Kali Linux Open source
The most advanced Penetration Testing Distribution. Ever.
Introduction
Kali Linux is an open-source, Debian-based Linux distribution geared towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics and Reverse Engineering. Kali Linux is not about its tools, nor the operating system. Kali Linux is a platform.
Kali is optimized to reduce the amount of work, so a professional can just sit down and go. The Kali Linux penetration testing platform contains a vast array of tools and utilities. From information gathering to final reporting, Kali Linux enables security and IT professionals to assess the security of their systems. Tools include Aircrack-ng, Burp Suite, Hydra, John the Ripper, Maltego, Metasploit Framework, Nmap, Responder, sqlmap, Wireshark, NetExec, FFUF, Empire, and Starkiller.
A version of Kali is always close to you, no matter where you need it. Mobile devices, Containers, ARM, Cloud providers, Windows Subsystem for Linux, Pre-built Virtual Machine, Installer Images, and others are all available. Xfce is a lightweight desktop environment for UNIX-like operating systems. It aims to be fast and low on system resources, while still being visually appealing and user friendly. This is Kali's default desktop environment.
Penetration TestingSecurity ResearchComputer ForensicsReverse EngineeringDebian-based LinuxKali NetHunterWSLVirtual Machines
Screenshots

Deployment
裸机安装(Bare Metal / Installer Images)
适合需要完整硬件控制、最佳性能以及直接使用内置 Wi‑Fi、GPU 等设备的单机或多重启动环境。
Live USB
适合随身携带 Kali、在不改动宿主机系统的情况下启动使用并获得较好硬件访问能力。
预构建虚拟机(VMware、VirtualBox、QEMU)
适合希望快速获得可用 Kali 环境、利用快照等虚拟化能力且不影响宿主机系统的场景。
Vagrant 镜像
适合需要可重复、自动化创建 Kali 虚拟化测试环境的开发或实验室场景。
容器(Docker 或 LXD)
适合希望以低开销、快速方式访问 Kali 工具集,而不运行完整隔离虚拟机的场景。
WSL / Microsoft Store(可配合 Win-KeX)
适合在现代 Windows 中直接使用 Kali,并在需要时获得 Kali 桌面体验的场景。
云平台镜像(AWS、Azure、Linode 等)
适合希望使用云服务商预装 Kali、无需自行维护底层基础设施的远程环境。
ARM 镜像
适合在低功耗单板机、ARM 设备或现代 ARM 笔记本上运行 Kali 作为评估平台。
Kali NetHunter(Android 移动端)
适合在 Android 设备上使用基于 Kali 的移动渗透测试平台。
Kali Linux alternatives
Amplia Security Proprietary
Amplia Security, Information Security Professional Services
PrivDayz Shellcode Generator & Encoder Proprietary
Generate and encode Linux/Windows shellcode: reverse/bind shell, custom commands, base64 outputs.
Anvil Open source
Breaking JWT passwords with precisely zero elegance. This is an official TheTwitchy Research Project (TM). Don't expect
OffSec Proprietary
Build cyber workforce resilience with our unmatched skills development and hands-on learning platform and library.
Nmap Open source
Pentest MySQL servers with Nmap: discover vulnerabilities, brute force logins, and secure databases using NSE scripts.
看雪学院 Proprietary
看雪学苑|软件与系统安全、逆向工程与漏洞研究的专业学习平台
Ghidra Open source
Ghidra is a software reverse engineering (SRE) framework - NationalSecurityAgency/ghidra
Ad slot 300 × 250 Ad
About the data
Stars / commit times sync automatically from the GitHub API; pricing and features are human-verified.