PH4NTXM is a Debian-based live Linux distribution designed specifically for cybersecurity, privacy and operational security.
The distribution is designed to run from a USB drive. Once PH4NTXM has fully loaded into RAM, the boot media can be removed. Each boot creates a new disposable session rather than reusing the identity generated during a previous session.
PH4NTXM goes beyond simply bundling a collection of security applications. Its Adaptive Identity Engine generates a per-session identity covering areas such as the hostname, MAC addresses, reported hardware characteristics, browser configuration and network behaviour. The aim is to keep these elements consistent with the identity selected for the session.
There are three boot modes. Linux uses a Linux-aligned identity together with Firefox ESR. Windows presents a Windows-aligned identity while retaining the same underlying Debian system. Lone Wolf uses a separate Linux-aligned identity and routes supported traffic through Tor. The distribution uses the XFCE desktop environment.
The project is open source under GPLv3 and is intended to be built and independently reviewed from source.
Main components and security features include:
- Adaptive Identity Engine – creates session-based hardware, network and browser-facing identities.
- Packet Transformation Engine – controls and transforms network traffic using components written in Rust and C together with NFQUEUE and eBPF.
- Lone Wolf mode – provides Tor-oriented networking backed by dedicated firewall rules.
- Encrypted DNS – provides protected DNS resolution, including DNS-over-TLS using Unbound.
- Document Airlock – opens and converts supported documents inside a disposable, offline KVM-based environment.
- Hardened browser environments – configures the browser according to the selected session identity and networking mode.
- Lockdown – blocks network traffic until normal networking is explicitly restored.
- Panic Button and USB Nuke – provide mechanisms for triggering an emergency termination sequence.
- PH4NTXM Health – reports protection status and performs system-state checks.
- OpSec Suite – includes Network, Kernel, Process, Radio, ConnWatch and Shredder tools for monitoring, inspection and remediation.
| Working state: | Active |
| Desktop: | Xfce |
| Init Software: | systemd |
| Package Management: | APT |
| Release Model: | Fixed |
| Platforms: | x86_64 |
| Home Page: | ph4ntxmofficial.github.io |
| Developer: | PH4NTXM |
This entry was written with the assistance of the developer who completed the distro form.
| This article is part of our Big List of Active Linux Distributions and Open Source Operating Systems. |
What's a Linux distribution ("distro")? |
| A distro provides the user with a desktop environment, preloaded applications, and ways to update and maintain the system. Each distro makes different choices, deciding which open source projects to install and provides custom written programs. They can have different philosophies. Some distros are intended for desktop computers, some for servers without a graphical interface, and others for special uses. Because Linux is an open source operating system, combinations of software vary between Linux distros. |
Please read our Comment Policy before commenting.