Kali Linux — Beginner to Advanced

Installation, essential tools, and how to actually start using Kali for security practice — not just installing it and never opening a terminal.

Installing Kali

Recommended for beginners: run Kali inside VirtualBox/VMware as a virtual machine, not as your main OS
Download the official VM image from kali.org — never a third-party mirror
Give it at least 4GB RAM and 40GB disk space

Official Kali Downloads kali.org VirtualBox Free virtualization

Tools worth learning first

Nmap — network scanning and reconnaissance, the very first tool to learn
Burp Suite — web app testing (guide linked in Tools section)
Wireshark — packet capture and traffic analysis (guide linked in Tools section)
Metasploit — exploitation framework (guide linked in Tools section)

First things to actually do

Set up a home lab: Kali VM + a deliberately vulnerable VM (like Metasploitable2 or OWASP Juice Shop)
Run your first Nmap scan against your own lab machine, never against systems you don't own or have permission to test
Follow along a TryHackMe "Nmap" room to understand output, not just commands

cOmrade tip

Only ever scan/attack systems you own or have explicit written permission to test. Unauthorized scanning of real-world systems is illegal in Pakistan under the Prevention of Electronic Crimes Act (PECA).

← Back to cOmrade