Everything you need to get started with Almighty Linux.
Almighty Linux is a hybrid Linux distribution based on Debian Testing and Kali Linux, purpose-built for intelligence gathering and OSINT (Open Source Intelligence) operations.
The distribution ships with an extensive collection of 79 security and OSINT tools, including 58 custom-built scripts developed exclusively for Almighty Linux and 32 industry-standard packages from the Kali repositories. It features a hardened kernel tuning profile and a comprehensive suite of anonymity, trace-cleaning, isolation, and security tools to maintain operational security during intelligence operations.
Almighty Linux also includes the Almighty OSINT Browser — a custom Chromium-based browser with integrated OSINT utilities and user-agent spoofing capabilities. The distribution uses MATE as its desktop environment, providing a lightweight and professional workspace for extended investigation sessions.
| Property | Value |
|---|---|
| Name | Almighty Linux |
| Base | Debian Testing / Kali Linux (Hybrid) |
| Desktop Environment | MATE |
| Architecture | x86_64 (amd64) |
| Kernel | Vanilla(Hardened Tuning) |
| Init System | systemd |
| Package Manager | APT (dpkg) |
| Installer | Calamares |
| Default Shell | Bash |
apt upgrade. Pin priorities are configured, but manual
resolution may be needed.Almighty Linux adopts a "Security by Default" philosophy, providing multi-layered protection from the kernel to the application layer.
Critical parameters injected via /etc/default/grub.d/40_hardened.cfg:
init_on_alloc=1 and
init_on_free=1 — memory is zeroed on allocation and deallocation,
preventing use-after-free attacks.
page_alloc.shuffle=1 and
randomize_kstack_offset=on — memory layout is randomized.
mitigations=full — maximum
patches against Spectre, Meltdown, L1TF, MDS, and related CPU vulnerabilities.debugfs=off — kernel debug filesystem
access disabled.rd.shell=0 and
rd.emergency=halt — emergency shell access on boot failure is blocked;
system halts instead.
The /etc/sysctl.d/sysctl.conf file fundamentally modifies kernel runtime
behavior:
kptr_restrict=2 and
dmesg_restrict=1 — kernel addresses and logs hidden from unprivileged
users.
yama.ptrace_scope=3 — process tracing
and code injection completely forbidden (including debugger usage).unprivileged_bpf_disabled=1 and
net.core.bpf_jit_harden=2 — advanced BPF JIT compiler attacks blocked.
rp_filter) enabled, ICMP redirects disabled.Unused or insecure drivers are blocked under /etc/modprobe.d/:
/bin/false.
Almighty Linux enforces the "Least Privilege" principle across the file hierarchy:
027 via
/etc/profile.d/hardening.sh, preventing other users from reading newly
created files.
umask_override).permission-hardening.service
runs on every boot, verifying and correcting permissions on critical files.| File / Directory | Permission | Description |
|---|---|---|
/etc/shadow |
600 | Only root can read password hashes. |
/etc/sudoers |
440 | Prevents unauthorized privilege escalation. |
/root |
700 | Root home directory fully isolated. |
/etc/cron.* |
755 | Prevents scheduled task manipulation. |
The /etc/apt/apt.conf.d/40sandbox configuration runs package download and
installation processes in a restricted sandbox. This ensures that a potential vulnerability
in the package manager cannot compromise the entire system.
Download the latest Almighty Linux ISO from the Download page.
After downloading the ISO, verify its integrity using the provided SHA256 checksum:
sha256sum almighty-linux-1.0-beta-amd64.isoCompare the output with the checksum provided on the download page. If they match, the file is intact and unmodified.
You can write the ISO to a USB drive using any of the following methods:
dd command will erase ALL data on the target
device. Double-check the device path before executing.sudo dd if=almighty-linux-1.0-beta-amd64.iso of=/dev/sdX bs=4M status=progress && syncReplace /dev/sdX with your USB device path (e.g., /dev/sdb). Use
lsblk to identify the correct device.
Almighty Linux uses the Calamares graphical installer for a straightforward installation experience.
All Almighty tools are installed in /usr/local/bin and can be invoked
directly from the terminal.
The tools can also be accessed via the Menu - Almighty OSINT section. The tools are categorized.
sudo update A browser developed from scratch based on Chromium / PyQt6 Web Engine. It features built-in OSINT tools and a wide range of user agents.
Almighty Linux includes a collection of ASCII art terminal splash screens. These can be run as commands to display themed terminal logos:
| Command | Description |
|---|---|
anon |
Anonymity-themed terminal splash logo |
eye |
Eye-figured terminal splash logo |
katana |
Katana-figured terminal splash logo |
raven1 |
Raven-themed terminal splash logo (v1) |
raven2 |
Raven-themed terminal splash logo (v2) |
skull |
Skull-figured terminal splash logo |
skull2 |
Alternative skull-figured terminal splash logo |
wing |
Wing-figured terminal splash logo |
Run any command in the terminal to display the corresponding ASCII art:
$ skull
$ raven1
$ eyeSystem utility commands bundled with Almighty Linux:
| Command | Description |
|---|---|
almighty-panel |
System management panel for Almighty Linux configuration and administration. |
almighty-fetch |
ASCII system information display (neofetch-style) with Almighty branding. |
flatpak-setup |
Flatpak installation and configuration script. |
mullvad-installer |
Mullvad Browser and VPN installation script. |
update |
System update script for upgrading all packages. |
# Run the system panel
$ almighty-panel
# Show system info
$ almighty-fetch
# Update system
$ sudo updateAlmighty Linux is a hybrid structure based on Debian Testing and Kali Linux.
It comes with many custom-developed OSINT tools, advanced OpSec (Operational Security) modules, specially configured browsers, and performance/security-oriented Hardened Kernel tunings.
It refers to systems using the base of two different distributions together. Almighty Linux provides a wide scope for the user by utilizing the stability of Debian and the comprehensive tool library of Kali simultaneously.
No. For security reasons and to minimize maintenance overhead, it does not use its own repository system; it draws directly from Debian and Kali repositories.
The system receives regular updates for security and Kali tools.
The currency of custom Almighty tools is ensured through periodically released 'Major Update' ISOs. This is a deliberate decision taken to preserve system stability.
MATE. It offers a fast, high-performance, and visually optimized experience.
Probably not. The distribution requires basic/intermediate level Linux and cybersecurity knowledge.
Potential conflicts or breakages due to the Testing base and hybrid structure may occur.
Furthermore, most tools are not graphical user interface (GUI) based; they rely on traditional terminal/parameter usage.
The name is derived from "The Almighty" ability possessed by the legendary character Yhwach from the Bleach anime. Yhwach's ability allows seeing all future possibilities. As an OSINT distribution, Almighty Linux has been developed with the philosophy of making all scattered data and hidden connections on the internet "visible."
Yes, conditions:
This distribution is under the management of Nixovena Labs. For questions, bug reports, or collaborations: nixovena.org/contact
The first version was built in early 2025. It originated as a personal project based on Debian/Parrot but was shelved for a period. When rediscovered in the archives, the core structure was found too powerful to be wasted; the base was updated with Kali and the decision was made to open it to the community.
Found a bug or unexpected behavior? Please report it through our contact portal:
When reporting, please include:
uname -a)