# Introduction

**Monarch** is an Arch Linux distribution based on **Omarchy**, designed to provide a ready-to-use platform for cybersecurity professionals and enthusiasts. It comes preconfigured with a comprehensive toolkit aimed at penetration testing, malware analysis, and network assessment.

**Key Features**

* **Preinstalled Testing Environments:** Includes **Exegol** for isolated and reproducible testing setups.
* **Web Proxy Tools:** Ships with both **BurpSuite** and **Caido** for advanced web application testing.
* **Vulnerability Scanning:** Provides a preconfigured **Nessus container** for automated scanning.
* **Useful TUI Applications:** Tools like **Termshark**, **Posting.sh**, and **BlueTUI** offer powerful terminal-based interfaces for network and system tasks.
* **Optimized Command Line:** A rich collection of **aliases** to streamline everyday operations and testing workflows.
* **Windows Virtual Machine:** A prebuilt **Windows VM** is included for compiling payloads and conducting cross-platform tests.

Monarch’s goal is to deliver a streamlined, powerful, and extensible environment — ready from the first boot for cybersecurity work.

{% hint style="info" %}
Monarch is based on [Omarchy](https://omarchy.org/), you can read the documentation to learn about features not documented here.
{% endhint %}


# Installation

### Download the ISO

#### Available Versions

* **Stab**~~**le release** – tested and recommended for most users.~~ (Coming soon)\
  ~~👉~~ [~~Download the stable version~~](https://monarchlinux.com)
* **Nightly (development) build** – includes the latest features but may be unstable.\
  👉 [Download the nightly build](https://github.com/monarch-os/)

Typical file names:

```
monarch-stable-x86_64.iso
monarch-nightly-x86_64.iso
```

### Create a bootable USB drive

#### On Linux

Insert your USB stick and identify its device name using:

```bash
lsblk
```

Then write the ISO image to the USB drive:

```bash
sudo dd if=monarch-stable-x86_64.iso of=/dev/<yourdisk> bs=1M status=progress
sync
```

> ⚠️ **Warning:** Replace `<yourdisk>` (for example, `sdb`) with the correct device name.\
> This command will **erase all data** on the USB drive.

#### On Windows

Use a tool such as:

* **Rufus** → <https://rufus.ie>
* **balenaEtcher** → <https://etcher.balena.io/>

Steps:

1. Select the Monarch ISO file.
2. Choose your USB drive.
3. Click **Start** to begin writing the image.

#### On macOS

You can either use `dd` from the Terminal (same command as Linux) or use **balenaEtcher** for a graphical interface.

### Boot from USB

1. Insert the USB stick into your computer.
2. Reboot and open the **boot menu** (usually by pressing `F12`, `Esc`, `F9`, or `Del` depending on your hardware).
3. Select the USB device that contains Monarch Linux.

> If your system fails to boot, check that the **UEFI/Legacy** mode matches the image type you downloaded.

### Install Monarch OS

1. **Select your language and keyboard layout**
2. **Define username and password**
3. **Configure your git informations**
   * Set your full name
   * Set your email
4. **Set your hostname**
5. **Select your timezone**
6. **Select where to install** (don't select your USB drive)

The process usually takes **5–10 minutes**, depending on your hardware.


# The basics

The **central shortcut** of Monarch is **`WIN + ALT + Space`**. It opens the **Monarch Navigation Menu**, providing quick access to applications, system tools, virtual desktops, and other key features.

<p align="center"><img src="/files/5TnHDgBQeT2BpqrGRVgB" alt="Monarch menu" data-size="original"></p>

From the main system menu, you can perform a variety of actions, including:

* **Launch applications**
* **Access system documentation**
* **Add or remove software** (Apps, TUIs, Webapps)
* **Customize the system’s look and feel**
* **Update the system**
* ...and more.

#### **Quick Access with Walker**

Applications and utilities can be launched instantly using the **`WIN + Space`** shortcut.\
This shortcut opens **Walker**, a versatile launcher that not only starts applications but also provides additional features such as a **calculator**, **to-do list**, **clipboard manager**, **web search**, and more.

