Information Gathering
- ace-voip
- Amap
- APT2
- arp-scan
- Automater
- bing-ip2hosts
- braa
- CaseFile
- CDPSnarf
- cisco-torch
- copy-router-config
- DMitry
- dnmap
- dnsenum
- dnsmap
- DNSRecon
- dnstracer
- dnswalk
- DotDotPwn
- enum4linux
- enumIAX
- EyeWitness
- Faraday
- Fierce
- Firewalk
- fragroute
- fragrouter
- Ghost Phisher
- GoLismero
- goofile
- hping3
- ident-user-enum
- InSpy
- InTrace
- iSMTP
- lbd
- Maltego Teeth
- masscan
- Metagoofil
- Miranda
- nbtscan-unixwiz
- Nikto
- Nmap
- ntop
- OSRFramework
- p0f
- Parsero
- Recon-ng
- SET
- SMBMap
- smtp-user-enum
- snmp-check
- SPARTA
- sslcaudit
- SSLsplit
- sslstrip
- SSLyze
- Sublist3r
- THC-IPV6
- theHarvester
- TLSSLed
- twofi
- Unicornscan
- URLCrazy
- Wireshark
- WOL-E
- Xplico
Vulnerability Analysis
- BBQSQL
- BED
- cisco-auditing-tool
- cisco-global-exploiter
- cisco-ocs
- cisco-torch
- copy-router-config
- Doona
- DotDotPwn
- HexorBase
- jSQL Injection
- Lynis
- Nmap
- ohrwurm
- openvas
- Oscanner
- Powerfuzzer
- sfuzz
- SidGuesser
- SIPArmyKnife
- sqlmap
- Sqlninja
- sqlsus
- THC-IPV6
- tnscmd10g
- unix-privesc-check
- Yersinia
Exploitation Tools
- Armitage
- Backdoor Factory
- BeEF
- cisco-auditing-tool
- cisco-global-exploiter
- cisco-ocs
- cisco-torch
- Commix
- crackle
- exploitdb
- jboss-autopwn
- Linux Exploit Suggester
- Maltego Teeth
- Metasploit Framework
- MSFPC
- RouterSploit
- SET
- ShellNoob
- sqlmap
- THC-IPV6
- Yersinia
Wireless Attacks
- Airbase-ng
- Aircrack-ng
- Airdecap-ng and Airdecloak-ng
- Aireplay-ng
- airgraph-ng
- Airmon-ng
- Airodump-ng
- airodump-ng-oui-update
- Airolib-ng
- Airserv-ng
- Airtun-ng
- Asleap
- Besside-ng
- Bluelog
- BlueMaho
- Bluepot
- BlueRanger
- Bluesnarfer
- Bully
- coWPAtty
- crackle
- eapmd5pass
- Easside-ng
- Fern Wifi Cracker
- FreeRADIUS-WPE
- Ghost Phisher
- GISKismet
- Gqrx
- gr-scan
- hostapd-wpe
- ivstools
- kalibrate-rtl
- KillerBee
- Kismet
- makeivs-ng
- mdk3
- mfcuk
- mfoc
- mfterm
- Multimon-NG
- Packetforge-ng
- PixieWPS
- Pyrit
- Reaver
- redfang
- RTLSDR Scanner
- Spooftooph
- Tkiptun-ng
- Wesside-ng
- Wifi Honey
- wifiphisher
- Wifitap
- Wifite
- wpaclean
Forensics Tools
Web Applications
- apache-users
- Arachni
- BBQSQL
- BlindElephant
- Burp Suite
- CutyCapt
- DAVTest
- deblaze
- DIRB
- DirBuster
- fimap
- FunkLoad
- Gobuster
- Grabber
- hURL
- jboss-autopwn
- joomscan
- jSQL Injection
- Maltego Teeth
- Nikto
- PadBuster
- Paros
- Parsero
- plecost
- Powerfuzzer
- ProxyStrike
- Recon-ng
- Skipfish
- sqlmap
- Sqlninja
- sqlsus
- ua-tester
- Uniscan
- w3af
- WebScarab
- Webshag
- WebSlayer
- WebSploit
- Wfuzz
- WhatWeb
- WPScan
- XSSer
- zaproxy
Stress Testing
- DHCPig
- FunkLoad
- iaxflood
- Inundator
- inviteflood
- ipv6-toolkit
- mdk3
- Reaver
- rtpflood
- SlowHTTPTest
- t50
- Termineter
- THC-IPV6
- THC-SSL-DOS
Sniffing & Spoofing
- bettercap
- Burp Suite
- DNSChef
- fiked
- hamster-sidejack
- HexInject
- iaxflood
