- Kali Linux 2020.2 Release (KDE & PowerShell)
- KDE Plasma Makeover & Login
- PowerShell by Default. Kind of.
- Kali on ARM Improvements
- Lessons From Installer Changes
- New Key Packages & Icons
- WSLconf
- Behind the Scenes, Infrastructure Improvements
- Kali NetHunter
- Download Kali Linux 2020.2
- Kali Linux 2021.1 Release (Command-Not-Found)
- Xfce & KDE Updates
- Terminals Tweaks
- Finding Commands That Didn’t Want To Be Found
- Partnerships with Tools Authors
- New Tools in Kali
- Kali’s Website
- Wallpapers
- Kali NetHunter Updates
- Kali ARM Updates
- Download Kali Linux 2021.1
Kali Linux 2020.2 Release (KDE & PowerShell)
Despite the turmoil in the world, we are thrilled to be bringing you an awesome update with Kali Linux 2020.2! And it is available for immediate download.
A quick overview of what’s new since January:
- KDE Plasma Makeover & Login
- PowerShell by Default. Kind of.
- Kali on ARM Improvements
- Lessons From The Installer Changes
- New Key Packages & Icons
- Behind the Scenes, Infrastructure Improvements
KDE Plasma Makeover & Login
With Xfce and GNOME having had a Kali Linux look and feel update, it’s time to go back to our roots (days of BackTrack) and give some love and attention to KDE Plasma. Introducing our dark and light themes for KDE Plasma:
On the subject of theming, we have also tweaked the login screen (lightdm). It looks different, both graphically and the layout (the login boxes are aligned now)!
PowerShell by Default. Kind of.
A while ago, we put PowerShell into Kali Linux’s network repository. This means if you wanted powershell, you had to install the package as a one off by doing:
We now have put PowerShell into one of our (primary) metapackages, kali-linux-large . This means, if you choose to install this metapackage during system setup, or once Kali is up and running ( sudo apt install -y kali-linux-large ), if PowerShell is compatible with your architecture, you can just jump straight into it ( pwsh )!
PowerShell isn’t in the default metapackage (that’s kali-linux-default ), but it is in the one that includes the default and many extras, and can be included during system setup.
Kali on ARM Improvements
With Kali Linux 2020.1, desktop images no longer used “root/toor” as the default credentials to login, but had moved to “kali/kali”. Our ARM images are now the same. We are no longer using the super user account to login with.
We also warned back in 2019.4 that we would be moving away from a 8GB minimum SD card, and we are finally ready to pull the trigger on this. The requirement is now 16GB or larger.
One last note on the subject of ARM devices, we are not installing locales-all any more, so we highly recommend that you set your locale. This can be done by running the following command, sudo dpkg-reconfigure locales , then log out and back in.
Lessons From Installer Changes
With Kali Linux 2020.1 we announced our new style of images, “installer” & “live”.
Issue It was intended that both “installer” & “live” could be customized during setup, to select which metapackage and desktop environment to use. When we did that, we couldn’t include metapackages beyond default in those images, as it would create too large of an ISO. As the packages were not in the image, if you selected anything other than the default options it would require network access to obtain the missing packages beyond default. After release, we noticed some users selecting “everything” and then waiting hours for installs to happen. They couldn’t understand why the installs where taking so long.
We also have used different software on the back end to generate these images, and a few bugs slipped through the cracks (which explains the 2020.1a and 2020.1b releases).
Solutions
- We have removed kali-linux-everything as an install time option (which is every package in the Kali Linux repository) in the installer image, as you can imagine that would have taken a long time to download and wait for during install
- We have cached kali-linux-large & every desktop environment into the install image (which is why its a little larger than previous to download) — allowing for a COMPLETE offline network install
- We have removed customization for “live” images — the installer switched back to copying the content of the live filesystem allowing again full offline install but forcing usage of our default XFCE desktop
Summary
- If you are wanting to run Kali from a live image (DVD or USB stick), please use “live”
- If you are wanting anything else, please use “installer”
- If you are wanting anything other than XFCE as your desktop environment, please use “installer”
- If you are not sure, get “installer”
Also, please keep in mind on an actual assessment “more” is not always “better”. There are very few reasons to install kali-linux-everything , and many reasons not too. To those of you that were selecting this option, we highly suggest you take some time and educate yourself on Kali before using it. Kali, or any other pentest distribution, is not a “turn key auto hack” solution. You still need to learn your platform, learn your tools, and educate yourself in general.