#### **Virtual Desktops**

Monarch supports **10 virtual desktops** for efficient multitasking. You can switch between desktops using **`WIN + 1`**, **`WIN + 2`**, **`WIN + 3`**, … up to **`WIN + 0`**

To move a window from one desktop to another, use **`WIN + SHIFT + [1–0]`**

#### **Handy Shortcuts**

Some useful keyboard shortcuts for frequently used applications:

| Action                     | Shortcut            |
| -------------------------- | ------------------- |
| Open Terminal              | **WIN + Enter**     |
| Open Firefox               | **CTRL + ALT + W**  |
| Private Browsing (Firefox) | **ALT + SHIFT + W** |
| Open File Browser          | **CTRL + ALT + F**  |
| Open Outlook               | **WIN + SHIFT + E** |
| Open CyberChef             | **WIN + SHIFT + C** |
| Open Deezer                | **WIN + SHIFT + M** |

{% hint style="warning" %}
If you ever get lost, press **`WIN + K`** to display **all system shortcuts**.\
This provides a complete overview of available keyboard commands, helping you navigate Monarch efficiently.
{% endhint %}


# Keybindings

### Window Management

* **SUPER + SHIFT + Q**: Close active window.
* **CTRL + ALT + DELETE**: Close all windows (runs `monarch-hyprland-window-close-all`).
* **SUPER + J**: Toggle split (dwindle).
* **SUPER + P**: Toggle pseudo window (dwindle).
* **SUPER + SHIFT + SPACE**: Pop window out (float & pin) via `monarch-hyprland-window-pop`.
* **SUPER + F**: Force full screen (non-persistent).
* **SUPER + SHIFT + F**: Full width (persistent).

### Dwindle/Stack Layout Controls

* **SUPER + H**: Layout message: preselect right.
* **SUPER + V**: Layout message: preselect bottom.

### Focus Navigation

* **SUPER + LEFT**: Move focus left.
* **SUPER + RIGHT**: Move focus right.
* **SUPER + UP**: Move focus up.
* **SUPER + DOWN**: Move focus down.

### Workspace Switching

* **SUPER + \[1-0]**: Switch to workspace 1-10.
  * `[1-0]` are codes: 10 through 19.

### Move Window to Workspace

* **SUPER + SHIFT + \[1-0]**: Move active window to workspace 1-10.
  * `[1-0]` are codes: 10 through 19.

### Scratchpad

* **SUPER + S**: Toggle scratchpad.
* **SUPER + ALT + S**: Move window to scratchpad (special workspace).

### Workspace Tab Navigation

* **SUPER + TAB**: Next workspace.
* **SUPER + SHIFT + TAB**: Previous workspace.


# Themes

You can change the system theme either through the **Monarch Menu** or by using the shortcut **`CTRL + SHIFT + WIN + Space`**.\
This allows you to quickly switch between visual styles without navigating deep into settings.

<figure><img src="/files/GLC6nNDbRTSqn1rDTx69" alt=""><figcaption></figcaption></figure>


# Pentest tools

### Exegol

**Exegol** is installed by default on Monarch. As a powerful and comprehensive pentesting framework, it provides cybersecurity professionals with a **fully featured, isolated, and rapidly deployable** penetration-testing environment.

<figure><img src="/files/LKJUdBhxb4c8S7TZsPxX" alt=""><figcaption></figcaption></figure>

Monarch includes several custom integrations to streamline its usage:

* You can **create or start an Exegol environment** using the shortcut **`CTRL + ALT + E`**, allowing fast deployment during assessments.
* A default configuration is provided in **`$HOME/.exegol/`**, which includes:
  * **Environment logging enabled by default** — useful for audits and mission reports.
  * A **Kitty terminal configuration** aligned with the system’s own visual style.
  * Additional integrated tools such as **leakscheck**, **inteleaks**, and **leviathan**.

These enhancements make Exegol even more convenient and mission-ready on Monarch.

### Caido & BurpSuite Integration

**Caido** is installed and ready to use from the very first system boot, providing an immediate solution for web application analysis.

For **BurpSuite**, Monarch allows you to choose which edition to deploy.\
You can install either the **Professional** or **Community** version directly through the **Monarch Menu** *(Install > Cyber > Burpsuite)* .\
This ensures that each user can select the version that best fits their workflow and licensing requirements.

<figure><img src="/files/brZywp66sNYyS1j8Stei" alt=""><figcaption></figcaption></figure>

### Wordlists

To keep the Monarch ISO lightweight, **wordlists are not included by default**.\
They can be installed at any time through the **Monarch Menu** *(Install > Cyber > Wordlists)*

Once installed, all wordlists are available in **`/usr/share/seclists`.**

This approach ensures fast installation while still providing access to the full SecLists collection when needed.


# Windows VM

A **Microsoft Windows virtual machine** can be installed directly through the **Monarch Menu** *(Install > Windows)*

A configuration wizard is provided to help you create a Windows VM tailored to your needs. You can adjust:

* **RAM**
* **Disk size**
* **Processor count**
* **System language**
* **Username**
* **Password**

This allows you to quickly prepare a fully customized Windows environment for payload development, testing, or cross-platform analysis.

<figure><img src="/files/C2g4WCpsgI4cKFGkaeD9" alt=""><figcaption></figcaption></figure>

A shared folder between host and VM is available at `$HOME/Windows/`.


# Launcher features

Walker is the default launcher on Monarch, it use Elephant as backend. These two have a lot of features that can easily be accessed from your keyboard.

