Kali Linux: Practical Reference

Quick facts
PurposePenetration testing, security research, digital forensics and training
MaintainerOffSec (formerly Offensive Security)
BaseDebian testing; Kali's own branch is kali-rolling
Release modelRolling, with quarterly snapshot images named by year and quarter (2026.x)
Package managerapt; tools grouped into kali-linux-* and kali-tools-* metapackages
Default desktopXfce (GNOME and KDE Plasma images available)
Default shellzsh
Default userNon-root user; prebuilt VMs and live images use kali / kali
Platformsx86_64 installer and live ISOs, VM images, ARM boards including Raspberry Pi, WSL, containers, NetHunter for Android
Documentationkali.org/docs

Who Kali is for, and who it isn't

Kali is a toolkit distribution. It is the right choice if you:

  • do authorised penetration tests, red-team work or bug bounties;
  • study for security certifications or work through capture-the-flag labs;
  • need forensic tools on a live USB that doesn't touch the host disk.

It is the wrong choice as a first Linux or a daily driver. Kali tracks Debian testing, so packages change constantly; hundreds of offensive tools you don't need for everyday work sit on the system; and the documentation assumes you already know Linux. If you're learning Linux itself, start with Ubuntu, Linux Mint or Debian, get comfortable with the terminal, and run Kali in a virtual machine beside it. You can also install most of the same tools on any Debian-based system.

Permission first

Only scan, attack or capture traffic on systems and networks you own or have explicit written permission to test. Unauthorised use of these tools is illegal in most countries.

Ways to run Kali

MethodGood forNotes
Prebuilt VM (VirtualBox, VMware, QEMU, Hyper-V)Most peopleDownload, import, log in as kali/kali. Snapshots let you roll back after experiments
Live USBForensics, testing on real hardwareNothing written to disk unless you add persistence
Bare-metal installDedicated testing laptopUse the installer ISO; full-disk encryption recommended
WSLQuick CLI tools on Windowswsl --install -d kali-linux; no raw Wi-Fi access
ContainerScripting, CIdocker run -it kalilinux/kali-rolling, then install the tools you need

Verify downloaded images against the SHA256 sums published on kali.org before using them. Write a USB stick with a tool like Fedora Media Writer, balenaEtcher or dd:

lsblk                                   # identify the USB stick, e.g. /dev/sdX
sudo dd if=kali-linux-2026.x-live-amd64.iso of=/dev/sdX bs=4M status=progress conv=fsync
dd overwrites the target

Double-check the device name: dd to the wrong disk destroys its contents without asking.

In VirtualBox, a USB Wi-Fi adapter must be passed through to the VM for wireless testing; the host's built-in card appears inside the VM only as a wired NAT adapter.

First steps after installing

# change the default password
passwd
# update everything
sudo apt update
sudo apt full-upgrade -y
# VM guest tools (usually preinstalled in the prebuilt images)
sudo apt install -y open-vm-tools-desktop      # VMware
sudo apt install -y virtualbox-guest-x11       # VirtualBox
# Kali's settings tool: shell prompt, metapackages, network repo mirrors, hardening
kali-tweaks

Reboot after the first full upgrade, as it usually brings a new kernel.

Updating Kali safely

Kali is rolling: there is no "release upgrade". The quarterly releases are just fresh images; an installed system becomes current by updating. Keep /etc/apt/sources.list to the official line only:

deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware
sudo apt update
sudo apt full-upgrade -y
sudo apt autoremove

Don't add Ubuntu PPAs or Debian stable repositories to Kali; mixing them is the most common way to break it. General apt usage and how to recover from broken packages are covered in the apt guide.

Installing tools with metapackages

Kali groups its tools so you don't have to install them one by one:

MetapackageContents
kali-linux-headlessDefault tools without a desktop
kali-linux-defaultThe standard tool set shipped on desktop images
kali-linux-largeA wider selection
kali-linux-everythingEvery tool (very large download)
kali-tools-web, kali-tools-wireless, kali-tools-forensics, …Tools for one area
apt-cache search kali-tools
sudo apt install -y kali-tools-web

Common problems and fixes

apt update fails with a signature or key error

Kali rotated its repository signing key in 2025. Systems with the old keyring fail with a missing-key error such as NO_PUBKEY or Missing key. Install the current keyring as documented by Kali, then update:

sudo wget https://archive.kali.org/archive-keyring.gpg -O /usr/share/keyrings/kali-archive-keyring.gpg
sudo apt update

For the general version of this problem, see fixing NO_PUBKEY errors.

Wi-Fi adapter doesn't support monitor mode

Most built-in laptop cards and many cheap USB adapters don't support monitor mode or packet injection. Check what the driver supports:

iw list | grep -A10 "Supported interface modes"
sudo airmon-ng

If monitor isn't listed, you need a different adapter. Ordinary Wi-Fi connection problems are covered in fixing Wi-Fi on Linux.

Other frequent issues

  • Broken packages after an update: run sudo dpkg --configure -a then sudo apt --fix-broken install; see held broken packages if dependencies won't resolve.
  • Commands from older tutorials don't work as root: Kali has used a non-root default user since 2020; prefix admin commands with sudo.
  • Low resolution or no clipboard in a VM: install the guest tools above and reboot.
  • Running out of disk: the full tool set is large; give a VM at least 40–80 GB and clean with sudo apt clean.

Frequently asked questions

Should I use Kali Linux as my everyday operating system?

No. Kali is built for security testing: it ships hundreds of offensive tools, tracks a rolling Debian testing base and its defaults favour testing work over everyday stability. Use Ubuntu, Fedora, Debian or Mint for daily use and run Kali in a VM.

What is the default Kali username and password?

The prebuilt virtual machine and live images use kali / kali. The installer asks you to create your own user. Change the default password straight away with passwd.

How do I update Kali Linux?

Run sudo apt update && sudo apt full-upgrade -y. Kali is rolling, so full-upgrade is the expected command and there is no separate release upgrade.

Is Kali Linux legal to use?

Using Kali is legal. Using its tools against systems or networks you don't own or don't have written permission to test generally is not.

Spotted a mistake or a command that no longer works? Send a correction — pages are re-checked when reports come in.