Consider what you are really telling Kali to do when you are installing kali-linux-everything . Its similar to if you went into your phones app store and said “install everything!”. Thats likely not to have good results. We provide a lot of powerful tools and options in Kali, and while we may have a reputation of “Providing machine guns to monkeys”, but we actually expect you to know what you are doing. Kali is not going to hold your hand. It expects you to do the work of learning and Kali will be unforgiving if you don’t.
New Key Packages & Icons
Just like every Kali Linux release, we include the latest packages possible. Key ones to point out this release are:
- GNOME 3.36 — a few of you may have noticed a bug that slipped in during the first 12 hours of the update being available. We’re sorry about this, and have measures in place for it to not happen again
- Joplin — we are planning on replacing CherryTree with this in Kali Linux 2020.3!
- Nextnet
- Python 3.8
- SpiderFoot
For the time being, as a temporary measure due to certain tools needing it, we have re-included python2-pip . Python 2 has now reached “End Of Life” and is no longer getting updated. Tool makers, please, please, please port to Python 3. Users of tools, if you notice that a tool is not Python 3 yet, you can help too! It is not going to be around forever.
Whilst talking about packages, we have also started to refresh our package logos for each tool. You’ll notice them in the Kali Linux menu, as well as the tools page on GitLab (more information on this coming soon!)
If your tool has a logo and we have missed it, please let us know on the bug tracker.
WSLconf
WSLconf happened earlier this year, and @steev gave a 35 minute talk on “How We Use WSL at Kali”. Go check it out!
Behind the Scenes, Infrastructure Improvements
We have been celebrating the arrival of new servers, which over the last few weeks we have been migrating too. This includes a new ARM build server and what we use for package testing.
This may not be directly noticeable, but you may reap the benefits of it! If you are wanting to help out with Kali, we have added a new section to our documentation showing how to submit a autopkgtest. Feedback is welcome!
Kali NetHunter
We were so excited about some of the work that has been happening with NetHunter recently, we already did a mid-term release to showcase them and get it to you as quick as possible.
On top of all the previous NetHunter news there is even more to announce this time around!
- Nexmon support has been revived, bringing WiFi monitor support and frame injection to wlan0 on the Nexus 6P, Nexus 5, Sony Xperia Z5 Compact, and more!
- OpenPlus 3T images have been added to the download page.
- We have crossed 160 different kernels in our repository, allowing NetHunter to support over 64 devices! Yes, over 160 kernels and over 64 devices supported. Amazing.
- Our documentation page has received a well deserved refresh, especially the kernel development section.
One of the most common questions to come in about NetHunter is “What device should I run it on?”. Keep your eye on this page to see what your options are on an automatically updated basis!
When you think about the amount of power NetHunter provides in such a compact package, it really is mind blowing. Its been amazing to watch this progress, and the entire Kali team is excited to show you what is coming in the future.
Download Kali Linux 2020.2
Fresh images So what are you waiting for? Start downloading already!
Seasoned Kali users are already aware of this, but for the ones who are not, we do also produce weekly builds that you can use as well. If you can’t wait for our next release and you want the latest packages when you download the image, you can just use the weekly image instead. This way you’ll have fewer updates to do. Just know these are automated builds that we don’t QA like we do our standard release images.
Existing Upgrades If you already have an existing Kali installation, remember you can always do a quick update:
You should now be on Kali Linux 2020.2. We can do a quick check by doing:
NOTE: The output of uname -r may be different depending on the system architecture.
As always, should you come across any bugs in Kali, please submit a report on our bug tracker. We’ll never be able to fix what we don’t know is broken! And Twitter is not a Bug Tracker!
Источник
Kali Linux 2021.1 Release (Command-Not-Found)
Today we’re pushing out the first Kali Linux release of the year with Kali Linux 2021.1. This edition brings enhancements of existing features, and is ready to be downloaded or upgraded if you have an existing Kali Linux installation.
