Mandragora Linux For Linux

Mandragora Linux is an open-source software project that provides users with a virtual appliance, a hardened desktop-oriented operating system based on Ubuntu and designed for use in vulnerability assessments and Digital Forensics-Incident Response (DFIR).

The project is available for download as a virtual appliance in the OVA file format, which can be easily imported in a virtualization software, such as VirtualBox or VMware.

The OVA image has approximately 3GB in size. After the download finishes, you must import it in one of the aforementioned virtualization apps, simply by going to the File menu and choose the “Import Appliance” option. Follow the instruction on the screen to import Mandragora Linux as a virtual appliance.

Once imported, you will see a Mandragora Linux entry in the list of virtual machines, allowing you to start it and use it like you will use any other virtual operating system.

As mentioned, the main emphasis of Mandragora Linux is on the vast selection of open-source applications for forensic investigations. Among these, we can mention OWASP ZAP, W3af, Nikto, Spikeproxy, Web-sorrow, Xplico, Wireshark, Tshark, Nmap, Zenmap, Scapy, Netexpect, Netcat, Cryptcat, Hping3, Sqlmap, LATK, Bless, Dcfldd, Foremost, Guymager, Scalpel, DFF and Tcpxtract.

It also includes the Gddrescue, TestDisk, Rifiuti2, Pasco, Vinetto, Unhide, Snowdrop, Chntpw, John the Ripper, Ophcrack, Fcrackzip, PDFcrack, PDFchain, Dsniff, Hydra-gtk, Kismet, Pyrit, Sipcrack, Ettercap, Etherape, Bleachbit, Wipe, Scrub, Rkhunter, Lynis, Proxychains, Tsocks, Privoxy, I2P, Tor, Vidalia, Torsocks, Tor-Arm, Torchat and Arkose are also included.

Being based on Ubuntu and using one of the most complete collections of apps, we feel obliged to declare Mandragora Linux one of the best virtual appliances for forensic investiogations. Please note that the password for the Live environment is "mandragora" (without quotes).