Kali Linux is a Linux based operating system, mostly used in penetration testing. Kali.org has recently released its new update with some extra functionalities. There are different types of tools that are present in Kali Linux to perform different operations.

What is Kali Linux used for?

What is Kali Linux used for? Kali Linux is mainly used for advanced Penetration Testing and Security Auditing. Kali contains several hundred tools which are geared towards various information security tasks, such as Penetration Testing, Security research, Computer Forensics and Reverse Engineering

Is Kali Linux good for beginners?

Nothing on the project’s website suggests it is a good distribution for beginners or, in fact, anyone other than security researches. In fact, the Kali website specifically warns people about its nature. … Kali Linux is good at what it does: acting as a platform for up to date security utilities.25 Apr 2016

How much RAM does Kali need?

Kali Linux requires: A minimum of 20GB hard disk space for installation depending on the version, Version 2020.2 requires at least 20GB. A minimum of 2GB RAM for i386 and AMD64 architectures.

Can I run Kali Linux on 2GB RAM?System Requirements

On the low end, you can set up Kali Linux as a basic Secure Shell (SSH) server with no desktop, using as little as 128 MB of RAM (512 MB recommended) and 2 GB of disk space.7

Which laptop is best for Kali Linux?Following is a list of the best standard laptops for running the Kali Linux software:

• Apple MacBook Pro. Check Price. …
• Dell Inspiron 15 7000. Check Price. …
• ASUS VivoBook pro 17. Check Price. …
• Alienware 17 R4. Check Price. …
• Acer Predator Helios 300

Tools in Kali Linux

1. Information Gathering: These software or applications have a job of collecting and formatting the data in a form that could further be used. This is similar to cookies used by different websites or your browsing history used by Google to personalize every advertisement and providing the best services to you. Kali operating system provides these tools to the developer and penetration testing community to help in gathering and formulating captured data.
Some of the tools are:

• Nmap
• Zenmap
• Stealth scan

Nmap is the most famous in these tools. Go to “Applications” then in “Information Gathering”, you will find these tools.

2. Vulnerability Analysis: Vulnerability is a state or condition of being exposed to the possibility of being attacked or harmed in one or the other way. These tools are used to check a system or machine for any kind of flow and vulnerability available in them, which could lead to any security breach and data loss. These tools also help in fixing those vulnerability as identification make the user aware of the flow.
For example: If windows release its new operating system, before providing it into the end-user they send for vulnerability analysis and fixes.
Some of the tools:

• Bed
• Ohrwurm
• Powerfuzzer
• Sfuzz
• Siparmyknife

All these tools are very common in the community. Go to “Applications” then in “Vulnerability Analysis”, you will find these tools.

3. Web Application Analysis: Web Application is a dynamic response web page that helps in a better and interactive client-server relationship. These tools identify and access websites through the browser to check any bug or loophole present, which could lead any information or data to lose.
For example, there is a website with a payment gateway then these web analyzers check if sufficient authentication and authorization present of the site. These web application uses:

• SQL injections
• Denial of service
• URL manipulation

Some of the tools are:

• Burpsuite
• Httrack
• Sqlmap
• Vega
• Webscarab
• Wpscan

Burpsuite, vega, and web scarab are some most famous tools. Go to “Applications” then in “Web Application Analysis”, you will find these tools.

4. Database Assessment: These applications are made to access the database and analyze it for different attacks and security issues. These assessment shows some opportunities for improvement and changes. They develop a report of the analysis done on the database system. They perform:

• Configuration checking
• Examining user account
• Privilege and role grants
• Authorization control
• Key management
• Data encryption

Some of the tools are:

• Bbqsl
• Jsql injection
• Oscanner
• Sqlmap
• Sqlninja
• Tmscmd10g

Sqlmap is the most famous database assessment tool. This tool injects SQL injection for scanning, detecting, and exploitation. Go to “Applications” then in “Database Assessment”, you will find these tools.

5. Password Attacks: These are basically a collection of tools that could handle the wordlist or password list to be checked on any login credentials through different services and protocols. Some tools are wordlist collectors and some of them are the attacker. Some of the tools are:

• Crewl
• Crunch
• Hashcat
• John
• Johnny
• Medusa

John the Ripper and Medusa are the most famous tools. Go to “Applications” then in “Password Attacks”, you will find these tools.