- Xfce 4.16 — Our preferred and current default desktop environment has been updated and tweaked
- KDE 5.20 — Plasma also received a version bump
- Terminals — mate-terminal , terminator and tilix all had various work carried out on them
- Command Not Found — A helping hand to say if a program needs to be installed
- Partnership with more tool authors — BC Security & Joohoi have been producing great tools and we want to support them
- New tools & updates — Multiple new tools have been added to Kali and are ready for you
- Kali NetHunter — New BusyBox & Rucky version, and boot-animation
- Kali ARM — Preliminary support for Parallels on Apple Silicon (Apple M1) & Raspberry Pi 400 (WiFi Support)
The Kali project itself also has a couple different changes:
- New Kali website — You may have noticed a few things looking different
- Kali newsletter — Rather than you coming to us for updates, we can push them to your inbox
Xfce & KDE Updates
How you choose to interact with Kali is completely up to you. You may want to access Kali locally or remotely, either graphically or on the command line. Even when you pick a method, there are still options you can choose from, such as a desktop environment.
By default, Kali uses Xfce, but during the setup process, allows for GNOME, KDE, or no GUI to be selected. After the setup is complete, you can install even more. We have pre-configurations for Enlightenment, i3, LXDE, and MATE as well.
So when a desktop environment gets an update, they often enhance day-to-day activities for their users. It’s best to hear it straight from the authors, for a tour of what’s changed:
Below is our tweaked GTK3 theme, on Xfce:
Terminals Tweaks
When we use Kali, we spend a significant amount of time using the command line. A lot of the time, we do it using a local terminal (rather than in a console or remote SSH). With the options of desktop environments, there are also choices when it comes to the terminals (same with what shell to use). We have been working away on various terminals ( xfce4-terminal , tmux , tilix , konsole , qterminal , and mate-terminal ) to “Kali-fy” them:
Finding Commands That Didn’t Want To Be Found
A while ago, we changed the default set of tools installed in Kali. Most users know they can either install a one-off package, or revert back to the old set of defaults ( apt install kali-linux-large ). But to help communicate our changes (as well as any new tools), we have now included command-not-found by default. This is an “optional” package, which can be removed without removing all of kali-linux-default .
Without command-not-found installed:
If you are wondering “How does this help me?”, or has the above ever happened to you, we like to think people’s next stage would be to do apt-cache search gitleaks and see it in the network repositories. But we can do better. Now with command-not-found :
As you can see from the above example:
- gitleaks — If the command you entered is the name of an executable available in Kali, it will say the package that you need to install (if its not already!)
- gitleakss — If you are “fat fingered” and make a typo, it may make a suggestion
- badcmd — If you typed in an invalid command that doesn’t exist in Kali, it will give the original message of “command not found”.
So, how can I get this magic? Good question! If you’re:
- Doing a fresh install of Kali Linux 2021.1 or later, it will “just happen” during the setup.
- Updating Kali and you are using a Bash shell, then it will “just happen” too.
- Updating Kali and you are using a Zsh shell, you will need to add the following lines to your
But it doesn’t have to end here. By adding COMMAND_NOT_FOUND_INSTALL_PROMPT=1 to your shell’s environment (e.g.
/.zshrc ), command-not-found will take it one step further, and also prompt you if you want to install the missing package. This change is something we will be putting in in a future release.
Partnerships with Tools Authors
Carrying on from our previous partnership with byt3bl33d3r, we have expanded to supporting:
- BC Security — Giving Kali exclusive early access to “Empire” ( powershell-empire ) & “StarKiller”
- Joohoi — The creator of “Fuzz Faster U Fool (ffuf)”
The announcement with Joohoi is new for Kali 2021.1. Like the previous sponsorships, you can either sponsor him directly to get the latest access to ffuf, use Kali Linux, or wait 30 days until the source code becomes public. However, he has also announced anyone who makes a significant contribution, which gets accepted into the project, also gets access!
New Tools in Kali
It wouldn’t be a Kali release if there weren’t any new tools added! A quick run down of what’s been added (to the network repositories):
- Airgeddon — Audit wireless networks
- AltDNS — Generates permutations, alterations and mutations of subdomains and then resolves them
- Arjun — HTTP parameter discovery suite
- Chisel — A fast TCP/UDP tunnel over HTTP
- DNSGen — Generates combination of domain names from the provided input
- DumpsterDiver — Search secrets in various filetypes
- GetAllUrls — Fetch known URLs from AlienVault’s Open Threat Exchange, the Wayback Machine, and Common Crawl
- GitLeaks — Searches Git repo’s history for secrets and keys
- HTTProbe — Take a list of domains and probe for working HTTP and HTTPS servers
- MassDNS — A high-performance DNS stub resolver for bulk lookups and reconnaissance
- PSKracker — WPA/WPS toolkit for generating default keys/pins
- WordlistRaider — Preparing existing wordlists
Kali’s Website
Until recently, the only way you could be reading this would have been from our RSS feed or directly from our blog (as we only recently made the announcement of the Kali Newletter). You may of noticed already, and we said that it was coming, and it finally has — kali.org has had a face-lift!
