Tool selection
The installed tools cover network scanning, traffic analysis, web and password testing, and firewall configuration. The count is kept deliberately low; each tool needs an interface and documentation written for it.
Debian 13 · XFCE · amd64
Few, explained well.
CarotOS is a Linux distribution built for cybersecurity education. It ships ten security tools and four applications written to operate them.
- 10
- hand-picked security tools
- 4
- original applications
- ~500 MB
- memory use when idle
- 13
- Debian release — trixie
Approach
What it is, what it isn't.
CarotOS is not an alternative to distributions that ship large tool sets. It adds ten tools and the interfaces to operate them on top of a Debian install. The goal is not a higher tool count but a base that works in a classroom.
Default language
The system installs in Turkish. English is available from the welcome wizard or the session settings. Application interfaces ship in both languages.
Debian 13 base
A current repository keeps tool versions aligned with the material people learn from. Version mismatch is one of the most common places new users get stuck.
Applications
What we ship.
Four applications written for this project in Python and GTK3, distributed under the GPL-3.0.
Security Panel
A graphical interface for the ten tools. Each field documents its function, command output streams live, and privileged operations run through pkexec.
Welcome Wizard
An eleven-page bilingual introduction shown on the first session. Theme and language are selected on page two and applied to the system on exit.
System Health
Twenty checks across six categories. Produces a health score, fixes twelve issues in one click, and saves the result as a report.
USB Inspector
Inspects a connected device automatically: autorun.inf, double extensions, hidden extensions, shortcuts disguised as folders. File contents are never read; only names, extensions and locations are examined.
Installed tools
- nmapNetwork and port scanning
- tcpdumpPacket capture
- tsharkTraffic analysis
- aircrack-ngWireless network testing
- niktoWeb server scanning
- sqlmapSQL injection testing
- johnPassword strength analysis
- hydraAuthentication testing
- ufwFirewall
- fail2banIntrusion prevention
Screenshots
SystemClick to enlarge1 / 12
DesktopXFCE 4, a two-panel layout and its own wallpaper.
Download
Release 1.0 “Eggshell”
BIOS and UEFI installs are both tested. A signed shim ships in the ISO for Secure Boot. Firmware packages for Wi-Fi, audio and graphics hardware are included.
Desktop
x86_64
SHA-2569d4e205ac2fff12cfda3751bd93f9770648dbf103aeb02a7d94e26f1c21f23a8
System requirements
- Processor64-bit (amd64), 1 GHz
- Memory1 GB minimum, 2 GB recommended
- Disk10 GB
- BootBIOS or UEFI
Recommended minimums for a Debian 13 “trixie” desktop install. XFCE uses fewer resources than GNOME or KDE Plasma. Debian 13 does not support the i386 architecture.
In progress
CarotDeck
arm64
A portable build running i3wm on the Orange Pi 4 Pro. Target idle memory use is 200 MB.
In developmentBuilds for other desktop environments are planned.
Releases
Release notifications
Release notes are published on GitHub: tools added, bugs fixed, backwards-incompatible changes.
Email newsletter
Release notes sent by email. Addresses are not used for any other purpose.
Join opens the mail application with a prepared message.
GitHub
Selecting Watch → Custom → Releases on the repository sends a notification for every release.
ReleasesLatest release 1.0 — 19 August 2026