6. Wireless Attacks: These tools are wireless security crackers, like breaking wifi – routers, working and manipulating access points. Wireless attacks are not limited to password cracking these are also used in information gathering and knowing behavior of victims over the internet.
For example, the Victim is connected to a compromised access point or a fake access point then it can be used as a Man-in-The-Middle attack. Some of the tools are:

• Aircrack-ng
• Fern- wifi –cracker
• Kismet
• Ghost Phisher

Aircrack-ng and Ghost Phisher are the most famous tools. Go to “Applications” then in “Wireless Attacks”, you will find these tools.

7. Reverse Engineering: Reverse Engineering is to break down the layers of the applications or software. This is used in creating cracks and patches for different software and services. These tools reach the source code of the application, understand its working and manipulate according to needs. For example, Reverse engineering tools are also used by High-End companies to know the logic and idea behind the software. Some of the tools are:

• Apktools
• Ollydbg
• Flasm

Most famous tools are ollydbg and apltools. Go to “Application” then in “Reverse Engineering”, you will find these tools.

8. Exploitation Tools: These tools are used to exploit different systems like personal computers and mobile phones. These tools can generate payloads for the vulnerable system and through those payloads information from the devices can be exploited.
For example, the Victim’s system is compromised using payloads over internet or installing it if physically accessible. Some of the tools are:

• Armitage
• Metasploit
• Searchsploit
• Beef xss framework
• termineter

The most famous tool is Metasploit (there are courses to learn Metasploit alone). Go to “Applications” then in “Exploitation Tools”, you will find these tools.

9. Sniffing and Spoofing: Secretly accessing any unauthorized data over network is sniffing. Hiding real identity and creating fake identity and use it for any illegal or unauthorized work is spoofing. IP spoofing and MAC spoofing are two famous and mostly used attacks. Some of the tools are:

• Wireshark
• Bettercap
• Ettercap
• Hamster
• Driftnet

The most used tool is Wireshark. Go to “Applications” then in “Sniffing and Spoofing”, you will find these tools.

10. Post Exploitation: These tools use back doors to get back to the vulnerable system i.e. to maintain access to the machine. As the name suggests these are useful or mostly used after an attack has previously been made on the victim’s machine.
For example, After an attack victim removed the vulnerability from the system, in this situation if attacker wants to access data again, then these tools are helpful. Some of the tools are:

• MSF
• Veil –Pillage framework
• Powersploit

The most famous tool is Powersploit. Go to “Applications” then in “Post Exploitation Tools”, you will find these tools.

11. Forensics: These tools are used by forensic specialist to recover information from any system or storage devices. This helps in collecting information during evidence searching for any cybercrime. Some of the tools are:

• Autopsy
• Binwalk
• Galleta
• Hashdeep
• Volafox
• Volatility

The most famous tool is Autopsy, it has also been used by security forces, many judicial and investigating officials. Go to “Applications” then in “Forensics”, you will find these tools.

12. Reporting Tools: After all the assessment and vulnerability testing analysts have to report all those to the client in an organised and authenticated way. These tools develop statistics and information to help in analysing. Some of the tools are:

• Dradis
• Faraday IDE
• Pipal
• Magictree

Most famous tools are faraday, Dradis, and Pipal. Go to “Applications” then in “Reporting Tools”, you will find these tools.

13. Social Engineering: As the name suggests these tools generate similar services that people use in daily life and extract personal information using those fake services. These tools use and manipulate human behavior for information gathering.
For example, Phishing is one of the example of social engineering, in this, a similar looking home page of any social platform is created and then login details are compromised. Some of the tools are:

• SET
• Backdoor-f
• U3-pwn
• Ghost Phisher

The most famous social engineering tool is SET. Go to “Applications” then in “Social Engineering Tools”, you will find these tools.

The wonderful thing about Kali Linux is that the law enforcement agents also uses most of these tools for foremsic analysis and investigation therefore kali linux is useful  for all.

Leave your comment below if this article interests you.