https://cybertoolchain.io/tools/kali-linux New releases and features in Kali Linux, tracked by The Cyber Toolchain. en Mon, 26 Oct 2026 00:00:00 GMT https://www.kali.org/blog/kali-linux-2026-3-release/ https://www.kali.org/blog/kali-linux-2026-3-release/ Mon, 26 Oct 2026 00:00:00 GMT Kali 2026.3 refreshes build-scripts with container support, adds 6 new tools, updates KDE Plasma to 6.7, and expands NetHunter with WearHunter, NFC Arsenal, and KernelSU.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `build-in-container.sh` to each refreshed build-script, auto-detecting Docker or Podman to build Kali images inside a container without installing dependencies on the host.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--hostname`, `--packages`, `--branch`, `--variant`, and `--arch` flags to `build.sh` for customizing Kali installer images at build time. • Adds `dalfox` (XSS scanner), `katana` (crawling/spidering framework), `qsreplace` (query-string value replacer), `rustscan` (modern port scanner), `sdrangel` (Qt-based SDR front-end), and `snaffler-ng` (SMB share credential and sensitive data scanner) to the Kali network repositories. • Updates the Kali kernel from 6.19 to 7.1.5 in the 2026.3 release. • Adds WearHunter to Kali NetHunter, enabling control of a NetHunter watch from a phone via ADB over Wi-Fi or Bluetooth, including running commands and installing apps. • Adds NFC Arsenal to Kali NetHunter, enabling reading, cloning, and editing of Mifare classic cards from the Kali chroot without an external adapter. • Adds KernelSU support to Kali NetHunter, allowing installation of the generated installer zip via the KernelSU app with a patched kernel. • Adds wardriving support for the TicWatch Pro 3 series via an updated `libnexmonkali` library enabling internal monitor mode, compatible with `aircrack-ng` suite, `kismet`, and other chroot tools. • Updates KDE Plasma to 6.7, adding per-screen virtual desktops, network connection duplication, and performance/power optimizations for integrated Intel GPUs. • Adds 9 new NetHunter kernels covering Google Pixel on LineageOS 22.2/Android 15, Huawei P9 on EMUI8/LineageOS 16.0, LG K20 Plus on LineageOS 14.1, Moto G Stylus 5G 2022 on LineageOS 23.2, Nubia Z17 on LineageOS 22.2, POCO X5 5G/Redmi Note 12 5G on crDroid 12, Redmi Note 5 Pro on LineageOS 18.1, Sony Xperia 10 V on LineageOS 23.2, and Ulefone Armor 34+ on Android 16. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/kali-linux-2026-2-release/ https://www.kali.org/blog/kali-linux-2026-2-release/ Mon, 29 Jun 2026 00:00:00 GMT Kali 2026.2 ships GNOME 50, KDE Plasma 6.6, unified service helper scripts, new APT sources format, 3x faster VM boot, and 9 new tools. • Upgrades desktop to GNOME 50 with faster file manager thumbnail/icon loading, new accessibility preferences window, automatic language switching, and document annotation support in Document Viewer. • Upgrades KDE Plasma to 6.6 with a new on-screen keyboard for touch devices, OCR text extraction directly from screenshots via Spectacle, color-vision support options, Slow Keys on Wayland, and Reduced Motion setting. • Introduces standardized `<tool>-start` / `<tool>-stop` helper scripts across service-dependent packages, providing consistent service management, status display, default credential info, and automatic browser launch for web UIs. • Migrates APT sources from `/etc/apt/sources.list` to the deb822-style `/etc/apt/sources.list.d/kali.sources` format on fresh installs, with `Signed-By` keyring pinning included by default. • Removes graphics firmware from pre-built VM images and adds VM detection in the installer to skip graphics firmware, shrinking the initrd from ~200 MB to 60 MB and cutting VM boot time by approximately 3x. • Makes Linux kernel 7.0 available in `kali-experimental` (and `kali-rolling`) for users who want the latest kernel ahead of the default 6.19 shipped in this release. • Adds 9 new tools to the Kali repositories: `arsenal-ng`, `hydra-gtk`, `legba`, `oletools`, `penelope`, `shell-gpt`, `tailscale`, `tookie-osint`, and `uro`. • Upgrades `xrdp` and `xorgxrdp` to the v0.10 series, bringing an updated Remote Desktop Protocol server (reboot required after upgrade). Breaking changes: • Upgrading the `polkitd` package requires a system reboot; without rebooting, attempting to start GUI applications as root will fail with cryptic error messages. • Upgrading `xrdp` and `xorgxrdp` to the v0.10 series requires a system reboot; xrdp may not be functional after the upgrade without rebooting (affects Hyper-V Enhanced Session Mode users as well). • Pre-built VM images no longer include graphics firmware; VMs with dedicated GPU passthrough may lose graphics after upgrade or reinstall without manually installing the required firmware. