The History of Kali Linux: From BackTrack to Kali Purple

Kali Linux has a rich history rooted in its predecessor, BackTrack Linux. Developed by Offensive Security, Kali Linux was launched in 2013 to address BackTrack’s limitations and meet modern cybersecurity demands. Built on a Debian foundation, Kali Linux introduced a rolling release model, customizable features, and an extensive suite of penetration testing tools. It has since become the industry standard for ethical hacking, supporting versatile applications in network security, digital forensics, and IoT testing. Kali Linux continues to evolve with features like undercover mode and defensive tools, cementing its role as an essential platform for cybersecurity professionals.

Jan 18, 2025 - 09:50
Updated: 1 month ago
107.9k
The History of Kali Linux: From BackTrack to Kali Purple

Quick answer: Kali Linux is a Debian-based penetration testing distribution released in 2013 by Offensive Security (now OffSec) as the successor to BackTrack, which dated from 2006. Kali moved to Debian, introduced a rolling release model in 2016, added ARM and NetHunter mobile support, and launched Kali Purple for defensive security in 2023.

Key takeaways

  • BackTrack (2006) was a live-CD distribution formed from WHAX and the Auditor Security Collection. Kali replaced it in 2013 and is a complete rebuild on Debian.
  • Kali 2.0 "Sana" arrived in 2015, and the rolling release model came in 2016, so tools update continuously.
  • Kali Purple (2023) adds defensive and SOC-oriented tooling alongside the offensive set.
  • BackTrack is superseded. Nothing a learner needs today runs better on it, so use current Kali in a VM.

Where did Kali Linux come from?

Kali Linux comes from BackTrack. BackTrack combined two earlier security distributions: WHAX (a Slax-based distribution, earlier called Whoppix) and the Auditor Security Collection. It first appeared in 2006 as a live CD that gave security testers a ready set of tools without installing anything. It was popular, but later versions grew heavy to maintain: package management was awkward, and tool and kernel versions fell behind.

When was Kali Linux released, and what changed?

Offensive Security released Kali Linux in March 2013, calling it a complete rebuild of BackTrack rather than an upgrade. The big change was the base. Kali is built on Debian, which gave it a proper package repository, signed packages and a large upstream community. Tools were packaged and kept up to date through the normal apt workflow instead of manual downloads.

Kali Linux timeline

YearMilestoneWhy it matters to you
2006BackTrack releasedFirst widely used all-in-one security live CD
2013Kali Linux 1.0Debian base, apt-managed tools, successor to BackTrack
2014Kali NetHunter announcedPenetration testing platform for supported Android devices
2015Kali 2.0 "Sana"New release line, updated desktop and kernel, wider hardware support
2016Kali RollingContinuous updates instead of occasional big releases
2019Kali 2019.4Xfce becomes the default desktop and "Undercover" mode appears
2020Kali 2020.1Default user becomes non-root
2023Kali PurpleDefensive and SOC-oriented tools added to the family

Dates above are release-year milestones as widely documented; the official Kali documentation and release notes are the place to confirm exact versions and dates.

What changed for people actually using it?

  • Updating. A rolling release means sudo apt update && sudo apt full-upgrade keeps your tools current. No reinstalling for every new version.
  • Running it. Kali is offered as installer images, virtual machine images, cloud images, Windows Subsystem for Linux, and ARM images for devices such as the Raspberry Pi.
  • Safer defaults. The move to a non-root default user in 2020 reflects the same advice we give students: do not do everything as root.
  • Defence too. Kali Purple recognises that many learners start in a SOC, not a red team.

Is Kali Linux still the standard for penetration testing?

Kali is the most common choice for training and a large share of professional work because the tools come installed, tested together and documented. It is not the only option; Parrot OS and a custom Linux build are also used, and plenty of testers add their own tools. Kali is a convenience, not a requirement. The skills, such as scanning, web testing and reporting, transfer to any platform. In certification study, OffSec courses such as PEN-200 (the OSCP exam) are built around it.

A note on safe and legal use

Kali includes powerful tools. Use them only on systems you own or have written authorisation to test. Unauthorised testing is an offence under India's IT Act. A VM running Kali against intentionally vulnerable targets (for example DVWA or Metasploitable) is the right way to learn.

Should you still look at BackTrack?

Only as history. BackTrack is no longer maintained, and its tools are old and often insecure to run today. Learn on current Kali.

Next steps

To go from reading about Kali to using it, start with what Kali Linux is and why it is popular, then practise in a VM. WebAsha's ethical hacking and CEH training uses it for lab work.

Related reading

Frequently Asked Questions

Kali Linux 1.0 was released in March 2013 by Offensive Security, now called OffSec. It was built as the successor to BackTrack and based on Debian, with tools managed through the apt package system.

BackTrack was a security-focused live CD distribution first released in 2006. It merged WHAX and the Auditor Security Collection. It was replaced by Kali Linux in 2013 and is no longer maintained.

BackTrack was hard to maintain, with awkward updates and ageing tools. Kali rebuilt it on Debian with signed packages, apt-based updates, and later a rolling release model, which made tools easier to keep current.

Kali Linux is developed and maintained by OffSec (formerly Offensive Security), with community contributions. It is open source, and its official documentation and downloads are at kali.org.

Kali Purple is a defensive security flavour of Kali introduced in 2023. It bundles tools for monitoring, detection and analysis for blue team and SOC work, alongside the usual offensive tools.

Yes. Kali is the most common distribution for training and many professional engagements. It is a convenience, not a requirement, and its use must always be authorised in writing.

What's Your Reaction?

Like Like 0
Dislike Dislike 0
Love Love 0
Funny Funny 0
Wow Wow 0
Sad Sad 0
Angry Angry 0
Vaishnavi

Vaishnavi is a skilled tech professional at the Ethical Hacking Training Institute in Pune, responsible for managing and optimizing the technical infrastructure that supports advanced cybersecurity education. With deep expertise in network security, backend operations, and system performance, she ensures that practical labs, online modules, and assessments run smoothly and securely. Her behind-the-scenes contributions play a vital role in delivering a seamless and secure learning experience for aspiring ethical hackers.