- inviteflood
- iSMTP
- isr-evilgrade
- mitmproxy
- ohrwurm
- protos-sip
- rebind
- responder
- rtpbreak
- rtpinsertsound
- rtpmixsound
- sctpscan
- SIPArmyKnife
- SIPp
- SIPVicious
- SniffJoke
- SSLsplit
- sslstrip
- THC-IPV6
- VoIPHopper
- WebScarab
- Wifi Honey
- Wireshark
- xspy
- Yersinia
- zaproxy
Password Attacks
- BruteSpray
- Burp Suite
- CeWL
- chntpw
- cisco-auditing-tool
- CmosPwd
- creddump
- crowbar
- crunch
- findmyhash
- gpp-decrypt
- hash-identifier
- Hashcat
- HexorBase
- THC-Hydra
- John the Ripper
- Johnny
- keimpx
- Maltego Teeth
- Maskprocessor
- multiforcer
- Ncrack
- oclgausscrack
- ophcrack
- PACK
- patator
- phrasendrescher
- polenum
- RainbowCrack
- rcracki-mt
- RSMangler
- SecLists
- SQLdict
- Statsprocessor
- THC-pptp-bruter
- TrueCrack
- WebScarab
- wordlists
- zaproxy
Maintaining Access
- CryptCat
- Cymothoa
- dbd
- dns2tcp
- HTTPTunnel
- Intersect
- Nishang
- polenum
- PowerSploit
- pwnat
- RidEnum
- sbd
- shellter
- U3-Pwn
- Webshells
- Weevely
- Winexe
Hardware Hacking
Reverse Engineering
Reporting Tools
Kali Linux Metapackages
Metapackages give you the flexibility to install specific subsets of tools based on your particular needs. For instance, if you are going to conduct a wireless security assessment, you can quickly create a custom Kali ISO and include the kali-linux-wireless metapackage to only install the tools you need.
For more information, please refer to the original Kali Linux Metapackages blog post.
kali-linux: The Base Kali Linux System
- kali-desktop-common
- apache2
- apt-transport-https
- atftpd
- axel
- default-mysql-server
- exe2hexbat
- expect
- florence
- gdisk
- git
- gparted
- iw
- lvm2
- mercurial
- mlocate
- netcat-traditional
- openssh-server
- openvpn
- p7zip-full
- parted
- php
- php-mysql
- rdesktop
- rfkill
- samba
- screen
- snmp
- snmpd
- subversion
- sudo
- tcpdump
- testdisk
- tftp
- tightvncserver
- tmux
- unrar | unar
- upx-ucl
- vim
- whois
- zerofree
kali-linux-full: The Default Kali Linux Install
- kali-linux
- 0trace
- ace-voip
- afflib-tools
- aircrack-ng
- amap
- apache-users
- apktool
- armitage
- arp-scan
- arping | iputils-arping
- arpwatch
- asleap
- automater
- autopsy
- backdoor-factory
- bbqsql
- bdfproxy
- bed
- beef-xss
- binwalk
- blindelephant
- bluelog
- blueranger
- bluesnarfer
- bluez
- bluez-hcidump
- braa
- btscanner
- bulk-extractor
- bully
- burpsuite
- cabextract
- cadaver
- cdpsnarf
- cewl
- cgpt
- cherrytree
- chirp
- chkrootkit
- chntpw
- cisco-auditing-tool
- cisco-global-exploiter
- cisco-ocs
- cisco-torch
- clang
- clusterd
- cmospwd
- commix
- copy-router-config
- cowpatty
- creddump
- crunch
- cryptcat
- cryptsetup
- curlftpfs
- cutycapt
- cymothoa
- darkstat
- davtest
- dbd
- dc3dd
- dcfldd
- ddrescue
- deblaze
- dex2jar
- dhcpig
- dirb
- dirbuster
- dmitry
- dnmap
- dns2tcp
- dnschef
- dnsenum
- dnsmap
- dnsrecon
- dnstracer
- dnswalk
- doona
- dos2unix
- dotdotpwn
