www.techspot.com
Kali Linux is an open-source, Debian-based Linux distribution geared towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics and Reverse Engineering.Because Kali Linux is multi-platform, it gives you a strong, stable, known baseline to operate from regardless of where you use it: desktops, servers, virtual machines, live environments, cloud or containers.Why is Kali Linux popular among hackers?Kali is a popular distro among the security community due to its design, it incorporates tools oriented towards penetration testing, security research, computer forensics and reverse engineering. Kali Linux became mainstream popular thanks to the TV Series Mr. Robot.How many tools does Kali Linux include?Kali Linux is preinstalled with over 600 penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP (both web application security scanners).How secure is Kali Linux?Kali Linux is developed in a secure location with only a small number of trusted people that are allowed to commit packages, with each package being signed by the developer. Kali also has a custom-built kernel that is patched for injection. This was primarily added because the development team found they needed to do a lot of wireless assessments.Is Kali Linux portable?Kali Linux can run natively when installed on a PC, can be booted from a live CD or live USB, or it can run within a virtual machine. It is a supported platform of the Metasploit Project's Metasploit Framework, a tool for developing and executing security exploits.What Linux distribution is Kali Linux based on?Kali Linux is based on Debian Wheezy. Most packages Kali uses are imported from the Debian repositories.What version of Kali Linux should I download?Each version of Kali Linux is optimized for a specific purpose or platform. First, you have to establish your system's architecture. If your system is 64-bit and you want to have a permanent installation, the Kali Linux ISO 64-bit is your choice. If you want to try Kali Linux without having to install it, the portable versions are the way to go.Kali Linux was developed by Mati Aharoni and Devon Kearns of Offensive Security through the rewrite of BackTrack, their previous forensics Linux distribution based on Ubuntu. The third core developer Raphal Hertzog joined them as Debian expert.What's NewWe are kicking off 2025 with Kali Linux 2025.1a! This update builds on existing features, bringing enhancements and improvements to streamline your experience. It is now available to download or upgrade if you're already running Kali Linux. Kali Linux 2025.1a? What happened to 2025.1? There was a last minute bug discovered in a package after already producing our images. As a result, a re-build was needed, with a fix.Here is a recap of the changelog since our December 2024.4 release:2025 Theme Refresh - Our yearly theme refreshDesktop Environment Updates - KDE Plasma 6.2 & Xfce 4.20Raspberry Pi - New major kernelKali NetHunter CAN - Car hacking in your pocketPackages - Various new packages added & numerous packages updated2025 Theme RefreshJust like our previous releases, the first one of the year, 20XX.1, has our annual theme refresh, a tradition that keeps our interface as modern as our tools. This year, we are excited to unveil our latest theme, thoughtfully designed to enhance the user experience from the moment you start up. Expect notable updates to the boot menu, login screen, and a stunning selection of desktop wallpapers for both Kali and Kali Purple editions. Our commitment extends beyond cybersecurity advancements; we strive to ensure that our platform's aesthetics are just as impressive as its capabilities.Desktop EnvironmentsKDE Plasma 6.2After a long wait, we are excited to announce that Plasma 6 is finally available in Kali, specifically version 6.2. This is a major update, as the previous version included in Kali was Plasma 5.27, making the scope of changes difficult to summarize. For a more in-depth look at each release, check out the official announcements: 6.0, 6.1, and 6.2.On our end, we have updated all themes to align with the new environment, featuring refreshed window and desktop visuals. And our favorite new addition from KDE? Floating panels!Xfce 4.20Our default desktop environment, Xfce, has also had a minor software bump from 4.18 to 4.20. Two years of development has gone this, which was formally released on December 15, 2024. It is the stable series follow-up to the Xfce 4.18 release that made its debut during Christmas of 2022 (Kali 2023.1).New keyboard shortcuts:To enhance the experience for users transitioning from other operating systems, we have added a few extra keyboard shortcuts to make desktop navigation even faster:Ctrl + Alt + F: File ManagerSuper + E: File ManagerSuper + F: File ManagerSuper + R: Run Command (in addition to the previous shortcut Alt + F2)Super + T: Open Terminal (in addition to the previous shortcut Ctrl + Alt + T)Super + W: Open BrowserSuper + F1: Find CursorSuper + D: Show Desktop (in addition to the previous shortcut Ctrl + Alt + D)Window Manager