Kali Linux 是什么，你需要它吗？
Kali 黑客
![](/data/attachment/album/201802/23/184821kb93jm96a6d3a31m.jpg)


如果你听到一个 13 岁的黑客吹嘘他是多么的牛逼，是有可能的，因为有 Kali Linux 的存在。尽管有可能会被称为“脚本小子”，但是事实上，Kali 仍旧是安全专家手头的重要工具（或工具集）。


Kali 是一个基于 Debian 的 Linux 发行版。它的目标就是为了简单：在一个实用的工具包里尽可能多的包含渗透和审计工具。Kali 实现了这个目标。大多数做安全测试的开源工具都被囊括在内。


**相关** ： [4 个极好的为隐私和安全设计的 Linux 发行版](https://www.maketecheasier.com/linux-distros-designed-for-privacy-security/ "4 Great Linux Distros Designed for Privacy and Security")


### 为什么是 Kali？


![Kali Linux Desktop](/data/attachment/album/201802/23/184825od5kpbwkbgwwu5ca.jpg "Kali Linux Desktop")


[Kali](https://www.offensive-security.com/kali-linux-vmware-virtualbox-image-download/) 是由 [Offensive Security](https://www.offensive-security.com/) 公司开发和维护的。它在安全领域是一家知名的、值得信赖的公司，它甚至还有一些受人尊敬的认证，来对安全从业人员做资格认证。


Kali 也是一个简便的安全解决方案。Kali 并不要求你自己去维护一个 Linux 系统，或者你自己去收集软件和依赖项。它是一个“交钥匙工程”。所有这些繁杂的工作都不需要你去考虑，因此，你只需要专注于要审计的真实工作上，而不需要去考虑准备测试系统。


### 如何使用它？


Kali 是一个 Linux 发行版。与任何一个其它的 Linux 发行版一样，你可以将它永久安装到一个硬盘上。那样它会工作的更好，但是你不能将它作为一个日常使用的操作系统。因为它是为渗透测试构建的，这就是你使用它的全部理由。


最好是将 Kali 制作为自启动发行版。你可以将 Kali 刻录到一张 DVD 或者是制作到一个自启动 U 盘上来运行它。你没有必要在一个 Kali 上安装任何软件或者保存任何文件。你可以在需要测试一个系统时随时来启动它。它也有非常好的灵活性，可以让运行 Kali 的机器随时运行在想要测试的网络上。


### Kali 可以做什么？


Kali 里面有很多的安全工具而不是别的。这就是它能做的事。不管怎么说，Kali 就是一个安全工具。


![Kali Zenmap](/data/attachment/album/201802/23/184835rphy1t6pro066gow.jpg "Kali Zenmap")


它有像 NMap 和 Wireskark 这样的经典信息采集工具。


![Kali Linux Wireshark](/data/attachment/album/201802/23/184843eixdd6dviol34tn3.jpg "Kali Linux Wireshark")


Kali 也有面向 WiFi 的工具，像 Aircrack-ng、Kismet、以及 Pixie。


对于破解密码，它也有像 Hydra、Crunch、Hashcat、以及 John the Ripper 这样的工具。


![Kali Metasploit](/data/attachment/album/201802/23/184858ir255on00mlmnozn.jpg "Kali Metasploit")


还有更多的成套工具，包括 Metasploit 和 Burp Suite。


这些只是 Kali 缺省内置的一小部分安全工具。完整的了解这些工具需要很多的时间，但是，你可以清楚地看到许多非常流行的工具它都有。


### Kali 是为你准备的吗？


Kali 并不是为普通用户准备的。它并不是一个运行在你的笔记本电脑上的普通 Linux 发行版，而是一个很酷的“黑客操作系统“。如果你使用这个操作系统，那么你将会运行着一个缺乏安全保障的系统，因为 Kali 被设计为以 root 权限运行。它自身并不安全，并且它的配置也与普通的 Linux 发行版不一样。它是一个攻击型工具，而不是一个防御型工具。


Kali 并不是个玩具。你可以使用它内置的工具去做一些会产生真实伤害的危险的事（你懂的），那将给你带来很多真实的麻烦。对于一个未受到严格教育的用户来说，做一些严重违法的事情是很容易的，并且之后你就会发现自己被陷入很无助的境地。


说了这么多，但是，Kali 对于一个专业用户来说，它是一个极好的工具。如果你是一个网络管理员，想对你的网络做一个真实的测试，Kali 可以做到你所希望的一切事情。Kali 也有一些优秀的开发工具，用于去实时审计它们的应用程序。


当然，如果你正好有兴趣学习关于安全的知识，你可以在某些受控环境中去使用 Kali，它可以教你学习很多的非常优秀的知识。


Kali Linux 是许多优秀的安全工具的集合。对于专业用户来说，它有难以置信的好处，但是对于一些不怀好意的人来说，也可以产生很多大麻烦。小心地使用 Kali，充分利用它的巨大优势。如果不这样的话，你将在某个地方（你懂的）度过你的余生。




