ismd/blackarch repository overview

⁠BlackArch Docker

Docker image based on BlackArch Linux⁠ with browser-accessible GUI via noVNC⁠.

A ready-to-use penetration testing and CTF environment you can access from any browser — no VNC client or X11 forwarding required. Great for solving CTF challenges, security research, and learning offensive security.

⁠Quick Start

Terminal mode (default):

docker run -it --rm -v "$PWD":/app ismd/blackarch

GUI mode (noVNC):

docker run -d \
  --security-opt seccomp=unconfined \
  -p 8080:8080 \
  -v "$PWD":/app \
  --name blackarch \
  ismd/blackarch \
  /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf

Then open http://localhost:8080⁠ in your browser.

Default credentials: root / blackarch

⁠Features

• Two modes — use as a simple CLI container or launch a full desktop accessible via browser
• Browser-based GUI — noVNC provides HTML5 access to the desktop, no VNC client needed
• BlackArch toolset — access to 2800+ security and penetration testing tools via pacman
• CTF-ready — built for solving Capture The Flag challenges out of the box
• Daily builds — the image is automatically rebuilt every day via GitHub Actions⁠, so you always get the latest packages
• Volume mount — mount your working directory to /app to share files between host and container

⁠Use Cases

• CTF competitions — spin up a fresh environment with all the tools you need
• Penetration testing labs — isolated environment for practicing and running security tools
• Security research — quick access to a full BlackArch toolkit without installing on bare metal
• Learning — explore offensive security tools in a safe, disposable container

⁠Notes

• --security-opt seccomp=unconfined is required for GUI mode
• BlackArch is a rolling release — run pacman -Syu before installing new packages

⁠Links

• Source: github.com/ismd/blackarch-docker⁠
• Issues: GitHub Issues⁠