The features described here are only a selection. Full documentation is available from the [Walker documentation](https://benz.gitbook.io/walker/) or directly in the [Elephant repository](https://github.com/abenz1267/elephant/).

## Clipboard history

To access the clipboard history, type `:` in the search bar. This will display all saved clipboard entries, along with a preview on the right side—including images.

The following shortcuts can be useful:

* `Enter` — Copy the selected entry to the clipboard
* `Ctrl + D` — Delete the selected entry from the history
* `Ctrl + L` — Send the selected entry using the LocalSend app
* `Ctrl + I` — Filter the history to show only image entries

## Calculator

You can quickly access a calculator by typing `=` followed by your calculation. The result will be displayed immediately.

## Todolist

The to-do list feature can be accessed by typing `!` in the search bar. From this interface, you can manage tasks efficiently using keyboard shortcuts:

* `Ctrl + A` — Create a new task
* `Ctrl + F` — Mark the selected task as done

#### Scheduled Tasks

You can create scheduled tasks by prefixing an item with a time or date expression. Examples:

```
+5d > my task
in 10m > my task
in 5d at 15:00 > my task
jan 1 at 13:00 > my task
january 1 at 13:00 > my task
1 jan at 13:00 > my task
```

Add a `!` suffix to mark a task as **urgent**.

#### Time-Based Searching

You can filter tasks using natural time expressions. For example, searching for `today` will display all tasks scheduled for the current day.

## Websearch

You can perform web searches by typing `@` followed by your query. By default, searches can be done using **DuckDuckGo** or **Google**.

Other search engines can be configured by editing `~/.config/elephant/websearch.toml` . For example if you want to add kagi as your default search engine:&#x20;

```
[[entries]]
default = true
name = "Kagi"
url = "https://kagi.com/search?q=%TERM%"
```

When using **Kagi** or **DuckDuckGo**, you can also access your `!bang` shortcuts directly from this interface.

## File search

You can access file and folder search by typing `/`. The feature includes:

* Preview text, images, and PDF files
* Open files or folders directly
* Drag and drop files into other programs
* Copy files or paths
* Support for **LocalSend**

#### Example: Ignored Directories

To exclude certain directories from searches, you can edit `~/.config/elephant/files.toml` them as follows:

```
ignored_dirs = ["/home/myuser/Documents/", "/home/myuser/Videos"]
```


# Virtual Machines

Monarch can currently be tested on virtual machines using **QEMU**, which is the only officially supported option. Other virtualization platforms such as **VirtualBox** and **VMware Workstation** may also be used, but require additional configuration.

## Virtualbox

Instructions for running the system in VirtualBox are available in a [discussion](https://github.com/basecamp/omarchy/discussions/176) on the Omarchy GitHub repository. The same procedure applies to Monarch.

### VM Creation

1. Download the ISO from Monarch website [here](https://iso.monarchlinux.com/monarch-nightly.iso).
2. Create a new VM on virtualbox as usual
3. Select the appropriate hardware (e.g. 8192 MB RAM, 4 vCPU)
   1. Do **not** enable EFI
4. Create a virtual hard disk (at least 40 GB)
5. After finishing creation, go to the machine and select settings => Video
6. Select Graphics Controller: VBoxVGA, and leave 3D Acceleration unchecked

### Install Monarch

1. Follow the [installation steps](/getting-started/installation) to install Monarch upon first boot
2. Shut down VM, remove ISO and boot into Monarch

### Set screen resolution

In case your scaling is broken due to the default config being set to 2x scaling instead of 1x (**when your VM is not setup yet for guest resized window**), you need to manually change the config for **Hyprland**. **(This was tested on Windows 11 VirtualBox)**

1. Press `Win+Alt+Space` to open Menu -> Setup -> Monitor
2. Comment the 2x Retina Scaling lines, uncomment the 1x Scaling lines. Save.
3. Press `Win+Enter` to start a Terminal
4. Install [virtualbox-guest-utils-nox and enable the service](https://wiki.archlinux.org/title/VirtualBox/Install_Arch_Linux_as_a_guest#Install_the_Guest_Additions):\
   a. `sudo yay -S virtualbox-guest-utils-nox`\
   b. `systemctl enable vboxservice`
5. Edit /boot/limine.conf\
   a. In the line `kernel_cmdline` append `video=1920x1080`
6. Reboot the VM
7. Then set the entry in \~/.config/hypr/monitors.conf could be added such that everything runs with the correct resolution. See [monitors configurations](https://manuals.omamix.org/2/the-omarchy-manual/86/monitors) for more information.

## VMWare Workstation

A similar [discussion](https://github.com/basecamp/omarchy/discussions/572) on the Omarchy GitHub repository describes how to run the system on VMware Workstation. These steps are also applicable to Monarch.

***


