# Snigdha Penetration Center — User Guide

# 1. Getting Started

# Launching the Application

• Application Launcher (dmenu / rofi): Press Super + d, type penetration, and press Enter.
• Terminal: Run snigdha-penetration-center.
• From Security Center: Open Snigdha Security Center, navigate to the Security Tooling tab, and click Open Penetration Center.

# Interface Layout

The window is organized into a side navigation pane and a primary content stack:

• Overview: System status, repository summaries, quick diagnostics, and featured tools.
• Discover: Instant full-text search across all tools, descriptions, packages, and categories.
• Categories: Domain-specific browsing across 15 cybersecurity disciplines.
• Collections: 10 curated bundles designed for specific assessment roles.
• Installed: Inventory of all security packages currently available on the system.
• Repositories: Safe opt-in repository activation and mirror status.
• Profiles: Tool profile management with encrypted persistence.
• Transactions: Transaction history and safety review.
• Diagnostics: Invariant checks (raw sockets, monitor mode, KVM, AppArmor).
• About: System provenance, supply chain attestations, and license info.

---

# 2. Browsing, Searching and Filtering

# Searching Tools

In the Discover tab, type any query into the search bar:

• Search by name: nmap, wireshark, john
• Search by technique: packet capture, sql injection, reverse engineering
• Search by domain: wireless, forensics, cryptography

# Faceted Filtering

Refine results using the filter dropdowns:

• Repository: All, Official Arch, BlackArch, Chaotic-AUR
• Curation Tier: Curated (Tier 1), Extended (Tier 2), Experimental (Tier 3)
• Risk Level: Low, Medium, High, Extreme
• State: All, Installed Only, Available Only

---

# 3. Installing Tools Safely

1. Click on any tool card to open the Tool Details Dialog.
2. Review the tool description, required privileges, upstream project URL, and Authorization Notice.
3. Click Install Package.
4. The Transaction Preview Dialog displays:
   • Target package name and repository origin.
   • Enforced safety policy: Full system upgrade (pacman -Syu --needed).
   • Download footprint and disk usage delta.
5. Click Confirm & Authenticate.
6. Enter your administrative password in the Polkit authentication prompt.
7. The transaction executes securely. Upon completion, the tool's status immediately updates to INSTALLED.

---

# 4. Launching Tools

Installed security tools can be launched directly:

• GUI Tools (e.g. Wireshark, Cutter): Click Launch to spawn the graphical interface under your desktop session.
• CLI Tools (e.g. Nmap, Tcpdump, Radare2): Click Launch in Terminal to spawn an isolated alacritty terminal session running the utility.
• Tools Requiring Root Privileges: The application automatically prompts for PolicyKit elevation (pkexec) before execution.

---

# 5. Curated Collections

Instead of selecting individual utilities one by one:

1. Navigate to the Collections page.
2. Select any of the 10 pre-curated collections (e.g., Network Assessment, Web Security, Digital Forensics).
3. The dialog displays the complete tool manifest, total download size, and how many tools in the collection are already installed.
4. Click Install Missing Tools to resolve and install the missing packages in a single cohesive transaction.

---

# 6. Managing Tool Profiles & Encrypted Persistence

To preserve your tool selections across reboots:

1. Unlock persistent storage via snigdha-persistence-menu or the Persistence page in Security Center.
2. Open Penetration Center -> Profiles.
3. Under Save Current Configuration, enter a name (e.g. Client-Pentest-2026) and click Save Profile.
4. Upon future boots, after unlocking persistent storage, click Apply Profile to restore the configuration.

---

# 7. Command-Line Reference (snigdha-penetration)

Usage: snigdha-penetration <command> [options]

Commands:
  status                      Show overall system status, repository health, and counts
  repositories, repos         List configured repositories, states, and mirrors
  categories                  List 15 cybersecurity domains and descriptions
  list                        List all curated security tools in the catalog
  search <query>              Search curated tools by keyword or domain
  info <tool_id>              Display full metadata for a specific security tool
  collections [list|inspect]  List or inspect curated tool collections
  installed                   List active security packages installed in ALPM database
  profile [list|save <name>]  List or save persistent tool profiles
  install <pkg>               Preview safe installation transaction for a package
  remove <pkg>                Preview safe removal transaction for a package
  verify, diagnose            Execute comprehensive security diagnostics

Global Options:
  --json                      Format output as structured, machine-readable JSON
  -h, --help                  Show help message
  -v, --version               Display version information

# Examples

# Search for web security tools
snigdha-penetration search web

# View tool details as JSON
snigdha-penetration --json info nmap

# Check repository activation states
snigdha-penetration repos

# Save current profile to persistent volume
snigdha-penetration profile save audit-workstation

---

# 8. Troubleshooting & FAQ

# Q: Why is BlackArch disabled by default?

A: Snigdha OS prioritizes software supply chain integrity and stability. Third-party repositories are opt-in so users make conscious trust decisions.

# Q: Why does installing a tool update other packages?

A: Arch Linux does not support partial upgrades. Installing a package against older libraries causes system-wide breakage (libcrypto.so errors). Penetration Center enforces -Syu --needed to guarantee system stability.

# Q: Are my installed tools saved after a reboot in Amnesia mode?

A: No. In Amnesia mode, all changes are volatile and disappear on reboot. To save your environment, unlock persistent storage and save a Tool Profile.