What is Demon Linux?

Demon linux us an information security-themed distribution of Debian Linux. It has taken the place of WeakNet Linux with a whole new design, UI/UX, tool-set, and more. It comes in an easy-on-the-eyes dark theme, the UI is easy to understand and use, and comes pre-packed with tons of tools that you will need during your penetration testing and CTF exercises.

The Desktop

The new desktop environment, which replaces Fluxbox, is build from XFCE. The choice came from simply going through the many "lightweight" desktop-environments (window managers) available for Linux and XFCE was smooth and worked without any vague, noisy and annoying, panel, screen resolution, or menu errors and warnings like Cinnamon/Budgie did.

Demon Linux Distribution for Penetration Testing and CTF

The Menu

The new menu for the desktop environment beats what I had made for Fluxbox for miles. Simply hit the WIN/SUPER key on your keyboard and start typing what you want to open/search for.

Demon Linux Distribution for Penetration Testing and CTF Demon Linux Distribution for Penetration Testing and CTF

The Dock

I decided to go with the default XFCE dock and scrap my old wbar-fork I made for WeakNet LINUX. This is simply because I like to intuitive design of the dock. I still got to make pretty icons for some of the most commonly used tools in the distribution. If you would like to add more, you can use the default, Papirus-Dark icons, or my own custom in /usr/share/demon/images/icons/

Demon Linux Distribution for Penetration Testing and CTF

The Browser

I realize that I spend a lot of time in a web browser during penetration testing. Either by trying to gain a foothold in a box through a web application, researching for exploits and vulnerabilties, or simply listening to Spotify. With this in mind, and how the browser really should integrate with desktop environment in a cooperative manner, I decided to go with Firefox for this distribution and ditch Google Chrome. Firefox has a lot of great infosec-related plugins that I have added right into the distribution for you. The famous Hack Tools panel is now integrated with the developer-tools - simply hit F12 and you'll see the HackBar tab on the bottom right. I have also created a TOR and BurpSuite entrie for FoxyProxy Basic.

Demon Linux Distribution for Penetration Testing and CTF

Session Management

Penetration testing and CTF takes a long time. Espcially if you are constantly TRYING HARDER. Taking breaks is essential and protecting your screen, session, and data is even more essential. This distro comes with a login/log out session manager called LightDM. Remember, the default username and passord for The Demon are, root:weaknet. Change the password as soon as you install The Demon onto a virtual disk using the installer.

Demon Linux Distribution for Penetration Testing and CTF

The Tools

This distribution comes packed with all of the tools that you should need while doing your basic CTF, or Penetration Test exercises. If you find a tool that you use daily missing from the distribution, simply email me at [email protected] and request to have it added. Some of the categories of tools for this distribution include, These tools have been moved from /pwnt to /infosec

Demon Linux Distribution for Penetration Testing and CTF


This distribution has a lot of built in support with firmwares and drivers for a wide array of hacking devices, including WiFi adapters, Bluetooth sniffers, and more. Below is a screenshot of the plug-and-play capabilities of the $20 Adafruit Bluetooth LE Friend - Simply plug it in and fire up Wireshark!

802.11 Band Spectrum Analysis? The Demon has that too! Check out the support for the Ubiquiti Airview 2 device - just plug and play!

802.11 USB Devices? I use ALFA devices because the USB support in VMWare is incredible. Here are two different ALFA devices with two different chipsets, RTL8187 and Atheros ath9k, running side by side in Demon Linux,


Demon Linux was built with my own custom-made tools and scripts which are available on my GitHUB page from the link in the navigation bar. The installer is still in the "experimental" phase, as I had to heavily rewrite what I had for older versions of Debian, so if you come into issues, I would like to know so that I can resolve them. I will be tracking issues with the installer at my GitHUB page, so please file the issue here at my GitHUB page.

2019 | [email protected] | Douglas Berdeaux