Kali Linux Arsenal: 50+ Tools You NEED in 2024

Blacksec · Aug 3, 2026

Kali Linux Arsenal: 50+ Tools You NEED in 2024

> Posted by: linux_ghost | Rank: Elite Member | Joined: 2022 [/I]

This is for EDUCATIONAL and AUTHORIZED TESTING purposes only. Don't come to me crying if you get caught using these on production systems without permission.

Alright, let's get straight to it.[/B]

I've been running Kali for 5+ years across hundreds of engagements. Most guys install it and have no idea what half the tools do. Today I'm breaking down the 50 tools I actually use, organized by category. No fluff, just what works.

---

━━━ INFORMATION GATHERING ━━━

Code:

# Network Recon nmap # The king of network scanning masscan # Super fast port scanner (10M+ packets/sec) netdiscover # Active/passive ARP scanning arp-scan # Layer 2 device discovery # DNS Enumeration dnsrecon # Comprehensive DNS enumeration dnswalk # DNS zone transfer tool dnsenum # DNS enumeration with brute force fierce # DNS reconnaissance tool theharvester # Email, subdomain, employee harvesting dig # DNS lookup utility host # Simple DNS lookup # Web Recon whatweb # Website fingerprinting wpscan # WordPress vulnerability scanner subfinder # Subdomain discovery amass # Attack surface management assetfinder # Asset discovery

My workflow:

Code:

amass enum -d target.com -o amass_results.txt

→

Code:

whatweb -i results.txt

→

Code:

nmap -sV -sC -oA initial_scan target

---

━━━ VULNERABILITY ANALYSIS ━━━

Code:

nmap --script vuln # Built-in vuln scanning openvas # Full vulnerability scanner nessus # Enterprise vuln scanner (free for home) nikto # Web server scanner arachni # Web app scanner skipfish # Web app security scanner wapiti # Web vulnerability scanner acunetix # Commercial but amazing zaproxy # OWASP ZAP - free web scanner

Pro tip: Run

Code:

nmap --script vuln

first. It's fast and catches a lot of low-hanging fruit before you invest time in heavier tools.

---

━━━ WEB APP EXPLOITATION ━━━

Code:

sqlmap # SQL injection powerhouse burpsuite # Web proxy & testing (community is free) commix # Command injection tool xsser # XSS automation droopescan # Drupal scanner joomscan # Joomla scanner dotDotPwn # Path traversal fuzzer skipfish # Web app scanner w3af # Web application attack framework

---

━━� OVERCREDENTIAL HARVESTING ━━━

Code:

hydra # Network logon cracker (16+ protocols) john # John the Ripper - password recovery hashcat # Advanced GPU-accelerated cracking cewordlist # Wordlist generator crunch # Wordlist generator rockyou.txt # The classic wordlist (usually in /usr/share/wordlists) seclists # Massive wordlist collection

My cracking setup:

Code:

# ZIP files john --format=zip lockprotected.zip # NTLM hashes hashcat -m 1000 hashes.txt rockyou.txt # PDF passwords pdfcrack encrypted.pdf # WiFi (WPA/WPA2) aircrack-ng capture.cap -w wordlist.txt

---

━━━ WIRELESS ATTACKS ━━━

Code:

aircrack-ng # WiFi cracking suite wash # WPS scanner reaver # WPS brute force bully # Alternative WPS tool cowpatty # Precomputed PMK attack pixiewps # WPS pixie dust attack kismet # Wireless sniffer fern-wifi # GUI WiFi attacker

---

━━━ POST-EXPLOITATION ━━━

Code:

meterpreter # Metasploit's shell mimikatz # Credential extraction (Windows) powersploit # PowerShell post-exploitation empire # PowerShell post-exploitation agent pwdump # Windows password dump g pp # Linux privilege escalation checker linux-exploit-suggester # Linux privilege escalation

Quick post-exploit checklist:

Code:

# Windows whoami /priv query user net user /domain net group "Domain Admins" /domain set printenv route print netstat -ano # Linux whoami id uname -a cat /etc/passwd cat /etc/shadow crontab -l systemctl list-units ps aux netstat -tulpn

---

━━━ EXPLOITATION FRAMEWORKS ━━━

Code:

metasploit # The industry standard beef # Browser exploitation framework veil # Evasion framework for metershellcode shellter # AV evasion for executable payloads veil-evasion # Next-gen evasion covenant # .NET C2 framework sliver # Modern C2 framework merlin # Cross-platform C2

---

━━━ PRIVILEGE ESCALATION ━━━

Code:

# Windows winPEAS # Windows enumeration Seatbelt # Windows security posture scanner PowerUp # PowerShell privilege escalation Get-System # Multiple escalation techniques JuicyPotato # Token manipulation (CVE-2019-1388) PrintSpoofer # Print spooler exploit (CVE-2021-1675) GodPotato # JuicyPotato alternative

---

━━━ NETWORK ATTACKS ━━━

Code:

mitmproxy # Intercepting proxy bettercap # Network attack framework dsniff # Network credential harvesting ettercap # ARP poisoning & MITM tcpdump # Packet capture wireshark # Network protocol analyzer col # Network steganography netcat # The swiss army knife of networking socat # Socket cat - advanced netcat

---

━━━ REPORTING ━━━

Code:

reportlab # Python PDF generation report-merlin # Automated reporting brutereport # Brute forcer reporting nessus-exporter # Nessus to various formats arachni-reporter # Arachni reporting

---

━━━ MY DAILY DRIVEN KALI SETUP ━━━

Code:

#!/bin/bash # My daily Kali automation script echo "[*] Starting daily security workflow..." # Update system sudo apt update && sudo apt upgrade -y # Update tool databases sudo npm install -g whatweb sudo gem install faraday sudo pip3 install --upgrade requests beautifulsoup4 # Quick network sweep echo "[*] Scanning local network..." sudo netdiscover -r 192.168.1.0/24 -P # Check for any open services on localhost echo "[*] Checking local services..." sudo netstat -tulpn # Quick DNS check echo "[*] DNS reconnaissance..." dig example.com AXFR @ns1.example.com 2>/dev/null echo "[*] Workflow complete. Happy hacking!"

---

━━━ TL;DR ━━━

Code:

✅ Nmap + Masscan for recon ✅ Burp Suite + SQLMap for web apps ✅ Hydra + John for credentials ✅ Metasploit + Empire for exploitation ✅ Mimikatz for credential harvesting ✅ WinPEAS + Linux-privilege-escalator for post-exploitation ✅ Wireshark + tcpdump for network analysis ✅ Automate your workflow with bash scripts

---

What tools are in your daily rotation? Drop 'em below.
Next: Advanced Burp Suite techniques nobody teaches.

Last edited by linux_ghost; 6 hours ago.

[SIG]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
linux_ghost | Elite Member | Kali Linux Specialist
"The OS is the weapon, the tool is just the handle"
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━[/SIG][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b]

Kali Linux Arsenal: 50+ Tools You NEED in 2024

Blacksec

Administrator