- dradis
- driftnet
- dsniff
- dumpzilla
- eapmd5pass
- edb-debugger
- enum4linux
- enumiax
- ethtool
- ettercap-graphical
- ewf-tools
- exiv2
- exploitdb
- extundelete
- fcrackzip
- fern-wifi-cracker
- ferret-sidejack
- fierce
- fiked
- fimap
- findmyhash
- flasm
- foremost
- fping
- fragroute
- fragrouter
- framework2
- ftester
- funkload
- galleta
- gdb
- ghost-phisher
- giskismet
- golismero
- gpp-decrypt
- grabber
- guymager
- hackrf
- hamster-sidejack
- hash-identifier
- hashcat
- hashcat-utils
- hashdeep
- hashid
- hexinject
- hexorbase
- hotpatch
- hping3
- httrack
- hydra
- hydra-gtk
- i2c-tools
- iaxflood
- ifenslave
- ike-scan
- inetsim
- intersect
- intrace
- inviteflood
- iodine
- irpas
- jad
- javasnoop
- jboss-autopwn
- john
- johnny
- joomscan
- jsql-injection
- keimpx
- killerbee
- king-phisher
- kismet
- laudanum
- lbd
- leafpad
- libfindrtp
- libfreefare-bin
- libhivex-bin
- libnfc-bin
- lynis
- macchanger
- magicrescue
- magictree
- maltego
- maltego-teeth
- maskprocessor
- masscan
- mc
- mdbtools
- mdk3
- medusa
- memdump
- metasploit-framework
- mfcuk
- mfoc
- mfterm
- mimikatz
- minicom
- miranda
- miredo
- missidentify
- mitmproxy
- msfpc
- multimac
- nasm
- nbtscan
- ncat-w32
- ncrack
- ncurses-hexedit
- netdiscover
- netmask
- netsed
- netsniff-ng
- netwag
- nfspy
- ngrep
- nikto
- nipper-ng
- nishang
- nmap
- ohrwurm
- ollydbg
- onesixtyone
- ophcrack
- ophcrack-cli
- oscanner
- p0f
- pack
- padbuster
- paros
- pasco
- passing-the-hash
- patator
- pdf-parser
- pdfid
- pdgmail
- perl-cisco-copyconfig
- pev
- pipal
- pixiewps
- plecost
- polenum
- powerfuzzer
- powersploit
- protos-sip
- proxychains
- proxystrike
- proxytunnel
- pst-utils
- ptunnel
- pwnat
- pyrit
- python-faraday
- python-impacket
- python-peepdf
- python-rfidiot
- python-scapy
- radare2
- rainbowcrack
- rake
- rcracki-mt
- reaver
- rebind
- recon-ng
- recordmydesktop
- recoverjpeg
- recstudio
- redfang
- redsocks
- reglookup
- regripper
- responder
- rifiuti
- rifiuti2
- rsmangler
- rtpbreak
- rtpflood
- rtpinsertsound
- rtpmixsound
- safecopy
- safecopy
- sakis3g
- samdump2
- sbd
- scalpel
- scrounge-ntfs
- sctpscan
- sendemail
- set
- sfuzz
- sidguesser
- siege
- siparmyknife
- sipcrack
- sipp
- sipvicious
- skipfish
- sleuthkit
- smali
- smbmap
- smtp-user-enum
- sniffjoke
- snmpcheck
- socat
- sparta
- spectools
- spike
- spooftooph
- sqldict
- sqlitebrowser
- sqlmap
- sqlninja
- sqlsus
- sslcaudit
- ssldump
- sslh
- sslscan
- sslsniff
- sslsplit
- sslstrip
- sslyze
- statsprocessor
- stunnel4
- suckless-tools
- sucrack
- swaks
- t50
- tcpflow
- tcpick
- tcpreplay
- termineter
- tftpd32
- thc-ipv6
- thc-pptp-bruter
- thc-ssl-dos
- theharvester
- tlssled
- tnscmd10g
- truecrack
- twofi
- u3-pwn
- ua-tester
- udptunnel
- unicornscan
- uniscan
- unix-privesc-check
- urlcrazy
- vboot-kernel-utils
- vboot-utils
- vim-gtk
- vinetto
- vlan
- voiphopper
- volafox