---


via: <https://www.maketecheasier.com/what-is-kali-linux-and-do-you-need-it/>


作者：[Nick Congleton](https://www.maketecheasier.com/author/nickcongleton/) 译者：[qhwdw](https://github.com/qhwdw) 校对：[wxy](https://github.com/wxy)


本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出


OK
![Install Kali Linux 00 Featured Image](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-00-featured-image.jpg)

If you have heard a young would-be hacker talking about penetration testing, chances are, you would inevitably hear what Kali Linux is. It is a Debian-based Linux distribution that aims to be a complete toolkit for security professionals.

Kali Linux includes a lot of penetration testing and security auditing tools by default. In that regard, Kali delivers, too. Many of the best open-source tools for conducting security tests are in here and ready to use.

## Why Use Kali Linux?

One of the biggest selling points of [Kali Linux](https://www.kali.org/) is that it is a convenient all-in-one solution. For the most part, Kali doesn’t require you to maintain a Linux machine and collect your own software. All of the set-up work is out of the way, and you can fully focus on testing the system you’ve set out to audit.

![Kali Linux Desktop Install Kali Linux 01 Default Desktop](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-01-default-desktop.jpg)

Aside from that, Kali is also being developed and maintained by Offensive Security. They’re a well-known and trusted institution in cybersecurity. You can be confident that the tools that Kali Linux provides are both trustworthy and highly effective.

## What Tools Are Available in Kali Linux?

Kali Linux has many security tools. It has classic information-gathering tools, like NMap, Wireshark and [dig](https://www.maketecheasier.com/use-dig-command-linux/).

![Kali Zenmap Install Kali Linux 02 Zenmap Sample](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-02-zenmap-sample.jpg)

![Kali Linux Wireshark Install Kali Linux 03 Wireshark Sample](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-03-wireshark-sample.png)

Kali also has WiFi-centered tools like Aircrack-ng, Kismet, and Pixie.

For attacking passwords, there are tools like Hydra, Crunch, Hashcat, and John the Ripper.

![Kali Metasploit Install Kali Linux 04 Metasploit Sample](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-04-metasploit-sample.png)

Then there are more complete suites of tools. For example, you can [use the Metasploit Framework](https://www.maketecheasier.com/install-metasploit-framework-ubuntu-linux/) and Burp Suite out of the box.

That’s only a small percentage of the [security tools available in Kali](https://www.maketecheasier.com/penetration-tools-kali-linux/). It would take a long time to go through all of them, but you can clearly see that many of the more popular tools are represented.

## Installing Kali Linux

Kali is a Linux distribution. Like any other, you can install it permanently on a hard drive or virtual machine. That works fine, but you don’t want to use Kali as a daily driver operating system. It’s purposely built for penetration testing, and that’s about all that you should use it for.

**Note**: you can also [install Kali Linux on your Android phone](https://www.maketecheasier.com/install-kali-linux-nethunter-android-phone/).

### Kali’s System Requirements

Before you can install Kali Linux, have the following resources available:

[Ample amount of disk space](https://www.maketecheasier.com/using-du-free-up-disk-space-linux/)in your machine. In most cases, Kali should work well on a 32 GB flash disk.- 64-bit processor and 2 to 4 GB of onboard memory, as Kali Linux uses a number of resource-intensive programs in its toolkit.
- Your machine needs to have the ability to either do virtualization or external media booting.

It is important to note that Kali works best as a live distribution. You can either burn it to a USB driver or run it off of a virtual machine. You don’t need to install anything on Kali or save any files, so spinning it up on the occasion where you need to test a system is great. It also affords the flexibility to get a Kali machine running anywhere on whichever network you’re looking to test.

This article focuses on installing Kali Linux on VirtualBox as a live system in Ubuntu 22.04 LTS.

![Install Kali Linux 05 Ubuntu Neofetch](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-05-ubuntu-neofetch.png)

### Installing Kali Linux on VirtualBox

To install Kali Linux, obtain the [virtualization client you want to use](https://www.maketecheasier.com/virtualbox-vs-vmware/). In this case, I am installing VirtualBox:

sudo apt install virtualbox p7zip

![Install Kali Linux 06 Install Virtualbox](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-06-install-virtualbox.png)

Obtain a copy of Kali Linux from its official website. For example, you can run the following command to download it from the terminal:

wget https://kali.download/virtual-images/kali-2022.3/kali-linux-2022.3-virtualbox-amd64.7z p7zip -d ./kali-linux-2022.3-virtualbox-amd64.7z

![Install Kali Linux 07 Extract Kali Files](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-07-extract-kali-files.png)

Install Kali Linux as a virtual machine by pressing `Win`, then typing “virtualbox.”

