
Parrot 7.3 is out, and every edition has been rebuilt on it. This release landed only a few months after the previous one, and most of the work went into the system itself rather than the toolset, with two targets in mind: faster execution on recent hardware, and smoother day-to-day use. 
The build scripts changed little this round, with the effort going into smaller images and into dropping preinstalled tools that the Home and Security editions did not need.

Furthermore, we would like to thank our contributors, whose quick feedback and dedication keep the packaged tools up-to-date.

> **Upgrade with:** `sudo parrot-upgrade`
 
### Highlights

*   **Optimized builds**: an opt-in repository of packages recompiled for newer CPU baselines, with 20% to 50% gains on compute-heavy work.
*   **A new menu system rewritten in Go** (`parrot-exec` and `launcher-updater`), with one-click installation of any tool straight from the menu.
*   **Official Vagrant boxes** for the Home and Security editions, amd64.
*   **A new Firefox start page**, built with Vite, that collects no data.


## Table of Contents

## Optimized builds for modern CPUs

For the sake of broad compatibility, standard Debian and Parrot packages have always been built against the 2003 x86-64 baseline, which leaves more than two decades of CPU improvements on the table. Parrot 7.3 offers a way around that with an opt-in set of recompiled packages, shipped as extra repository components alongside the standard archive.

Selected packages are rebuilt against newer baselines, x86-64-v3 on amd64 and ARMv8.2-A on arm64, which switches on instructions such as AVX2, FMA, BMI2, LSE atomics and DOTPROD. How much this helps depends entirely on the workload. It does close to nothing on I/O-bound tasks, while compute-bound work such as compression, encryption, hashing and media encoding can run 20% to 50% faster.

Only packages where the gain is measurable are included, which in practice means shared libraries, language runtimes, and compute-heavy utilities such as ffmpeg, inkscape and numpy. Network daemons, shells and similar infrastructure stay on the baseline build, since they would gain nothing from the change.

![Parrot Optimized Builds](/assets/blog/7.3/optimized-builds.png)

The packages are delivered as repository components rather than as separate Debian architectures, which sidesteps multiarch path collisions and needs no changes to APT or dpkg. Selection comes down to version comparison alone, so an optimized package like `1.2.3-parrot1+amd64v3optimized1` ranks above the standard `1.2.3-1`, while a newer standard release such as `1.2.3-2` still takes priority, which is what keeps security updates landing immediately instead of waiting for an optimized rebuild.

A hardware guard prevents the packages from installing on a CPU that cannot run them. A small support package runs a feature check at install time, and every optimized package depends on it, so the install aborts cleanly on incompatible hardware. Turning the feature on requires a compatible CPU (Intel Haswell or AMD Zen and newer for amd64v3, and Apple M1 or newer, Raspberry Pi 5, Graviton 2 or equivalent for arm64v8.2), one extra apt source, and a run of `sudo parrot-upgrade`. The full package list and the compatibility checks are documented at [parrotsec.org/docs/configuration/parrot-optimized-builds](https://parrotsec.org/docs/configuration/parrot-optimized-builds).

## A new menu system, rewritten in Go

Two core components have moved off shell scripts and onto Go, `parrot-exec` and `launcher-updater`, which leaves two small binaries with no dependencies and a menu where every tool is visible and installable in a single click.

### parrot-exec

Installed at `/usr/bin/parrot-exec`, it is the launcher behind every ParrotOS `.desktop` file. It covers direct execution, sudo-elevated terminal commands, graphical applications through pkexec (with DISPLAY and XAUTHORITY forwarded explicitly so X11 apps still work under privilege escalation), and directory listing for resource-based launchers such as wordlists and webshells.

Its most useful behavior is on-demand installation. When you click a `[not installed]` entry, parrot-exec checks the local apt cache with `apt-cache policy` and stops with an error if the package has no candidate. When there is one, it installs the package and then triggers `update-launchers` right away, so the template entry is swapped for the real launcher. The terminal stays open after a command by default, and `attachStdio()` wires the child streams directly to the parent process, which keeps every session interactive.

![New Parrot Menu](/assets/blog/7.3/parrot-menu.png)

### launcher-updater

Installed under `/usr/share/parrot-menu/`, it handles the full lifecycle of Parrot desktop files through three internal packages: `dpkg`, which reads `/var/lib/dpkg/status` directly for O(1) lookups, `desktop`, which handles parsing and template generation, and `launcher`, which holds the sync logic.

Every desktop file carries an `X-Parrot-Package=` field. If that package is installed, the file is copied into `/usr/share/applications/` with the `.png` extension stripped from `Icon=` lines along the way. If it is not installed, a template is generated instead, carrying the not-installed prefix, the software-manager icon, and `Exec=parrot-exec --install <package>`. Upstream Debian `.desktop` files from packages such as wireshark, ettercap and chirp are suppressed whenever a Parrot wrapper for the same tool already exists, which keeps duplicates out of the menu. Legacy naming is cleaned up during the same sync, so when a `serv-*` launcher is deployed, any leftover `parrot-*` entry with the matching suffix is removed, finishing the move off the old naming convention without leaving stale entries behind.

Once the sync is done, `kbuildsycoca6` runs as the original user (resolved through SUDO\_USER or logname, with the correct DBUS\_SESSION\_BUS\_ADDRESS) to refresh the KDE menu cache, because running it as root would miss the user's D-Bus session entirely. That step is skipped when the tool is invoked with `wait_dpkg`, which avoids redundant rebuilds during batch operations.

## Official Vagrant boxes

Parrot 7.3 ships official Vagrant boxes for the Home and Security editions, amd64 only, so security professionals can bring up a reproducible ParrotOS environment with a single command. The build mounts a pre-installed `.qcow2` image through qemu-nbd, installs and enables SSH, sets up password authentication, and packages the result as a standard Vagrant box for libvirt. Once the box is added to your environment, writing a Vagrantfile and running `vagrant up` is all it takes to land in a clean ParrotOS instance in a known state, with no manual setup and no configuration drift. The same box can be shared across a team or wired into a CI pipeline, which brings Parrot into an Infrastructure as Code workflow.

## New Firefox start page

Firefox now opens to a new start page by default, and you can still point it somewhere else if you prefer. It is a lightweight landing page built with Vite, with search through DuckDuckGo, Qwant or Google, plus the latest articles and a set of documents worth reading before getting into Parrot. No data is collected here, and the same holds for the main website and the other web services.

![New Start Page](/assets/blog/7.3/start-page.png)

## Updated tools

This release pulls in current versions of the tools people rely on most:

- Linux kernel [7.0.9]
- sherlock [0.16.0]
- bettercap [2.41.5]
- caido [0.55.2]
- seclists [2026.1]
- rocket [1.5.1]
- evil-winrm-py [1.6.0]
- bloodyad [2.5.4]
- airgeddon [12.0]
- enum4linux-ng [1.3.10]
- goshs [2.1.0]
- metasploit [6.4.136]
- sqlmap [1.10.4]
- ghidra [12.0.4]

Generic tools such as Firefox and a range of libraries, including Python modules, were updated to their latest releases as well.

## Internal packages and bug fixes

All internal `parrot-*` packages, including core and interface, were updated. `parrot-updater` went through a refactor that split configuration management away from notifications, and it now calls pkexec directly rather than through `/bin/sh`, which tightens the privilege-escalation path. Two bugs in the updater were also fixed: the update-complete dialog now reads "Close" instead of "Ok", and clicking the start button several times no longer fires off multiple completion dialogs.


Parrot 7.3 Release Notes