- volatility
- vpnc
- wafw00f
- wapiti
- wce
- webacoo
- webscarab
- webshells
- weevely
- wfuzz
- whatweb
- wifi-honey
- wifitap
- wifite
- windows-binaries
- winexe
- wireshark
- wol-e
- wordlists
- wpscan
- xpdf
- xprobe
- xspy
- xsser
- xtightvncviewer
- yersinia
- zaproxy
- zenmap
- zim
kali-linux-all: All Available Packages in Kali Linux
- kali-linux-forensic
- kali-linux-full
- kali-linux-gpu
- kali-linux-pwtools
- kali-linux-rfid
- kali-linux-sdr
- kali-linux-top10
- kali-linux-voip
- kali-linux-web
- kali-linux-wireless
- android-sdk
- device-pharmer
- freeradius
- hackersh
- htshells
- ident-user-enum
- ismtp
- linux-exploit-suggester
- openvas
- parsero
- python-halberd
- sandi
- set
- shellnoob
- shellter
- teamsploit
- vega
- veil
- webhandler
- websploit
kali-linux-sdr: Software Defined Radio (SDR) Tools in Kali
- kali-linux
- chirp
- gnuradio
- gqrx-sdr
- gr-iqbal
- gr-osmosdr
- hackrf
- kalibrate-rtl
- libgnuradio-baz
- multimon-ng
- rtlsdr-scanner
- uhd-host
- uhd-images
kali-linux-gpu: Kali Linux GPU-Powered Tools
- kali-linux
- oclgausscrack
- oclhashcat
- pyrit
- truecrack
kali-linux-wireless: Wireless Tools in Kali
- kali-linux
- kali-linux-sdr
- aircrack-ng
- asleap
- bluelog
- blueranger
- bluesnarfer
- bluez
- bluez-hcidump
- btscanner
- bully
- cowpatty
- crackle
- eapmd5pass
- fern-wifi-cracker
- giskismet
- iw
- killerbee
- kismet
- libfreefare-bin
- libnfc-bin
- macchanger
- mdk3
- mfcuk
- mfoc
- mfterm
- oclhashcat
- pyrit
- python-rfidiot
- reaver
- redfang
- rfcat
- rfkill
- sakis3g
- spectools
- spooftooph
- ubertooth
- wifi-honey
- wifitap
- wifite
- wireshark
kali-linux-web: Kali Linux Web-App Assessment Tools
- kali-linux
- apache-users
- apache2
- arachni
- automater
- bbqsql
- beef-xss
- blindelephant
- burpsuite
- cadaver
- clusterd
- cookie-cadger
- cutycapt
- davtest
- default-mysql-server
- dirb
- dirbuster
- dnmap
- dotdotpwn
- eyewitness
- ferret-sidejack
- ftester
- funkload
- golismero
- grabber
- hamster-sidejack
- hexorbase
- httprint
- httrack
- hydra
- hydra-gtk
- jboss-autopwn
- joomscan
- jsql-injection
- laudanum
- lbd
- maltego
- maltego-teeth
- medusa
- mitmproxy
- ncrack
- nikto
- nishang
- nmap
- oscanner
- owasp-mantra-ff
- padbuster
- paros
- patator
- php
- php-mysql
- plecost
- powerfuzzer
- proxychains
- proxystrike
- proxytunnel
- python-halberd
- redsocks
- sidguesser
- siege
- skipfish
- slowhttptest
- sqldict
- sqlitebrowser
- sqlmap
- sqlninja
- sqlsus
- sslcaudit
- ssldump
- sslh
- sslscan
- sslsniff
- sslsplit
- sslstrip
- sslyze
- stunnel4
- thc-ssl-dos
- tlssled
- tnscmd10g
- ua-tester
- uniscan
- vega
- wafw00f
- wapiti
- webacoo
- webhandler
- webscarab
- webshells
- weevely
- wfuzz
- whatweb
- wireshark
- wpscan
- xsser
- zaproxy
kali-linux-forensic: Kali Linux Forensic Tools
- kali-linux
- afflib-tools
- apktool
- autopsy
- bulk-extractor
- cabextract
- chkrootkit
- creddump
- dc3dd
- dcfldd
