Think like an attacker.
Map a lab network, inspect protocols, test applications, and audit credentials within an agreed scope.
Features
Practice security testing, investigate what happened, and learn how Linux works. Nulx is built on Debian 13 and KDE Plasma 6. The first public beta is still in development.
Map a lab network, inspect protocols, test applications, and audit credentials within an agreed scope.
Analyze evidence, audit systems, inspect network activity, and practice responding to security incidents.
Explore Nulx
Tools for reconnaissance, network analysis, web testing, wireless assessment, and password auditing on systems you are authorized to test.
Tools for traffic inspection, host auditing, file integrity monitoring, digital forensics, and incident response.
Keep projects apart with virtual desktops. Find your apps in one top panel and work in Nulx Terminal. A quiet appearance and optional color accents let you make the workspace your own.
Search 64 catalog tools by name or task in Nulx Launcher. All are installed and startup-tested in development. Selected wordlists are organized by purpose.
Nulx Command Center brings local system information, projects, tools and settings together in a native desktop app.
Get local explanations without an account, or connect your own account for optional online chat. Reviewed actions are being tested with explicit approval and cancellation.
These results describe development software, not a released ISO. Older installation and account tests must be repeated on the final candidate.
The next image has 1,501 configured packages, verified live-session defaults and matching license inventories. Generated boot files and final privacy checks remain open. An earlier development image passed Hyper-V installation and disk boot, but the final beta must repeat those tests.
One top panel brings together the tool menu, app shortcuts and virtual desktops. The bottom dock is removed. Terminal transparency has passed focused checks. Final-image reboot, layout and accessibility testing remain.
All 64 catalog tools are installed and passed startup checks on the development system. The beta selection now contains 116 reviewed wordlists with compressed copies, tested in isolated package installations. Final-ISO delivery and access remain open. Full upstream SecLists and original RockYou are deferred.
Both apps are installed as separate packages. Categorized search, filtering, window resizing and real tool launches have focused test evidence. A menu entry now starts the tool instead of reopening the catalog. Full click-through and final-ISO testing remain.
The installed development app now keeps the Offline Guide and online chat in one window. Real account sign-in, a learning reply, and reconnection after restart and reboot have passed. Wider account and action testing remains.
Installed local ping tests passed review, one-use approval, cancellation and private-history checks without a model call. Sharing a result is a separate decision. Nmap remains manually operated and has no Nulx AI execution, skill or MCP route. Wider action coverage remains open.
Tested Nulx app upgrades retained existing user data without reinstalling the OS. A signed public update channel, final-candidate security updates, recovery tests and final-ISO acceptance are still required.
Hyper-V has an earlier full installation baseline. VirtualBox has focused live-session testing. Both need final-candidate installation and reboot checks.
Secure Boot was enabled in the tested Hyper-V installation. Final-image boot and kernel-update checks, physical hardware, accessibility, and longer stability tests remain open.
A separate ARM64 edition is planned after the amd64 beta.
No approved ISO or release date is available.