Trilokya OS.
One bootable operating system for testing the air, the device and the silicon. Hardware, RF, IoT, automotive and ICS toolchains, installed and working together from the first boot.
- 48 tools preinstalled
- 11 attack domains
- AGPL-3.0 free forever
Your first day on a hardware job shouldn’t be spent compiling.
A single embedded engagement can touch a radio, a CAN bus, a flash chip and a debug port. That is a dozen toolchains with conflicting dependencies, driver quirks and udev rules, set up slightly differently on every tester’s laptop.
Trilokya is that bench, already built. Boot it, plug in your hardware, and start where the interesting work starts.
Named for the three worlds, built for three attack surfaces.
In Hindu philosophy, Trilokya is the three realms of existence. A modern device lives in all three at once, so the tooling has to reach all three.
- ALT +∞ // THE AIR
Swarga Loka
The heavenly realmRF, SDR & wireless
Everything a device says over the air. Keyless entry, telemetry links, Wi-Fi, BLE adverts, the downlink nobody thought to encrypt.
Software-defined radioNetworking & wireless - GND 0 // THE DEVICE
Mrutyu Loka
The earthly realmIoT, vehicles & ICS
The connected things people actually touch: gateways, ECUs, PLCs, smart meters, and the protocols they use to talk to each other.
IoT penetration testingDebugging & protocol analysisExploitation frameworksIndustrial control systems - DEPTH −1 // THE SILICON
Patal Loka
The netherworldFirmware & hardware
Below the operating system. Flash chips, debug ports, boot ROMs and the key that was left in a memory dump.
Firmware analysisHardware hackingSerial & JTAG debuggingReverse engineeringCryptographic analysis
48 tools, sorted by where they attack.
Pick a domain to see what ships in it. Every tool below is installed and on the path from the first boot.
- GNU RadioDevelop and simulate SDR flowgraphs
- HackRF ToolsUtilities for HackRF SDR
- RTL-SDR ToolsTools for RTL-SDR devices
- URHUniversal Radio Hacker
- WHADWireless hacking devices framework
Less setup, more findings.
For hardware and embedded pentesters, automotive and OT security teams, researchers, and anyone teaching the craft.
Boot, don’t build
GNU Radio, ChipWhisperer, Binwalk-NG and OpenOCD each want their own dependencies. Trilokya ships them already resolved, so day one of an engagement is testing, not compiling.
Ready for the dongle in your bag
HackRF, RTL-SDR, Bus Pirate, FTDI adapters and logic analysers have their tooling in place. Plug the hardware in and start reading the bus.
One bench for the whole team
Everyone boots the same image, so a finding reproduced on one laptop reproduces on the next. No more “works on my machine” in a report appendix.
Air to silicon in one place
Radio capture, network attacks, firmware unpacking, JTAG and side-channel analysis live side by side, because real targets cross all of those layers.
Safe to break
Run it live from USB or inside a VM. When a firmware emulation goes sideways, throw the session away and boot a clean one.
Open, free and auditable
Released under AGPL-3.0. Read what’s in it, change it, and send back the tool you wish it had.
Running in three steps.
- 01
Download the ISO
Get the v1 image from the official link. The same link lives in the GitHub README.
Download - 02
Boot it
Load it in your hypervisor, or write it to a USB stick and boot the test machine from it.
- 03
Log in
The default password is below. Change it on first boot, before the machine touches a client network.
Missing a tool you rely on? Tell us.
Pull requests, bug reports and tool suggestions are welcome. This is v1; the next release is shaped by what people ask for.
Found something with Trilokya? We can go deeper.
The people who built this toolkit run hardware, automotive and OT assessments for a living. If you want that team on your product, tell us what it is.