- ddrescue
- dumpzilla
- edb-debugger
- ewf-tools
- exiv2
- extundelete
- fcrackzip
- firmware-mod-kit
- flasm
- foremost
- galleta
- gdb
- gparted
- guymager
- hashdeep
- inetsim
- iphone-backup-analyzer
- jad
- javasnoop
- libhivex-bin
- lvm2
- lynis
- magicrescue
- mdbtools
- memdump
- missidentify
- nasm
- ollydbg
- p7zip-full
- parted
- pasco
- pdf-parser
- pdfid
- pdgmail
- pev
- polenum
- pst-utils
- python-capstone
- python-distorm3
- python-peepdf
- radare2
- recoverjpeg
- recstudio
- reglookup
- regripper
- rifiuti
- rifiuti2
- safecopy
- safecopy
- samdump2
- scalpel
- scrounge-ntfs
- sleuthkit
- smali
- sqlitebrowser
- tcpdump
- tcpflow
- tcpick
- tcpreplay
- truecrack
- unrar | unar
- upx-ucl
- vinetto
- volafox
- volatility
- wce
- wireshark
- xplico
- yara
kali-linux-voip: Kali Linux VoIP Tools
- kali-linux
- ace-voip
- dnmap
- enumiax
- iaxflood
- inviteflood
- libfindrtp
- nmap
- ohrwurm
- protos-sip
- rtpbreak
- rtpflood
- rtpinsertsound
- rtpmixsound
- sctpscan
- siparmyknife
- sipcrack
- sipp
- sipvicious
- voiphopper
- wireshark
kali-linux-pwtools: Kali Linux Password Cracking Tools
- kali-linux
- kali-linux-gpu
- chntpw
- cmospwd
- crunch
- fcrackzip
- findmyhash
- gpp-decrypt
- hash-identifier
- hashcat
- hashcat-utils
- hashid
- hydra
- hydra-gtk
- john
- johnny
- keimpx
- maskprocessor
- medusa
- mimikatz
- ncrack
- ophcrack
- ophcrack-cli
- pack
- passing-the-hash
- patator
- pdfcrack
- pipal
- polenum
- rainbowcrack
- rarcrack
- rcracki-mt
- rsmangler
- samdump2
- seclists
- sipcrack
- sipvicious
- sqldict
- statsprocessor
- sucrack
- thc-pptp-bruter
- truecrack
- twofi
- wce
- wordlists
kali-linux-top10: Top 10 Kali Linux Tools
- kali-linux
- aircrack-ng
- burpsuite
- hydra
- john
- maltego
- maltego-teeth
- metasploit-framework
- nmap
- sqlmap
- wireshark
- zaproxy
kali-linux-rfid: Kali Linux RFID Tools
- kali-linux
- libfreefare-bin
- libnfc-bin
- mfcuk
- mfoc
- mfterm
- python-rfidiot
kali-linux-nethunter: Kali Linux NetHunters Default Tools
- kali-defaults
- kali-root-login
- aircrack-ng
- apache2
- armitage
- autossh
- backdoor-factory
- bdfproxy
- beef-xss
- burpsuite
- dbd
- desktop-base
- device-pharmer
- dnsmasq
- dnsutils
- dsniff
- ettercap-text-only
- exploitdb
- florence
- giskismet
- gpsd
- hostapd
- isc-dhcp-server
- iw
- kismet
- kismet-plugins
- libffi-dev
- librtlsdr-dev
- libssl-dev
- macchanger
- mdk3
- metasploit-framework
- mfoc
- mitmf
- mitmproxy
- nethunter-utils
- nishang
- nmap
- openssh-server
- openvpn
- p0f
- php
- pixiewps
- postgresql
- ptunnel
- python-dnspython
- python-lxml
- python-m2crypto
- python-mako
- python-netaddr
- python-pcapy
- python-pip
- python-setuptools
- python-twisted
- recon-ng
- rfkill
- socat
- sox
- sqlmap
- sslsplit
- sslstrip
- tcpdump
- tcptrace
- tightvncserver
- tinyproxy
- tshark
- wifite
- wipe
- wireshark
- wpasupplicant
- xfce4
- xfce4-goodies
- xfce4-places-plugin
- zip