shortcuts:Super + Shift + Down: Move window to monitor downSuper + Shift + Up: Move window to monitor upSuper + Shift + Left: Move window to monitor leftSuper + Shift + Right: Move window to monitor rightSuper + KeyPad_1: Tile window down leftSuper + KeyPad_3: Tile window down rightSuper + KeyPad_7: Tile window up leftSuper + KeyPad_9: Tile window up rightYou can check all the other Xfce keyboard shortcuts in the keyboard settings dialog or in the XFWM4 keyboard section.Raspberry PiThere has been various Raspberry Pi image changes for 2025.1a:A newer package, raspi-firmware, is now being used. We now use the same raspi-firmware package as Raspberry Pi OS.A new kernel, which is based on version 6.6.74 and is now from the Raspberry Pi OS kernel. It is now included in all our images, including support for the Raspberry Pi 5!The new kernel packages are:linux-image-rpi-2712 - arm64 kernel for the Raspberry Pi 5/500linux-image-rpi-v8 - arm64 kernel for the Raspberry Pi 02W/2/3/4/400linux-image-rpi-v7l - armhf kernel for the Raspberry Pi 02W/4/400linux-image-rpi-v7 - armhf kernel for the Raspberry Pi 2/3linux-image-rpi-v6 - armel kernel for the Raspberry Pi 0/0W/1The respective header packages are linux-headers-rpi-2712, linux-headers-rpi-v8, linux-headers-rpi-v7l, linux-headers-rpi-v7, and linux-headers-rpi-v6. These headers come pre-installed on the Raspberry Pi images that we build. Additionally, 64-bit images include both 2712 and v8, while 32-bit images include v7l and v7.The Nexmon kernel module is now DKMS-enabled and available as brcmfmac-nexmon-dkms, allowing it to be updated separately from the kernel. However, the Nexmon firmware is not included in this release. We are still evaluating the best approach to manage firmware updates with minimal disruption and will include it in a future update.A new partition layout is introduced, mirroring Raspberry Pi OS images. The first (vfat) partition is now mounted at /boot/firmware instead of /boot. This means that if you need to modify config.txt, you should now edit /boot/firmware/config.txt. Similarly, for changes to the kernel command line, edit /boot/firmware/cmdline.txt. A /boot/config.txt file is included as a reference, containing a warning and pointing to the correct location.Speaking of config.txt, it has now been simplified, as the newer boot firmware handles many tasks automatically.There are a lot of changes that have happened under the hood, and as such, 2025.1a for Raspberry Pi devices means starting over from a new image, and not just following our update documentation. If you are happy with your current setup on the 5.15 kernel, updating will not break anything, as the new packages will not be installed by an update, but we highly recommend starting with a fresh image as we do not support upgrading to the new kernels.Kali NetHunter UpdatesWe also have some fascinating Kali NetHunter updates for this release. Straight out of the blue, V0lk3n added the all new "CAN Arsenal" tab to NetHunter app so you can now have a car hacked straight from your pocket! He also added brand new kernels for Samsung phones, with successfully ported Samsung HID patch, which has not work since the Samsung Galaxy S7.Our installer now comes with a dynamic wallpaper thanks to Robin. Therefore, if you want to add a new device with a unique resolution, you will not need to port an existing wallpaper. There are additionally various bug fixes from yesimxev, Robin, and g0tmi1kWe appreciate all the support coming from unofficial threads and our official Discord server. It is amazing how everyone helps each other out. This project really would not work without you!New Kali NetHunter kernels:Samsung Galaxy S9 (Exynos9810 - LineageOS 20/Android 13) - Thanks V0lk3nSamsung Galaxy S10 (Exynos9820 - LineageOS 21 & LineageOS 22.1) - Thanks V0lk3nXiaomi Redmi Note 6 Pro (Android 11) - Thanks TheKidBabyNew Tools in KaliThis release, there has been more of a focus on updating packages. We also bump the Kali kernel to 6.12. Still, a Kali release would not be complete without something new being added (to the network repositories):hoaxshell - Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shellMiscellaneousBelow are a few other things which have been updated in Kali, which we are calling out which do not have as much detail:Split live-config build-script into kali-installer & kali-liveWe are hoping to refresh Kali-menu in 2025.2Kali Website UpdatesWe have added 3x new pages to kali.org:Official Kali Linux Wallpapers - Kali 2019.4 and onwardsLegacy Kali Linux Wallpapers - BackTrack to Kali 2019.3Community Kali Linux Wallpapers - Our fantastic users creationsAll of this information (and more) is available in our documentation.Raspberry Pi Imager Customizations SupportThe moment that Pi users have been waiting for has arrived! We are thrilled to announce that Kali's Raspberry Pi images now support applying customizations directly from the Raspberry Pi Imager software! This is a huge step forward, and we are so excited to bring this much-requested feature to our