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/kali-linux-2026-1-release/ https://www.kali.org/blog/kali-linux-2026-1-release/ Tue, 24 Mar 2026 00:00:00 GMT Kali Linux 2026.1 adds BackTrack Mode via kali-undercover CLI, 8 new tools, and kernel 6.18 • `kali-undercover --backtrack` subcommand to activate BackTrack 5 theme recreation • AdaptixC2 post-exploitation framework package • Atomic-Operator package for executing Atomic Red Team tests • Fluxion social-engineering research tool package • GEF modern GDB experience package • MetasploitMCP MCP server package for Metasploit • SSTImap automatic SSTI detection tool package • WPProbe WordPress plugin enumeration tool package • XSStrike advanced XSS scanner package • Linux kernel 6.18 upgrade Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/kali-linux-2025-4-release/ https://www.kali.org/blog/kali-linux-2025-4-release/ Fri, 12 Dec 2025 00:00:00 GMT Kali Linux 2025.4 introduces GNOME 49 with Wayland default, bpf-linker, evil-winrm-py, hexstrike-ai, and NetHunter Android 16 support • Adds Kali `Halloween Mode` accessible via `kali-undercover --halloween` to dress the desktop for the occasion. • Introduces GNOME 49 as the default desktop environment with Wayland as the only supported window server (X11 removed). • Updates KDE Plasma to version 6.5, adding fuzzy matching in KRunner, flexible window tiling, and an improved screenshot tool. • Adds color theme customization support for Xfce desktop via `qt5ct` or `qt6ct` for Qt programs and the "Appearance" application. • Enables VM guest utils (clipboard sharing, window scaling) for Wayland in VirtualBox, VMware, and QEMU. • Distributes the Kali Live image exclusively over BitTorrent due to size exceeding HTTP CDN limits (>5 GB). • Adds `bpf-linker` as a new package for BPF static linking. • Adds `evil-winrm-py` as a new Python-based tool for executing commands on remote Windows machines via WinRM. • Adds `hexstrike-ai` as a new MCP server allowing AI agents to autonomously run tools. • Updates Kali NetHunter to support Android 16 and adds device support for Samsung Galaxy S10 series (LineageOS 23) and OnePlus Nord. • Refreshes Kali NetHunter Terminal app to support any Magisk version with interactive mode and adds Wifipumpkin3 tab preview. • Adds four new Kali mirrors: India (mirrors.esto.network), South Korea (mirror2.keiminem.com, mirror.eliv.digital), and USA (mirror.us.cdn-perfprod.com). Breaking changes: • GNOME 49 removes X11 session support; Wayland is now the default and only window server. • Kali Live image is no longer available via HTTP download; it is distributed over BitTorrent only. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/kali-linux-2025-3-release/ https://www.kali.org/blog/kali-linux-2025-3-release/ Tue, 23 Sep 2025 00:00:00 GMT Kali Linux 2025.3 adds 10 new tools including Caido and Gemini CLI, Nexmon Wi-Fi support, and CARsenal UI updates. • Adds `caido` (graphical web security auditing toolkit) and `caido-cli` to Kali Linux. • Adds `gemini-cli`, an open-source AI agent for terminal integration. • Adds `krbrelayx`, a Kerberos relaying and unconstrained delegation abuse toolkit. • Adds `ligolo-mp`, a multiplayer pivoting solution. • Adds `llm-tools-nmap`, enabling LLMs to perform network discovery via nmap. • Adds `mcp-kali-server`, an MCP configuration to connect AI agents to Kali. • Adds `patchleaks`, a tool to spot security fixes and provide validation or weaponization details. • Adds detect-it-easy (die) for file type identification. • Enables monitor mode and injection for Raspberry Pi built-in Wi-Fi via Nexmon firmware support on Broadcom & Cypress chips. • Updates configurable VPN IP panel plugin (Xfce) to allow selecting which network interface to monitor. • Adds `CARsenal` UI updates including moved Settings to menu bar, long-press command editing, and new MSF tab for automotive modules. Breaking changes: • Drops support for the ARMel architecture; Raspberry Pi 1 and Zero W are no longer supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/raspberry-pi-wi-fi-glow-up/ https://www.kali.org/blog/raspberry-pi-wi-fi-glow-up/ Tue, 22 Jul 2025 00:00:00 GMT New `brcmfmac-nexmon-dkms` and `firmware-nexmon` packages enable onboard Wi-Fi monitor mode and injection on Raspberry Pi without USB adapters • Adds the `brcmfmac-nexmon-dkms` package to provide a DKMS-based brcmfmac driver with Nexmon patches for Broadcom chips. • Adds the `firmware-nexmon` package to supply Nexmon-patched firmware for supported Broadcom Wi-Fi chipsets. • Expands on-board wireless assessment support to Raspberry Pi 5, Raspberry Pi 4, Raspberry Pi 3B, Raspberry Pi Zero 2 W, and Raspberry Pi Zero W. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux https://www.kali.org/blog/kali-linux-2025-2-release/ https://www.kali.org/blog/kali-linux-2025-2-release/ Fri, 13 Jun 2025 00:00:00 GMT Kali 2025.2 introduces MITRE ATT&CK menu organization, CARsenal car hacking set, smartwatch WiFi injection, and new tools like crlfuzz and tinja. • Kali Menu reorganized to follow MITRE ATT&ACK framework structure for tool discovery • BloodHound Community Edition upgrade with full ingestor set (azurehound, bloodhound-ce-python, sharphound) • 13 new tools added: azurehound, binwalk3, bloodhound-ce-python, bopscrk, chisel-common-binaries, crlfuzz, donut-shellcode, gitxray, ldeep, ligolo-ng-common-binaries, rubeus, sharphound, tinja • xclip pre-installed across all desktop environments by default • New GNOME VPN IP Extension showing connection IP in panel with copy-to-clipboard • NetHunter on TicWatch Pro 3 supports wireless injection, de-authentication, and WPA2 handshake capture • CARsenal car hacking tool set renamed and updated with hlcand, VIN Info, CaringCaribou, ICSim modules • New Kali NetKernel for Samsung Galaxy S10 (exynos9820) and Realme C15 • Raspberry Pi 5 supported by combined 64-bit image; kernel upgraded to 6.12 with brcmfmac nexmon driver • Kali NetKeX running on Android radio enabled Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kali-linux