Developer | Levon 'noptrix' Kayan (Lead Developer) |
---|---|
OS family | Linux (Unix-like) |
Working state | Current |
Source model | Open-source |
Initial release | 16 August 2012 |
Latest release | 2023.01.05 / 23 months ago |
Repository | github |
Marketing target | Penetration Testers and Security Researchers |
Update method | Rolling release |
Package manager | Pacman |
Platforms | x86-64, aarch64 |
Kernel type | Monolithic (Linux kernel) |
Userland | GNU |
Default user interface | Fluxbox, AwesomeWM, i3wm, spectrwm, XFCE |
License | Various |
Official website | blackarch |
BlackArch is a penetration testing distribution based on Arch Linux that provides a large number of security tools. It is an open-source distro created specially for penetration testers and security researchers. The repository contains more than 2800 tools that can be installed individually or in groups. BlackArch Linux is compatible with existing Arch Linux installations. [1] [2]
BlackArch is similar in usage to both Parrot OS and Kali Linux when fully installed, with a major difference being BlackArch is based on Arch Linux instead of Debian.
BlackArch only provides the Xfce desktop environment in the "Slim ISO" but provides multiple preconfigured Window Managers in the "Full ISO".
Similar to Kali Linux and Parrot OS, BlackArch can be burned to an ISO image and run as a live system. [1] BlackArch can also be installed as an unofficial user repository on any current Arch Linux installation. [3]
BlackArch currently contains 2817 packages and tools, along with their dependencies. [4] BlackArch is developed by a small number of cyber security specialists and researchers that add the packages as well as dependencies needed to run these tools.
Tools categories within the BlackArch distribution (Counting date: 15 April 2024): [4]
A rootkit is a collection of computer software, typically malicious, designed to enable access to a computer or an area of its software that is not otherwise allowed and often masks its existence or the existence of other software. The term rootkit is a compound of "root" and the word "kit". The term "rootkit" has negative connotations through its association with malware.
A backdoor is a typically covert method of bypassing normal authentication or encryption in a computer, product, embedded device, or its embodiment. Backdoors are most often used for securing remote access to a computer, or obtaining access to plaintext in cryptosystems. From there it may be used to gain access to privileged information like passwords, corrupt or delete data on hard drives, or transfer information within autoschediastic networks.
Arch Linux is an independently developed Linux distribution designed with a rolling-release model. The default Arch Linux installation is intentionally minimal, and is configured by the user during installation so they may add only what they require. Arch is the basis for a multitude of other distributions, such as Manjaro, EndeavourOS, and Parabola.
The Interactive Disassembler (IDA) is a disassembler for computer software which generates assembly language source code from machine-executable code. It supports a variety of executable formats for different processors and operating systems. It can also be used as a debugger for Windows PE, Mac OS X Mach-O, and Linux ELF executables. A decompiler plug-in, which generates a high level, C source code-like representation of the analysed program, is available at extra cost.
BackTrack was a Linux distribution that focused on security, based on the Knoppix Linux distribution aimed at digital forensics and penetration testing use. In March 2013, the Offensive Security team rebuilt BackTrack around the Debian distribution and released it under the name Kali Linux.
Lynis is an extensible security audit tool for computer systems running Linux, FreeBSD, macOS, OpenBSD, Solaris, and other Unix derivatives. It assists system administrators and security professionals with scanning a system and its security defenses, with the final goal being system hardening.
Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux, Pentoo is provided both as 32 and 64-bit installable live CD. Pentoo is also available as an overlay for an existing Gentoo installation. It features packet injection patched Wi-Fi drivers, GPGPU cracking software, and many tools for penetration testing and security assessment. The Pentoo kernel includes grsecurity and PAX hardening and extra patches - with binaries compiled from a hardened toolchain with the latest nightly versions of some tools available.
BackBox is a penetration test and security assessment oriented Ubuntu-based Linux distribution providing a network and informatic systems analysis toolkit. It includes a complete set of tools required for ethical hacking and security testing.
ArchBang Linux is a simple lightweight rolling release Linux distribution based on a minimal Arch Linux operating system with the i3 tiling window manager, previously using the Openbox stacking window manager. ArchBang is especially suitable for high performance on old or low-end hardware with limited resources. ArchBang's aim is to provide a simple out-of-the-box Arch-based Linux distribution with a pre-configured i3 desktop suite, adhering to Arch principles.
Xplico is a network forensics analysis tool (NFAT), which is a software that reconstructs the contents of acquisitions performed with a packet sniffer.
Kali Linux is a Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security. The software is based on the Debian Testing branch: most packages Kali uses are imported from the Debian repositories. The tagline of Kali Linux and BackTrack is "The quieter you become, the more you are able to hear", which is displayed on some backgrounds, see this example.
Antergos is a discontinued Linux distribution based on Arch Linux. By default, it includes the GNOME desktop environment, but it also offers options for Cinnamon, MATE, KDE Plasma 5, Deepin, and Xfce desktops. Originally released in July 2012 as Cinnarch, it quickly gained popularity and was ranked among the top 40 most popular distributions on DistroWatch by June 2013. The name Antergos derived from the Galician word for ancestors, was chosen "to link the past with the present".
Digital Forensics Framework (DFF) is a discontinued computer forensics open-source software package. It is used by professionals and non-experts to collect, preserve and reveal digital evidence without compromising systems and data.
Parrot OS is a Linux distribution based on Debian with a focus on security, privacy, and development.
Offensive Security is an American international company working in information security, penetration testing and digital forensics. Operating from around 2007, the company created open source projects, advanced security courses, the ExploitDB vulnerability database, and the Kali Linux distribution. The company was started by Mati Aharoni, and employs security professionals with experience in security penetration testing and system security evaluation. The company has provided security counseling and training to many technology companies.
MX Linux is a Linux distribution based on Debian stable and using core antiX components, with additional software created or packaged by the MX community. The development of MX Linux is a collaborative effort between the antiX and former MEPIS communities. The MX name comes from the "M" in MEPIS and the "X" in antiX — an acknowledgment of their roots. The community's stated goal is to produce "a family of operating systems that are designed to combine elegant and efficient desktops with high stability and solid performance".