Kali Linux 2025.4, released with substantial desktop environment improvements, full Wayland support across virtual machines, and three powerful new hacking tools, including the much-anticipated Wifipumpkin3.
Released on December 12, 2025, this update focuses on modernizing the user experience while maintaining Kali’s position as the premier penetration testing platform. The release brings GNOME 49, KDE Plasma 6.5, and refreshed Xfce theming, alongside kernel 6.16 and critical infrastructure updates.
GNOME 49 marks a significant milestone by becoming completely Wayland-only, removing X11 session support entirely. The desktop environment has been thoroughly refreshed with polished themes across all Kali variants.
Most notably, the aging Totem video player has been replaced with Showtime, a modern GTK4-based application that offers a distraction-free viewing experience with chromeless windows and fading controls.
The application grid now organizes Kali’s extensive toolkit into folders matching the menu structure, making tool discovery significantly more intuitive. Users also gain a long-awaited terminal shortcut (Ctrl+Alt+T or Win+T), bringing GNOME in line with other desktop environments.
KDE Plasma has jumped to version 6.5, incorporating two major releases’ worth of improvements. Key enhancements include more flexible window tiling, a redesigned screenshot tool with advanced editing features, quick access to pinned clipboard items directly in the panel, and fuzzy matching support in KRunner that finds applications even when misspelled.
Xfce receives comprehensive color theme support for the first time, achieving feature parity with GNOME and KDE. Users can now fully customize colors through the Appearance application for icons, GTK 3/4 windows, and Xfce’s window manager, with Qt programs configurable via qt5ct or qt6ct.
With GNOME’s transition to Wayland-only and KDE’s longstanding Wayland default since Kali Linux 2023.1, the development team prioritized ensuring seamless virtual machine support.
This release brings complete Wayland functionality to VirtualBox, VMware, and QEMU environments, with clipboard sharing and window scaling working flawlessly.
The move addresses the final barrier to Wayland adoption for penetration testers who rely heavily on virtualized environments. All major VM software now fully supports Wayland as the guest operating system, eliminating compatibility concerns that previously kept some users on X11.
Kali 2025.4 introduces three specialized tools to the network repositories:
bpf-linker serves as a simple static linker for Berkeley Packet Filter programs, essential for eBPF-based security tooling.
evil-winrm-py provides a Python-based implementation for executing commands on remote Windows machines via the Windows Remote Management protocol. The tool supports multiple authentication methods, including NTLM, Pass-the-Hash, certificate-based authentication, and Kerberos, with features like file upload/download, command history, and colorized output.
hexstrike-ai functions as an MCP server enabling AI agents to autonomously run security tools, representing a significant step toward AI-assisted penetration testing workflows.
The kernel has been upgraded to version 6.16, bringing performance improvements, USB audio offload support, XFS large atomic writes, and optimized compilation options for local CPU architectures.
Wifipumpkin3 Integration Enhances Wireless Testing
While not among the three “new” tools, Wifipumpkin3 receives significant attention in this release through enhanced NetHunter integration. The powerful rogue access point framework supports Evil Twin attacks, captive portal credential harvesting, DNS spoofing, traffic interception, and custom phishing pages.
The NetHunter app now includes a Wifipumpkin3 preview tab with updated community templates, including phishing pages for Facebook, Instagram, iCloud, and Snapchat.
Built in Python and using GStreamer, Wifipumpkin3 enables comprehensive wireless network auditing through man-in-the-middle attacks and transparent proxies.
NetHunter Expands Android 16 Support
Kali NetHunter brings extensive mobile updates, including Android 16 support for the Samsung Galaxy S10 family (S10, S10e, S10 Plus, and S10 5G) running LineageOS 23, complete with CAN bus support and internal wireless injection capabilities. The OnePlus Nord also gains Android 16 compatibility, while the Xiaomi Mi 9 now supports Android 15.
The Terminal app has been restored to full functionality after community efforts, now supporting all Magisk versions with interactive mode, preventing CTRL+C from closing terminal sessions. Magisk installer now supports module installation, with installed kernel modules appearing in the Modules tab.
The Live image now exceeds the 5GB Cloudflare CDN limit and is now available only as a BitTorrent download, joining the Everything image. At 4.7GB, the Live image contains a fully functional pre-installed Kali system compressed with xz, plus the installer and minimal package pool.
A hidden seasonal feature, Halloween mode, remains accessible via the command kali-undercover –halloween, dressing the desktop with themed aesthetics. The standard Kali Undercover mode continues to provide Windows 10-like theming for working in public spaces discreetly.
Fresh images are available through official download channels, with weekly builds providing the absolute latest packages for those who cannot wait for the next quarterly release.
┌──(kali㉿kali)-[~]
└─$ echo "deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware" | sudo tee /etc/apt/sources.list
[...]┌──(kali㉿kali)-[~]
└─$ sudo apt update && sudo apt -y full-upgrade
[...]┌──(kali㉿kali)-[~]
└─$ cp -vrbi /etc/skel/. ~/
[...]┌──(kali㉿kali)-[~]
└─$ [ -f /var/run/reboot-required ] && sudo reboot -f
Existing installations can upgrade through standard package management commands, bringing systems to kernel 6.16.8-1kali1.
┌──(kali㉿kali)-[~]
└─$ grep VERSION /etc/os-release
VERSION="2025.4"
VERSION_ID="2025.4"
VERSION_CODENAME="kali-rolling"┌──(kali㉿kali)-[~]
└─$ uname -v
#1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24)┌──(kali㉿kali)-[~]
└─$ uname -r
6.16.8+kali-amd64
The Kali team has expanded its mirror infrastructure with three new Asian mirrors in India and South Korea, plus one additional North American mirror, improving download speeds and global availability.
Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.
