Monday, 14 February 2022

Kali Linux 2022.1 Release (Visual Updates, Kali Everything ISOs, Legacy SSH)

Today we are pushing out the first Kali Linux release of the new year with Kali Linux 2022.1, and just in time for Valentine’s Day! This release brings various visual updates and tweaks to existing features, and is ready to be downloaded or upgraded if you have an existing Kali Linux installation.

The summary of the changelog since the 2021.4 release from December 2021 is:

• Visual Refresh - Updated wallpapers and GRUB theme
• Shell Prompt Changes - Visual improvements to improve readability when copying code
• Refreshed Browser Landing Page - Firefox and Chromium homepage has had a makeover to help you access everything Kali you need
• Kali Everything Image - An all-packages-in-one solution now available to download
• Kali-Tweaks Meets SSH - Connect to old SSH servers using legacy SSH protocols and ciphers
• VMware i3 Improvements - Host-guest features properly work now on i3
• Accessibility Features - Speech synthesis is back in the Kali installer
• New Tools - Various new tools added, many from ProjectDiscovery!

Besides that, we have been working on a new feature, which just isn’t quite ready yet (as the documentation is still in progress!). It’s a large one, so it’s going to have its own blog post once ready to help demonstrate its importance to us. This one is for you bare-metal installers!

Edit: Now out!

Visual Refresh: Theme Updates

As promised back in Kali 2021.2, beginning with this release (2022.1) going forwards, our yearly 20xx.1 versions will be the only releases to have the main visual updates. Using a yearly lifecycle, it makes it easier to recognize the different versions of Kali Linux over time. This update includes new wallpapers for desktop, login, and boot displays, in addition to a refreshed installer theme which you may have seen if you have recently updated.

Moreover, the functions, theme and layout of the boot menu present in our ISO images have been improved. With these changes, it makes them consistent throughout. Previously, the menus in the UEFI and the BIOS boot menus had different options, designs, and were also written differently, making them confusing. Throw into the mix that there were multiple differences between “installer”, “live”, “netinstall” and “mini” options as well. All of these problems have been addressed and they now have a universal feel to them all.

Shell Prompt Changes

You talked, we listened. We have made a few tweaks which we hope will make your life easier since our last prompt update in 2020.4. Examples of this problem may be when writing a professional pentesting report or collaborating on debugging code and sharing the terminal, the right-side prompt (which had the exit code and the number of background processes) may of gotten in the way. So it has been removed from our default shell, ZSH. Along with this, the skull in the root prompt has been replaced with a simple ㉿. For those that miss the root skull (💀), you can easily edit your ~/.zshrc:

┌──(root㉿kali)-[~]
└─# sed -i 's/prompt_symbol=㉿/prompt_symbol=💀/' ~/.zshrc

┌──(root㉿kali)-[~]
└─# source ~/.zshrc

┌──(root💀kali)-[~]
└─#

If you do a fresh install of Kali 2022.1, you will have these changes. If you are upgrading, you will need to manually apply these edits by doing the following:

┌──(kali㉿kali)-[~]
└─$ cp -i /etc/skel/.{bash,zsh}rc ~/

Refreshed Browser Landing Page

This release comes with a fresh new look for the default landing page shipped inside Kali. Utilizing the refreshed documentation sites (Kali-Docs and Kali-Tools), the search function will help you find almost anything you could need using Kali Linux!

Kali Everything Image: Everything in one place

This release will welcome a new flavor, the “kali-linux-everything” image. This allows for a complete offline standalone image (ISO), for those who require all of Kali’s tools to be pre-installed. Unlike previously, users will not be required to download the “kali-linux-everything” packages during Kali’s setup via a network mirror, as they will be located on the same media, but the image is much larger to initially download due to this. Because of the size increase, (~2.8GB to ~9.4GB), these images will be only initially offered using a technology that its designed to handle the traffic, BitTorrent. Additionally, as there are more packages, it will take longer to also install Kali.

If you understand what you are doing, and this sounds like something you would like, grab the torrents and give it a try!

To learn more about the grouping of Kali’s packages, please see our documentation about metapackages.

This will not include Kaboxer applications at this point in time, due to a known limitation.

Kali-Tweaks: Legacy SSH Made Easy

There is a new setting in the kali-tweaks Hardening section! It is now possible to configure Kali’s SSH client for Wide Compatibility, which means that old algorithms and ciphers are enabled. Thanks to that, connecting to old servers that use those is now straightforward, no need to pass additional options explicitly on the command-line.

