Exploring the Latest Tools in Kali Linux 2024.4: A Hacker’s Perspective

Cyber Security

The long-awaited final launch of Kali Linux for version 2024.4 has arrived, brimming with numerous enhancements, fresh hacking utilities, and robust functionalities, ranging from an updated default Python edition to the discontinuance of i386 kernel backing.

Kali Linux 2024.4 is crafted to maintain pentesters and fans at the forefront of the industry. Kali Linux is equipped with a myriad of Information Security utilities precisely tailored for a diverse array of penetration testing tasks, such as:

  • Security Investigation
  • Retrospective Analysis
  • Red Team Evaluation
  • Network Penetration Testing
  • Digital Forensics
  • Security Vulnerability Oversight

Users can now fetch the recent edition or upgrade their existing setups. Here is a thorough examination of the key highlights presented in this edition.

Kali Linux 2024.4 Loaded with Fresh Tools

The release of Kali Linux 2024.4 incorporates 14 novel tools to amplify its already noteworthy arsenal. Standouts comprise:

  • bloodyad – Active Directory privilege escalation framework
  • certi – Request certificates to ADCS and unveil templates
  • chainsaw – Swiftly search and explore Windows forensic artifacts
  • findomain – Quickest and most comprehensive solution for domain recognition
  • hexwalk – Hex analyzer, editor, and viewer
  • linkedin2username – Formulate username lists for corporations on LinkedIn
  • mssqlpwner – Interact and dominate MSSQL servers
  • openssh-ssh1 – Secure Shell (SSH) client for the outdated SSH1 protocol
  • proximoth – Tool for identifying control frame attack vulnerabilities
  • python-pipx – Execute binaries from Python packages within isolated environments
  • sara – RouterOS Security Inspector
  • web-cache-vulnerability-scanner – CLI tool written in Go for examining web cache poisoning
  • xsrfprobe – Advanced Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit
  • zenmap – Front end for the Network Mapper (nmap) (no longer requiring zenmap-kbx)

These utilities and multiple updated libraries enrich the pentesting workflow, solidifying Kali Linux’s renown as the favored platform for security experts.

Python 3.12 Becomes the Default Edition

Kali Linux 2024.4 introduces Python 3.12 as the new default interpreter, signaling the cessation of pip in favor of pipx for installing external Python packages.

This move prioritizes isolated environments for improved application governance—a shift aimed at reinforcing security and productivity.

Kali Linux says farewell to the overdue i386 kernel and images, aligning with Debian’s choice to discontinue support for this 32-bit architecture. While i386 packages will persist for 64-bit systems, the era of forming i386 images has officially concluded.

Diminution of DSA Keys in SSH

The latest rendition of OpenSSH (9.8p1) further enhances security by phase-out DSA keys. Kali Linux persists in providing broad compatibility for archaic protocols via its kali-tweaks tool, although users targeting outdated SSH servers can revert to the enclosed SSH1 client.

For pentesters, evaluating if a destination server maintains outdated functionalities is a crucial step in unveiling conceivable vulnerabilities.

Recognizing this necessity, the Kali Linux team has optimized the process with kali-tweaks, a command-line utility now presenting the capacity to speedily enable all legacy features simultaneously.

“This utility is a simple menu enabling you to tweak various Kali settings. In the Hardening section, you can reconfigure SSH for Wide Compatibility (as opposed to the default Strong Security), streamlining the capabilities of your SSH client.”

Adjustments for Raspberry Pi Imager

A game-changer for Raspberry Pi aficionados, Kali Linux now offers customizations directly through the Raspberry Pi Imager software. Users can preset configurations such as usernames, Wi-Fi credentials, and SSH keys before booting, enhancing the experience to be seamless.

GNOME 47 with Varied Color Schemes

The graphical user interface receives an aesthetic upgrade with GNOME 47, introducing support for a variety of accent color choices. Kali has synchronized these settings across icon themes and traditional GTK themes, ensuring a unified visual appearance.

Kali NetHunter Refinements

In this edition, Kali NetHunter—an Android penetration testing platform witnesses various improvements:

  • Introduction of Wifipumpkin3, a substitute for the Mana toolkit enabling the creation of counterfeit access points with web access, even on mobile networks.
  • Users can now install kernels directly from the app sans needing recovery mode.
  • The NetHunter Store, fueled by F-Droid, has been updated to offer superior usability and security.

Device support has been broadened, encompassing 100 compatible devices, including the inaugural Android.

Device compatible with Android 15 (Xiaomi Mi A3).

  • Added compatibility for Realme X7 Max 5G (RMX3031)
  • Added support for Xiaomi Mi 9 Lite / CC9 (pyxis)
  • Enhanced compatibility for Nokia 6.1 & 6.1 Plus (drg)
  • Enhanced compatibility for Realme C11 (RMX2185)
  • Enhanced compatibility for Xiaomi Mi 9T (davinci)
  • Enhanced compatibility for Xiaomi Mi A3 (xiaomi-laurel)
  • Enhanced compatibility for Xiaomi Pocophone F1 (beryllium)
  • Introduction of initial support for Android 15 devices (Xiaomi Mi A3 (xiaomi-laurel))
  • Generating an increased number of pre-configured images
  • The reference file “devices.cfg“, which catalogues everything, has now been transformed into YAML format as “devices.yml“

Assistance for Raspberry Pi 5 and 500

Kali Linux continues to display robust support for ARM systems by adding customization alternatives and enhancements for user experience. The latest supported devices include the Raspberry Pi 500 and Realme X7 Max 5G. Moreover, there has also been an improvement in graphical performance for Raspberry Pi 5, with Kernel Mode Setting now enabled by default.

The updated Kali Forums now operate on Discourse, with an engaged community involvement. Extensive updates have also been made to the documentation, incorporating new sections on NetHunter installation, pipx usage, and SSH configurations.

This release acknowledges the contributions made by community members and security experts who have enhanced tools, documentation, and device compatibility.

Obtaining Kali Linux 2024.4

For New Installations: Download the most recent ISO images from Kali’s official website. For users looking for the latest updates, Kali also provides weekly builds.

For Current Users: Simply upgrade your current installation by executing the following commands:

sudo apt update && sudo apt -y full-upgrade

Kali Linux 2024.4 underlines the platform’s dedication to innovation and community-driven progress. The updates and utilities in this version are specifically designed for penetration testers, developers, and cybersecurity experts. For detailed instructions or bug reports, visit the official Kali website or contact them through their bug tracker.

The article on Kali Linux 2024.4 Released With New Hacking Tools – What’s Inside! was initially published on Cyber Security News.