![Install Kali Linux 08 Virtualbox Run](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-08-virtualbox-run.png)

Once VirtualBox is up and running, import the Kali Linux virtual machine to the client by either clicking “Add” or pressing `Ctrl` + `A`.

![Install Kali Linux 09 Virtualbox Add Vm](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-09-virtualbox-add-vm.png)

VirtualBox will open a small file browser where you can look for the virtual machine definition for Kali. In my case, I am saving this file to my Downloads folder.

![Install Kali Linux 10 File Browser Select](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-10-file-browser-select.png)

## Using Kali Linux

Run Kali as a virtual environment in your machine. Double-click on the Kali Linux entry on VirtualBox’s left sidebar.

![Install Kali Linux 11 Run Kali Vm](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-11-run-kali-vm.jpg)

A small window will open and immediately boot the virtual machine in your system.

![Install Kali Linux 12 Bootloader Menu](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-12-bootloader-menu.jpg)

Kali will load to a simple login screen. By default, the username and password for the system should be “kali.”

![Install Kali Linux 13 Logging In](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-13-logging-in.jpg)

**Tips**: learn how you can [access an Android phone using Kali Linux](https://www.maketecheasier.com/access-android-phone-using-kali-linux/).

### Finding and Running Tools in Kali

Once you are logged in, use the tools available in Kali to conduct security auditing. For example, press the Kali logo on the desktop’s upper-left corner to get an organized list of programs in the system.

![Install Kali Linux 14 Main Menu](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-14-main-menu.jpg)

One of the most basic tools you will use in Kali is nmap ([more details on using nmap here](https://www.maketecheasier.com/use-nmap-check-linux-open-ports/)). This is a small utility that allows you to do a comprehensive scan of machines in a network. To use this, click the “Terminal Emulator” entry in the Kali menu.

![Install Kali Linux 15 Run Terminal Emulator](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-15-run-terminal-emulator.png)

Run `nmap -h`

to print a brief overview of the available options and flags for the program. Knowing that, run the following command to scan the entire subnet for any online clients:

nmap -sP 192.168.68.0/24

![Install Kali Linux 16 Run Nmap Sample](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-16-run-nmap-sample.jpg)

Lastly, Kali Linux also provides powerful data processing tools, such as Hashcat, that you can use to crack hashes. For example, you can run `hashcat -h`

to look at some of the program’s options.

![Install Kali Linux 17 Run Hashcat Sample](https://www.maketecheasier.com/assets/uploads/2022/11/install-kali-linux-17-run-hashcat-sample.jpg)

Aside from that, you can also run the following command to test whether your machine can run Hashcat on a reasonable speed:

`hashcat -b`

## Is Kali Linux For You?

Kali is not for everyone. It’s not a regular Linux distribution to run on your laptop to think you’re cool for running a “hacker OS.” If you do so, you’re running a potentially insecure system. Kali is designed to run as root. It’s not secured and configured like a regular Linux distribution. It’s an offensive tool, not a defensive one.

Kali isn’t a joke, either. You can do some real damage with the tools that it comes bundled with and can get you into real trouble. It’s all too easy for an uneducated user to do something seriously illegal and find themselves in a situation no one wants to be in.

With all that having been said, Kali is a great tool for professional use. If you’re a network admin and want to conduct real-world tests on your network, Kali might be just what you need. Kali also has some excellent tools for developers (especially web devs) to audit their applications before they go live.

Of course, if you want to learn more about security the right way, you can certainly use Kali in a virtual environment to teach yourself or follow any number of great courses.

Kali Linux is a bundle of many of the best security tools. It’s an incredible asset for professionals, but it can also be a big problem in the hands of the uninitiated. Use Kali with care and take advantage of its awesome potential. If you don’t, you’re going to end up having a really bad time.

## Frequently Asked Questions

### Is it safe to browse the internet using Kali Linux?

While you can use the Internet in Kali, the developers of the distribution did not design the system for casual Web browsing, so there are many missing multimedia tools and codecs in the default install, and some websites may not function properly when viewed in Kali Linux.

### Is it possible to install third-party programs in Kali?

Similar to a regular Debian installation, you can install any third-party application through the `apt`

program.

Aside from that, you can also use both snap and flatpak packages in Kali.

### Are there any disadvantages to installing Kali Linux on a virtual machine?

One of the biggest issues with running Kali on a virtual machine is that it will not have any direct hardware access. Any program that depends on hardware acceleration will either run poorly or not work at all. For example, both Hashcat and John the Ripper are tools that heavily rely on direct hardware access.

Image credit: [Unsplash](https://unsplash.com/photos/vJP-wZ6hGBg). All alterations and screenshots by Ramces Red.

Our latest tutorials delivered straight to your inbox