The purpose of this setting is to make it easier to discover vulnerable SSH servers, just like explained previously this opens up more potential attack surfaces (which is how this came about, due to a recent pentest, a Uninterruptible Power Supply gave us our foothold to complete network pwnage).

Here is what the Hardening screen looks like currently:

VMware i3 Improvements

For users that use Kali in a guest VM with the i3 desktop environment (kali-desktop-i3), VMware’s host-guest features (e.g. drag ’n’ drop, copy/paste) were not enabled by default, it had to be done manually. This is now fixed and you should not have anything to do, it should work out of the box. This was enabled with package i3-wm 4.20.1-1.

Accessibility: Talk To Me

We have always tried to support as many users of Kali as possible. This is true from our early releases through to today.

To help blind and visually impaired users, we are pleased to say speech synthesis is back in the Kali setup. When we released Kali 2021.4, the sound in the installer broke. This was due to a packaging bug in the sound driver, and unfortunately this issue went unnoticed for a while. This is now fixed. Big thanks to isfr8585 who reported the issue!

New Tools in Kali

Between numerous packages updates, there has been various new tools added! A quick breakdown of what has been added (to the network repositories):

• dnsx - Fast and multi-purpose DNS toolkit allow to run multiple DNS queries
• email2phonenumber - An OSINT tool to obtain a target’s phone number just by having his email address
• naabu - A fast port scanner with a focus on reliability and simplicity
• nuclei - Targeted scanning based on templates
• PoshC2 - A proxy aware C2 framework with post-exploitation and lateral movement
• proxify - Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go

Shout-out to ProjectDiscovery for their work & tools!

Kali ARM Updates

A list of packages that were previously not available for the arm64 architecture, and that have been added in this release:

• feroxbuster
• ghidra

Bluetooth should now be fixed on the RaspberryPi images, aside from the Zero 2 W, which we are still hunting down a fix for and will release an updated image when it is ready. There was a change with the bootloader that changed the serial device name being used.

Image file names have changed to be a bit more verbose with their naming, instead of using short-hand or nicknames of devices.

The build scripts now have a documentation page that explains them a bit more in depth.

The RaspberryPi Zero 2 W device has documentation now as well.

Community Shout-outs

These are people from the public who have helped Kali and the team for the last release. And we want to praise them for their work (we like to give credit where due!):

• Greg Myers who helped to clean up our kali-docs
• Void Your Warranty who contributed a very helpful encrypted standalone USB kali-docs page
• D for his contributions on the Gatworks Ventana and Gateworks Newport Kali ARM build-scripts
• 1y for contributing the i.MX6ULL EVK Kali ARM build-script, which we accidentally dropped during the refactoring. It has now been restored.

Anyone can help out, anyone can get involved!

Download Kali Linux 2022.1

Fresh Images: So what are you waiting for? Start downloading already!

Seasoned Kali Linux users are already aware of this, but for the ones who are not, we do also produce weekly builds that you can use as well. If you cannot wait for our next release and you want the latest packages (or bug fixes) when you download the image, you can just use the weekly image instead. This way you will have fewer updates to do. Just know that these are automated builds that we do not QA like we do our standard release images. But we gladly take bug reports about those images because we want any issues to be fixed before our next release!

Existing Installs: If you already have an existing Kali Linux installation, remember you can always do a quick update:

┌──(kali㉿kali)-[~]
└─$ echo "deb  http://http.kali.org/kali  kali-rolling main non-free contrib" | sudo tee /etc/apt/sources.list

┌──(kali㉿kali)-[~]
└─$ sudo apt update && sudo apt -y full-upgrade

┌──(kali㉿kali)-[~]
└─$ cp -rbi /etc/skel/. ~

┌──(kali㉿kali)-[~]
└─$ [ -f /var/run/reboot-required ] && sudo reboot -f

You should now be on Kali Linux 2022.1. We can do a quick check by doing:

┌──(kali㉿kali)-[~]
└─$ grep VERSION /etc/os-release
VERSION="2022.1"
VERSION_ID="2022.1"
VERSION_CODENAME="kali-rolling"

┌──(kali㉿kali)-[~]
└─$ uname -v
#1 SMP Debian 5.15.15-2kali1 (2022-01-31)

┌──(kali㉿kali)-[~]
└─$ uname -r
5.15.0-kali3-amd64

NOTE: The output of uname -r may be different depending on the system architecture.

As always, should you come across any bugs in Kali, please submit a report on our bug tracker. We will never be able to fix what we do not know is broken! And Twitter is not a Bug Tracker!