users. Whether you are a seasoned pro or just getting started, this update is going to make your Raspberry Pi experience even more seamless.For those who might not be familiar with the Raspberry Pi Imager, it was first introduced in 2020 by the Raspberry Pi Foundation. This incredibly handy tool allows users to easily write Raspberry Pi operating system images onto an SD card or USB drive with just a few clicks. But that's not all it also lets you apply essential customizations before you even boot up your Pi! You can pre-configure a range of settings, from setting a custom username and password to choosing a hostname, connecting to a Wi-Fi network, and even adding an SSH key for remote access.With this latest release, you can now apply these customizations to all Raspberry Pi images with the exception of the PiTail images, which are highly specialized with their own network and user settings. Unfortunately, due to these customizations, applying them via the Raspberry Pi Imager software is not supported for PiTail images. But for everything else, the sky's the limit!How Does It Work?The magic happens when you write a Raspberry Pi image to your SD card or USB drive using the imager software. If you choose to enable customizations, the settings are stored in two key files on the /boot partition of the drive:user-data: This file contains all your personal settings, including the username and password, any locale or timezone preferences, and even your SSH public key (if you have chosen to enable SSH).network-config: Here you will find your Wi-Fi network settings, including the pre-computed PSK (Password Security Key) for seamless connectivity.Once the Raspberry Pi boots for the first time, these files will apply the custom settings automatically.A quick tip: Do not forget to delete these files after the first boot to keep things secure.Default Settings for Non-Customized ImagesFor users who do not wish to enable customizations, do not worry! The default settings for Raspberry Pi images will remain the same, with kali/kali for the username and password.GNOME 47We are excited to announce that the latest update to the GNOME Desktop, GNOME 47, is now available! This update brings numerous changes and desktop enhancements, but the most notable feature is the new support for accent color customization. You can now choose your favorite color for window and shell widgets, giving you more control over your desktop's look and feel.From Kali's side, we have also worked on synchronizing this new setting with the icon theme and legacy GTK window themes to ensure a cohesive visual experience. To complement this feature, we have created multiple variants of the icon theme to match each accent color. These themes are also available across other desktop environments, allowing you to personalize your Kali experience.Other ImprovementsNew login themeNew system-monitor panel extensionImproved color-schemes for gnome-text-editorKali Forums RefreshA couple of weeks ago we launched the refresh of our Kali Forums. With this refresh we are now running a Discourse-powered forum with a new set of moderators thanks to our community moderators from Discord. We are very happy with the activity we have seen on it so far and hope to see you there!For more information, please check out our blog post about the refresh.New Tools in KaliAs always, we have various new tools added (to the network repositories) - 14 this time! Summarizing what has been added:bloodyad - Active Directory privilege escalation framework (Submitted by @Arszilla)certi - Ask for certificates to ADCS and discover templates (Submitted by @Arszilla)chainsaw - Rapidly search and hunt through Windows forensic artefacts (Submitted by @Arszilla)findomain - Fastest and most complete solution for domain recognition (Submitted by @Arszilla)hexwalk - Hex analyzer, editor and viewerlinkedin2username - Generate username lists for companies on LinkedInmssqlpwner - Interact and pwn MSSQL serversopenssh-ssh1 - Secure SHell (SSH) client for legacy SSH1 protocolproximoth - Control frame attack vulnerability detection tool (Submitted by @TechnicalUserX)python-pipx - Execute binaries from Python packages in isolated environmentssara - RouterOS Security Inspector (Submitted by @casterbyte)web-cache-vulnerability-scanner - Go-based CLI tool for testing for web cache poisoning (Submitted by @Arszilla)xsrfprobe - An advanced Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit.zenmap - The Network Mapper (nmap) front end (zenmap-kbx is no longer needed!)There have also been numerous packages updates and new libraries as well. We also bump the Kali kernel to 6.11!Kali Linux 2024.3 Release (Multiple transitions)With summer coming to an end, so are package migrations, and Kali 2024.3 can now be released. You can now start downloading or upgrading if you have an existing Kali installation.The summary of the changelog since the 2024.2 release from June is:Qualcomm NetHunter Pro Devices - Qualcomm Snapdragon SDM845 SoC now supportedNew Tools - 11x new tools in your arsenalOur