Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've always used backtrack for security assessments, it's a great toolbox. The thing is since it's a toolbox to exploit things, have their been any reports of "bundled" spyware in standard backtrack installs? Have their been reports of backtrack phoning home?

I'm not looking for a debate, just facts.

share|improve this question
up vote 14 down vote accepted

I have been using Backtrack for 2 years and I have heard no news of any spyware or 'phoning home'.

Also, have you seen the photos of the NSA using Backtrack?

Metasploit and w3af actively work with the curators of Backtrack, which shows some level of confidence in the distribution.

Also, with the number of people running packet sniffers attached to Backtrack as part of their penetration testing, any anomaly would show up immediately.

Because everything in Backtrack is open source, every package added to the distribution is verified before release. You can even check things out yourself.

Does this help?

share|improve this answer
yes, thanks a lot :) – Lucas Kauffman Apr 29 '12 at 15:12
The problem with Linus' Law is that very few have interest in taking advantage of that, and those that do usually aren't qualified to do so. – AviD Jan 2 '14 at 21:48
@AviD agreed, but in this case, it isn't simply bugs, but behavior. Compromising Backtrack at the source is like trying to scratch the lens of a microscope and hoping that the technicians don't notice. – schroeder Jan 4 '14 at 19:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.