Start Here

Finding Your Way Around

Everything Oniomarchy adds is reachable from the Omarchy menu you already use. There’s no separate app to learn and no second launcher — the security layer lives inside the menu that opens with Super + Space.

The menu

Press Super + Space and you get Omarchy’s launcher: a themed, searchable, keyboard-driven list. Oniomarchy adds two branches to it and leaves everything else where Omarchy put it.

Oniomarchy Menu   (Super + Space)
├── Apps                 (stock Omarchy)
├── Learn                (stock Omarchy)
├── Trigger
│   └── Pentest          ← Oniomarchy
│       ├── Reverse Shell Listener
│       ├── HTTP File Server
│       ├── Trust Proxy CA
│       └── Services      SSH · RDP · Database · Apache · Nginx · BeEF
├── Security             ← Oniomarchy
│   ├── Information Gathering
│   ├── Vulnerability Analysis
│   ├── Web Application Analysis
│   ├── Password Attacks
│   ├── Wireless Attacks
│   ├── Software Defined Radio
│   ├── Reverse Engineering
│   ├── Exploitation Tools
│   ├── Sniffing & Spoofing
│   ├── Post Exploitation
│   ├── Digital Forensics
│   ├── Reporting Tools
│   ├── Social Engineering Tools
│   ├── Automotive
│   ├── AI Tools
│   └── Webapps
├── Style / Setup / System   (stock Omarchy)

Everything you can type into the menu is also searchable — start typing a tool name and it filters. You never have to remember which category something is in.

The Security menu

Security is the toolkit. Each entry is one category, and inside it are the tools it ships — real, installed, ready to run. A category with one tool is a single entry; a category with several opens into a submenu listing each one. GUI tools launch straight into their window; command-line tools open a terminal.

The whole of that menu is documented tool by tool in The Toolkit.

Command-line tools show you their help first

This is the part worth understanding, because it’s not how a normal launcher behaves. When you pick a command-line tool from the Security menu, it does not just run the bare command and drop you at a prompt. It opens a terminal that:

  • prints your machine’s own IPv4 addresses at the top — the LHOST you’re about to need;
  • shows the tool’s own help — its real usage, whether that comes from a help flag or its manual;
  • echoes the exact command it ran, so you can see and reuse it;
  • then hands you a live shell in that same terminal, ready for you to type the real command.

So you land already looking at the flags, with your IP in front of you, instead of a blank cursor. A handful of tools have no help output at all and are servers or interactive frameworks where running is the point — those start directly, because that’s the useful thing to do with them. Nothing is piped through a pager, so you’re never stuck pressing q to reach the shell.

The Trigger → Pentest menu

Trigger → Pentest is for the actions you take constantly during an engagement, the ones that otherwise cost a few minutes of setup every time:

  • Reverse Shell Listener — asks for a port and opens a listener on it.
  • HTTP File Server — asks for a directory and a port and serves it.
  • Trust Proxy CA — imports Burp’s or Caido’s CA into the system trust store so your browser and tools stop complaining.
  • Services — start, stop, and restart the servers you sometimes need (SSH, RDP, database, web, BeEF), with a confirmation prompt before you expose anything.

These are covered in Working the Machine.

The bar

Two things Oniomarchy adds live on the Quickshell bar rather than in the menu, because they’re stateful and you want to see them at a glance:

  • a Tor panel — route the whole machine or just the browser through Tor, switch exit country, pull a new circuit;
  • a MAC panel — randomize or restore each network interface’s hardware address.

Both are in Privacy & Anonymity.