Kali Linux 2026.2, the second release of 2026, is now available, bringing nine new tools to the distribution’s network repositories, updates to the Kali NetHunter Android penetration testing platform, and a range of infrastructure improvements aimed at security professionals and ethical hackers.

Nine New Tools

The Kali Team expanded the toolset with the following additions:

  • arsenal-ng: A Go-based command library bundling more than 200 cybersecurity cheat-sheets
  • hydra-gtk: A GTK+ GUI frontend for the well-known fast network logon cracker, re-added to the repos
  • legba: A multiprotocol credentials bruteforcer, password sprayer, and enumerator
  • oletools: Tools for analyzing MS OLE2 files and Microsoft Office documents
  • penelope: A shell handler for post-exploitation workflows
  • shell-gpt: A command-line productivity tool backed by AI large language models
  • tailscale: A secure connectivity and VPN platform
  • tookie-osint: An OSINT tool for locating social media accounts
  • uro: A URL decluttering utility for crawling and pentesting engagements

Kernel and Desktop Updates

The Kali kernel has been upgraded to version 6.19, with the 7.0 kernel available in the kali-experimental branch for those who want to test ahead. On the desktop side, the distribution now ships with GNOME 50 and KDE Plasma 6.6.

Faster VM Boot Times

Pre-built VM images no longer include graphics firmware, and the installer can now detect virtual machine environments to skip firmware installation automatically. The result is an initrd reduced from roughly 200 MB to 60 MB for VM users, cutting boot time by approximately three times in testing on QEMU. Bare-metal installations are unaffected and continue to receive the full firmware bundle.

Service Helper Script Improvements

The Kali Team updated helper scripts that manage services, making it simpler to check whether services are running, track their status, list default credentials, and retrieve access information for active services.

NetHunter Updates

Kali NetHunter, the Android-focused penetration testing platform, received several notable changes in this release:

  • Magisk standalone kernel flashing support, allowing users to open a newly built kernel installer zip directly in the Magisk app
  • New kernels with qcacld3 injection support, plus kernels for additional device versions and models
  • Bare-metal support extended to more phones via NetHunter Pro
  • A new EvilTwin (Wi-Fi Fake AP) tab featuring a password verification captive portal, along with an iptables fix that restores Android Hotspot functionality after using Wifipumpkin3 or EvilTwin
  • Faster app launch times and bug fixes in the custom commands and chroot manager

Upgrading

Existing Kali installations can be updated by pointing the apt sources list to kali-rolling and running a full upgrade. Users on Windows Subsystem for Linux are advised to migrate to WSL 2 for better graphical application support. Full release notes are available on the Kali Linux website.