BackBox
Ubuntu-based distribution for penetration testing and security assessment
BackBox has no official, structured tool listing we can auto-sync (unlike Kali, BlackArch, REMnux, and Tails). The tools below are maintained by hand and may be incomplete or outdated — check the official docs for the current tool set.
Last verified September 5, 2026
BackBox is an Ubuntu-based distribution focused on penetration testing and security assessment, built to be lighter on system resources than larger pentest distributions while still bundling a solid core toolset for web-app, network, and exploitation work.
Use it only against systems you own or are explicitly authorized to test — see the disclaimer.
Notable bundled toolsmanually maintained
armitage
Cyber attack management for Metasploit
metasploit-framework
Framework for exploit development and vulnerability research
sqlmap
Automatic SQL injection tool
tor
Obfuscate your origins by routing traffic through a network of anonymizing nodes.
wpscan
Black box WordPress vulnerability scanner
Getting started
BackBox ships as a bootable/installable ISO built on Ubuntu with an XFCE desktop, aimed at penetration testers who want a lighter-weight alternative to Kali. It doesn't publish a dedicated per-tool catalog page — its officially documented tools are referenced individually across its blog and wiki rather than in one structured list.