T-PHANTOM OS
Saudi-developed, Debian-based Linux distribution with a KDE Plasma desktop in Arabic and English for digital forensics, penetration testing and reverse engineering. Current release is 5.3.
Industry: Security-focused Linux distribution | Location: Saudi Arabia
About T-PHANTOM OS
T-PHANTOM OS is a Debian-based Linux distribution for cybersecurity work, developed in Saudi Arabia. It ships with a KDE Plasma desktop in which Arabic and English are treated as equal languages, and it is aimed at digital forensics and incident response, authorised penetration testing, reverse engineering and network analysis.
The project is the work of one developer, Eng. Talal Fawaz Al-Sohimiy, who is based in Saudi Arabia according to the project repository. In an interview published by Security Review Magazine on 30 August 2026, he said his contribution lies at the distribution layer: the architecture, the bilingual desktop, the boot and login identity, validation and documentation. He does not claim authorship of the Linux kernel, Debian, KDE Plasma, Kali components or the third-party tools included, and says original tools of his own will be added in later releases after testing.
The current release is version 5.3, published as a roughly 4.1 GB x86_64 ISO. The repository lists a curated index of 44 cybersecurity tools, which an internal audit for the release reviewed. The project says AppArmor and nftables were validated as available, that tests in virtual machines passed, and that the image was tested on specific physical devices only. A full hardware compatibility matrix is still pending. TechScoop reported that several widely used tools, including Metasploit, Burp Suite, Ghidra, Volatility3 and Nuclei, are on a review queue and are not validated components of this image.
Downloads are offered through SourceForge and a Google Drive mirror, with a published SHA-256 checksum, and the repository carries release notes, install guides in English and Arabic, a security policy and a changelog. The project asks that it be used only on systems the user owns or is authorised to assess. LinuxLinks reviewed the distribution in August 2026. No company, funding or licence terms were found in the sources read.
Leadership
- Talal Fawaz Al-Sohimiy, Developer and project lead