We have (finally) moved away from WordPress to Hugo. Similarly to Kali, the website will also be a rolling distribution. The recent change is mostly cosmetic and content (both were long overdue), and we have made plans for new features to be added.
Another upside of the switch is that we can take more advantage of what GitLab has to offer. We recently had an interview with GitLab about the switch.
On the subject of interviews, we also had a word with Mr Robot’s ARG Society if you missed that.
Wallpapers
Just a quick little thing, we have tweaked our wallpaper packages:
- kali-wallpapers-2020.4 — Kali’s wallpapers from 2020.4 and onwards (for the time being)
- kali-wallpapers-2019.4 — Kali’s wallpapers between 2019.4 and 2020.3.
- kali-wallpapers-legacy — BackTrack & Kali nostalgic backgrounds
- kali-wallpapers-all — Every wallpaper
- kali-community-wallpapers — created and submitted by the community (submit yours today!)
With the alterations to the packages, we have taken the time to improve support for Xfce when using them.
Kali NetHunter Updates
BusyBox, one of the core engines of Kali NetHunter, has received a well deserved upgrade to version “1.32.0-nethunter”. BusyBox is used internally to ensure that NetHunter tools and commands are executed consistently across the vast number of different Android versions and vendor modifications. This change, whilst big, should go unnoticed by users and will help developers to port their code to NetHunter with no hassles at all. @yesimxev has added a handy section to the settings menu, which allows developers to select different BusyBox versions for testing:
Speaking of developers: If you have any cool ideas you’d like to see included in Kali NetHunter or if you would like to contribute to this amazing project, please reach out to us in our forums or on GitLab. We would love to hear from you!
Tools have been updated to the latest versions, notably Rucky — the “modern looking USB Rubber Ducky Editor and Attack Launcher”, which has been completely re-written by its author @mayankmetha and released in the Kali NetHunter App Store as version 2.1.
We’ve also been busy working on the visual aspects of Kali NetHunter, with @s133py adding a stunning new boot-animation to the growing selection:
If you have a cool boot-animation you’d like to share, please submit a merge request to our Kali NetHunter boot-animation repository.
Kali ARM Updates
As you may have heard, Apple have released new Macs with their own processors, known as Apple Silicon (Apple M1). So far, only Parallels have released something publicly that people can use for virtualization. To that end, we have generated both an installer & live ISOs ( kali-linux-2021.1-installer-arm64.iso and kali-linux-2021.1-live-arm64.iso ) that can be used with VMs on Apple Silicon Macs. Many thanks to the people who reached out and offered to test and helped us to iron out the bugs. If you’d like to see it in action, David Bombal has put out a video of it.
We have also added support for the Raspberry Pi 400’s wireless card, however it is very important to note that this is not a nexmon firmware, as nexmon does not currently support it.
The Kali ARM build scripts have seen a few more improvements from Francisco Jose Rodriguez Martos and we appreciate the assistance greatly. If you’d like to get involved with ARM, check out the GitLab issue list.
Download Kali Linux 2021.1
Fresh Images: So what are you waiting for? Start downloading already!
Seasoned Kali Linux users are already aware of this, but for the ones who are not, we do also produce weekly builds that you can use as well. If you cannot wait for our next release and you want the latest packages (or bug fixes) when you download the image, you can just use the weekly image instead. This way you’ll have fewer updates to do. Just know that these are automated builds that we do not QA like we do our standard release images. But we gladly take bug reports about those images because we want any issues to be fixed before our next release!
Existing Installs: If you already have an existing Kali Linux installation, remember you can always do a quick update:
You should now be on Kali Linux 2021.1. We can do a quick check by doing:
NOTE: The output of uname -r may be different depending on the system architecture.
As always, should you come across any bugs in Kali, please submit a report on our bug tracker. We’ll never be able to fix what we do not know is broken! And Twitter is not a Bug Tracker!
Источник