alphha Security OS comes hardened by default:
| Category | Features |
|---|---|
| Kernel | ASLR, ptrace restrictions, BPF JIT hardening, dmesg restrict |
| Network | SYN cookies, anti-spoofing, ICMP restrictions, nftables firewall |
| SSH | Key-based auth, strong ciphers, rate limiting, root login disabled |
| Access | AppArmor profiles, sudo restrictions, audit logging |
- Full edition ISO release
- Minimal edition ISO release
- Offensive edition ISO release
- Defensive edition ISO release
- Forensics edition ISO release
- ARM64 support (Raspberry Pi)
- Cloud images (AWS, GCP, Azure)
- Docker container
- Live persistence support
- GUI installer
Contributions are welcome! Please read our contributing guidelines.
# Fork and clone
git clone https://github.com/YOUR_USERNAME/alphha-security-os.git
# Create branch
git checkout -b feature/amazing-feature
# Commit and push
git commit -m "Add amazing feature"
git push origin feature/amazing-feature
# Open Pull RequestAlphha Security OS is intended for authorized security testing, educational purposes, and defensive security only.
- Always obtain proper authorization before testing
- The developers are not responsible for misuse
- Use responsibly and ethically
This project is licensed under the BSD 3-Clause License.
Copyright (c) 2026 Alphha Team
All Rights Reserved.
See LICENSE for details.
Built on the shoulders of giants:
See CREDITS for full acknowledgments.
Built with 🔒 by the Alphha Team
Report Bug • Request Feature • Downloads
Copyright © 2026 Alphha Team. All rights reserved.