简体中文
EnglishWhat Is Kali Linux and Which Edition Should You Use?
Updated
Kali Linux is an open-source, Debian-based Linux distribution built for information security work: penetration testing, security research, computer forensics, and reverse engineering. It is best understood as a platform rather than a tool collection — the value is that the tools, configuration, and packaging are already integrated so you can sit down and work instead of assembling an environment by hand. Choose your edition based on where you need to run it: a pre-built virtual machine for the fastest start, an installer image for a dedicated machine, WSL for Windows workflows, containers or cloud images for disposable or remote environments, ARM builds for small devices, and NetHunter for mobile.
Who Kali Is For
Kali targets security and IT professionals who assess the security of systems, plus researchers and students working in the same areas. The official description names penetration testing, security research, computer forensics, and reverse engineering as the core task areas.
The practical distinction: you can take any Linux distribution and install pentesting tools on it, but you then have to set up and configure those tools yourself. Kali is optimized to reduce that work. That optimization is the product, not any single tool.
What Ships With It
Kali includes tools covering the workflow from information gathering through final reporting. Named examples from the project's own tools listing include:
- Aircrack-ng — wireless security assessment
- Burp Suite — web application testing
- Hydra — credential testing
- John the Ripper — password cracking
- Maltego — data gathering and link analysis
- Metasploit Framework — exploitation framework
- Nmap — network discovery and scanning
- Responder — network name resolution and authentication traffic analysis
- sqlmap — SQL injection testing
Treat this as a starting point, not the full inventory. The complete, current list lives in Kali's tools documentation, which is the authoritative reference for what is packaged and how it is organized.
Choosing an Edition
Kali is available across many delivery formats. Match the format to your workflow rather than to novelty:
| Format | Best for | Trade-off to consider |
|---|---|---|
| Pre-built virtual machine | Fastest path to a working environment; trying Kali before committing | Runs inside a host OS; resource overhead |
| Installer images | A dedicated machine or full-time workstation | You manage partitioning, drivers, and updates yourself |
| Windows Subsystem for Linux | Windows-centric workflows needing Kali tooling alongside Windows | Not a full desktop environment |
| Containers | Disposable, scripted, or CI-style tasks | No persistent desktop; state is your responsibility |
| ARM builds | Small boards and ARM devices | Hardware support varies by board |
| Cloud provider images | Remote or ephemeral assessment environments | Ongoing cost and network exposure |
| Kali NetHunter | Mobile devices | Device-specific installation requirements |
If you are unsure, start with the pre-built virtual machine. It gets you to a usable platform with the least setup, and you can move to an installer or container later once you know what you actually need.
Customizing With Metapackages and ISO Builds
Two mechanisms let you shape Kali to a specific job:
Metapackages group tools by the tasks a security professional performs. Installing a metapackage pulls in the toolset for that task instead of the full default collection. This is the lighter-weight option and the right first move when you want a focused install.
ISO customization is the heavier option: Kali documents a process for generating your own optimized image. Use this when you need a reproducible build — for example, a standard image for a team, or a stripped-down image for a specific engagement — rather than adjusting a single machine.
Getting Started
- Read the documentation first. Kali's documentation is written for both newcomers and experienced users and includes tips and "recipes" for common problems. It is open, so you can contribute back.
- Pick a format from the table above based on where you need to run Kali.
- Download from the official Kali site and verify you are on the project's own distribution channel.
- Install or launch, then confirm your toolset. If you installed a metapackage, check that the expected tools are present before starting work.
- Check known issues if something behaves unexpectedly — the project maintains a known issues page alongside its FAQ.
Where to Get Help
Kali has an active community with several entry points: forums, a Discord server, an IRC channel, a bug tracker, and community tool suggestions. There is also a newsletter and a mirror location list. For tool-specific questions, the tools documentation is the first stop; for installation and configuration problems, the FAQ and known issues pages resolve a large share of cases before you need to post anywhere.
One caveat worth stating plainly: Kali is a professional platform, and the tools in it are capable of intrusive testing. Use it only on systems you own or have explicit written authorization to assess.