focus has been on a lot of behind the scenes updates and optimizations since the last release. There have been some messy migrations, with multiple stacks, all interrelating (transition have been like buses, all coming at once!). After the t64 transition finished up, it was straight into multiple other transitions: GCC 14, the glibc 2.40, and Python 3.12.This last one is the most significant! This new Python release removed some long-deprecated APIs, breaking a fair number of packages. We have been busy fixing it all (weeks of work!), we are almost there, Python 3.12 will be the default in the next version of Kali - 2024.4. With Python 3.12, there will be a major change for users: it won't be possible to install Python packages with pip anymore. We wrote about that a year ago already, we invite you to read that again if you are an avid user of pip.But that will be for the next Kali release, 2024.4, due by the end of the year. In the meantime, this new release 2024.3 still has Python 3.11 as the default Python interpreter.An unfortunate consequence of this situation is that, as the whole Python 3.12 stack did not enter Kali-rolling yet, it also blocked other packages (seemingly unrelated to Python) from entering Kali-rolling. In other words, over the last 2 months the pace of updates in Kali-rolling went down, making this release less exciting than usual. This temporary slowdown should end in the coming days and weeks, as Python 3.12 finally hits Kali-rolling. At this point packages will resume flowing as usual, so users of Kali-rolling should be ready for a lot of updates!To finish: apart from packaging, various projects either got started or continued to make progress, but are not ready for release just yet (such as having a new Kali forum, NetHunter Store updates and refreshing Kali-menu).New Tools in KaliThis Kali release is about package updates. For end users its mostly about new tools added, for us, its about the updated stacks!The community once again has set up and added various new tools. Long term contributor @Arszilla has been busy again! Here is a highlight of what new tools have been added (to the network repositories):goshs - Think SimpleHTTPServer, but written in Go, and with more featuresgraudit - Grep Rough AUDIT: source code auditing toolgsocket - Allows two machines on different networks to communicate with each otherhekatomb - Extract and decrypt all credentials from all domain computers (Submitted by @Arszilla)mxcheck - Info and security scanner for e-mail servers (Submitted by @Arszilla)netexec - Network service exploitation tool that helps automate assessing the security of large networks (Submitted by @Arszilla)netscanner - Network scanner & diagnostic tool with modern TUI (Submitted by @Arszilla)obsidian - Private and flexible writing app that adapts to the way you thinksippts - Set of tools to audit SIP based VoIP Systems (Submitted by @Arszilla)sprayhound - Password spraying tool and Bloodhound integration (Submitted by @Arszilla)sqlmc - Check all URLls of a domain for SQL injections (Submitted by @Arszilla)It goes without saying, that there has been numerous packages updates and new libraries as well.Again, we want to shout out Arszilla and his multiple contributions. Always remember, you can contribute as well! We are always open for engagement from you if you want to get involved.As hinted in our previous 2024.2 release, the Kali kernel is now also at 6.8.Kali NetHunter UpdatesKali NetHunter 2024.3 has been held back for the the time being, as we are busy upating the build infrastructure. We will release the updated images when they are ready (hopefully in a few weeks), and talk whats new with them in the next Kali release 2024.4 (Bye Mana!).Fortunately, we can say there are new supported devices! We are excited to release Kali NetHunter Pro images for devices with a Qualcomm Snapdragon SDM845 SoC (System on a Chip), such as:OnePlus 6/6TSHIFT SHIFT6mqXiaomi Pocophone F1 (aka Poco F1)Thanks to @Shubhamvis98 for his amazing work to make this happen!There is also good news for Hungarian NetHunters! Check out "HnLVIP NetHunter" (1st August 2024), in this podcast by @hackeslangos featuring @yesimxev, talking about getting into NetHunter, an OffSec journey and more! You can listen to it here:AppleSpotifyKali ARM SBC UpdatesWe now pass QEMU_CPU=cortex-a72 to the build scripts when building an arm64 image on an amd64 host, which should speed things back up considerably.USBArmory devices should now properly start their DHCP serverSupport has been added for the Raspberry Pi 4 Compute Module Wi-Fi deviceRaspberry Pi 5 kernel version has been bumped to 6.6additionally due to the new firmware in use on it, if you use an A2 rated microSD card, you should see 2-3x speedup of random accessPinebook kernel has been reverted back to a 6.1 kernel due to graphical glitches, and LCD not working on newer kernelsWe have cleaned up the build dependencies list, so we do not make users install a bunch of dependencies that are no longer used when building their own custom image.