Kali Linux 2024.4, a Debian-based distribution aimed at advanced penetration testing and security auditing, is now available for download, marking the distributionโs fourth major update of the year.
The spotlight in this release falls on adopting Python 3.12 as the default interpreter. While the transition took time due to compatibility testing, it marks a significant upgrade for developers and pentesters alike.
Notably, installing third-party Python packages using pip is now discouraged in favor of pipx, which ensures environment isolation for enhanced stability and security. For a smoother transition, Kaliโs documentation offers guidance on installing Python applications with pipx.
The other big highlight is that Kali bids farewell to the i386 kernel and images, marking the end of support for the legacy 32-bit architecture. While the 64-bit revolution started two decades ago, many older systems and games kept i386 alive.
Although images are no longer available, i386 packages remain, allowing users to run 32-bit applications on 64-bit systems via package management or Docker containers.
With the integration of OpenSSH 9.8p1, DSA keys are no longer supported. However, Kali provides a workaround with the ssh1 client, pre-installed in this release. Tools like kali-tweaks also simplify configuring SSH for pentesting, enabling legacy protocols and ciphers when needed.
Raspberry Pi enthusiasts will love the new customization support in Kaliโs Raspberry Pi images. Using the Raspberry Pi Imager software, users can now pre-configure settings like usernames, passwords, Wi-Fi, and SSH keys before booting their device. This feature streamlines setup, making Kali on Raspberry Pi even more accessible.
Desktop users can enjoy the sleek updates brought by GNOME 47, including customizable accent colors for a more personalized interface. The update also synchronizes accent colors with icon and window themes, ensuring a cohesive visual experience. Additionally, the system-monitor panel extension and improved color schemes for the GNOME text editor elevate usability.
Of course, Kali never launches an update without adding new security tools. The 2024.4 release adds fourteen new ones to Kaliโs already robust arsenal. Here they are:
- bloodyad: Active Directory privilege escalation framework
- certi: Ask for certificates to ADCS and discover templates
- chainsaw: Rapidly search and hunt through Windows forensic artefacts
- findomain: Fastest and most complete solution for domain recognition
- hexwalk: Hex analyzer, editor and viewer
- linkedin2username: Generate username lists for companies on LinkedIn
- mssqlpwner: Interact and pwn MSSQL servers
- openssh-ssh1: Secure SHell (SSH) client for legacy SSH1 protocol
- proximoth: Control frame attack vulnerability detection tool
- python-pipx: Execute binaries from Python packages in isolated environments
- sara: RouterOS Security Inspector
- web-cache-vulnerability-scanner: Go-based CLI tool for testing for web cache poisoning
- xsrfprobe: An advanced Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit.
- zenmap: The Network Mapper (nmap) front end
The Kali NetHunter platform sees substantial upgrades, including:
- The addition of Wifipumpkin3, a replacement for the Mana toolkit, enabling fake access points with internet connectivity.
- A refreshed NetHunter Store, now powered by F-Droid, offering open-source apps and enhanced accessibility.
- Kernel flashing via the NetHunter app, reducing dependency on recovery tools.
NetHunter also expands its device support to 100 models, including the Realme X7 Max 5G and Xiaomi Mi A3 with Android 15 compatibility.
Lastly, ARM single-board computer users gain several improvements, such as:
- Support for the Raspberry Pi 5 and Pi 500, with features like KMS-enabled graphics for smoother visuals.
- Enhanced detection for DSI displays and cameras.
- Community-driven fixes for platforms like the BeagleBone Black.
For users looking to upgrade from an earlier version, using the sudo apt full-upgrade command is recommended to ensure a smooth transition to the new release. If you plan a new installation, the distro is available for download from the projectโs website.
Refer to theย release announcementย for detailed information about all changes in Kali Linux 2024.4.
