Kali Linux is a free Linux distribution built for penetration testing, security research and digital forensics. It comes with hundreds of security tools already installed and configured, so testers can start work quickly. This guide to Kali Linux for beginners explains what it is, who uses it, its main features, how to install it safely and how to start learning without breaking the law.
What is Kali Linux?
Kali Linux is developed and funded by OffSec (formerly Offensive Security). It is based on Debian Testing and uses a rolling release model, so updates arrive continuously rather than in big version jumps. The team also publishes regular quarterly snapshots, such as 2026.1.
Kali is not meant to be a daily desktop for most people. Instead, it is a specialised toolkit for authorised security work.
A short history
- 2006: BackTrack, Kali’s predecessor, combined earlier security distributions.
- March 2013: OffSec released Kali Linux 1.0, rebuilt on Debian.
- 2016: Kali switched to a rolling release.
- 2020: Kali started using a normal user account by default instead of running everything as root, which improved safety.
Who uses Kali Linux?
- Penetration testers assess networks, web applications and wireless security.
- Red teams simulate real attackers to test an organization’s defences.
- Security researchers study vulnerabilities and malware.
- Forensic investigators use its forensic boot mode and tools.
- Students prepare for certifications such as OSCP.
- Blue teams test their detections against real attack tools.
Key features
- Over 600 tools for information gathering, vulnerability analysis, web testing, password attacks, wireless testing, exploitation and forensics.
- Many platforms: installers for PCs, virtual machine images, ARM devices such as Raspberry Pi, cloud images, containers and WSL on Windows.
- Kali NetHunter: a mobile penetration testing platform for Android devices.
- Forensic mode: boots without automatically mounting disks, which helps preserve evidence.
- Open source: all source code is public, so you can audit or customise packages.
Common tool categories
| Category | Example tools |
|---|---|
| Reconnaissance | Nmap, theHarvester, Amass |
| Web testing | Burp Suite Community, OWASP ZAP, sqlmap |
| Password testing | John the Ripper, Hashcat, Hydra |
| Wireless | Aircrack-ng, Kismet |
| Exploitation | Metasploit Framework |
| Forensics | Autopsy, Volatility |
System requirements
Kali is lightweight. For a comfortable desktop experience, plan for:
- 2 GB of RAM or more (4 GB or more is better);
- at least 20 GB of disk space, and more for extra tools;
- a 64-bit processor for most images.
How to install Kali safely
The easiest and safest option for beginners is a virtual machine:
- Download the official VirtualBox or VMware image from kali.org.
- Verify the SHA256 checksum.
- Import the image and give it at least 2 CPU cores and 4 GB RAM.
- Update the system:
sudo apt update && sudo apt full-upgrade -yAlternatively, you can boot from USB in live mode or install Kali on Windows through WSL.
The penetration testing process
Professional tests follow a structured approach:
- Planning and scoping: agree in writing what you may test.
- Reconnaissance: gather information about the target.
- Scanning and enumeration: find hosts, services and versions.
- Exploitation: prove that weaknesses are real.
- Post-exploitation: assess what an attacker could reach.
- Reporting: explain risks and fixes clearly.
Use Kali legally and ethically
Never scan or attack systems without explicit written permission. In India, unauthorised access is an offence under the Information Technology Act, 2000. Instead, practise on your own lab or legal platforms such as Hack The Box, TryHackMe and intentionally vulnerable machines.
For a comparison with another security distribution, read Kali Linux vs Parrot OS.
Sources
Need help with network security? We test routers, firewalls, ACLs and segmentation as part of our VAPT services and hardening audits. Contact us for a quote.
