Documentation

• Introduction

  What Oniomarchy is and how it relates to Omarchy.

• Installation

  How Oniomarchy is installed today.

• The Security Tools Menu

  How the Security Tools menu works — help-first CLI launches, GUI apps, and servers.

• Information Gathering

  Recon tooling — mapping hosts, services, and an organization's footprint before deeper testing.

• Vulnerability Analysis

  Scanning discovered assets for known weaknesses.

• Web Application Analysis

  Application-layer testing — injection, auth, and fuzzing.

• Password Attacks

  Cracking and brute-forcing credentials, online and offline.

• Wireless Attacks

  WiFi-specific attacks — handshake capture, cracking, deauth.

• Software Defined Radio

  RF signal capture, decoding, and replay beyond WiFi.

• Reverse Engineering

  Static and dynamic analysis of binaries, firmware, and APKs.

• Exploitation Tools

  Turning a discovered vulnerability into actual access.

• Sniffing & Spoofing

  Intercepting and manipulating network traffic.

• Post Exploitation

  What happens after initial access — credential theft, lateral movement, persistence.

• Digital Forensics

  Memory/disk forensics, file recovery, and metadata handling.

• Reporting Tools

  Organizing findings and evidence into client-facing deliverables.

• Social Engineering Tools

  Human-focused attacks — phishing and pretexting campaigns.

• Automotive

  CAN bus and vehicle network testing.

• AI Tools

  LLM/agent-driven offensive tooling.

• Password Management & Disk Encryption

  Defensive hygiene tools bundled in alongside the offensive toolkit.

• Webapp Shortcuts

  Security-relevant websites installed as desktop launcher entries.

• Services

  Toggleable servers under Trigger > Pentest > Services — how the menu works.

• SSH

  Toggleable SSH server for remote login and file transfer.

• RDP

  Toggleable RDP server for remote desktop access.

• Database

  Toggleable PostgreSQL server, required by Metasploit's database.

• Apache Webserver

  Toggleable Apache server for hosting phishing pages or exploits.

• Nginx Webserver

  Toggleable Nginx server, a lighter alternative to Apache.

• BeEF

  Toggleable BeEF hook server for browser exploitation.

• Reverse Shell Listener

  A quick-launch ncat listener under Trigger > Pentest.

• HTTP File Server

  A quick-launch python3 http.server under Trigger > Pentest.

• Plugins

  Bar-panel plugins for Tor and MAC randomization.

• tormarchy

  A third-party Omarchy plugin adding a Tor kill-switch bar panel.

• macarchy

  A standalone Omarchy plugin for per-interface MAC randomization.