Kali Linux 2025.3 released with 10 New Tools, Nexmon Wi-Fi Injection for Raspberry Pi and Vagrant Updates

by | Sep 25, 2025 | News

Post Views: 210

Join our Patreon Channel and Gain access to 70+ Exclusive Walkthrough Videos.

Reading Time: 3 Minutes

Release summary

Kali Linux 2025.3 is now available, delivering a mix of infrastructure refreshes, wireless improvements and fresh tooling. Key highlights since the 2025.2 release include updated Packer & Vagrant support, Nexmon integration for Raspberry Pi Wi-Fi monitor/injection capabilities, and 10 new tools added to the repositories.

Packer & Vagrant — toolchain refresh

HashiCorp tooling used by many Kali workflows received updates: Packer and Vagrant have been refreshed in the distribution, improving builders and development workflows that rely on VM images and appliance automation. This benefits infrastructure-as-code users who build and distribute Kali images for labs and training.

Nexmon support — Raspberry Pi wireless injection

A major usability win for wireless testers: Kali 2025.3 adds Nexmon support enabling internal monitor mode and packet injection on Raspberry Pi built-in Wi-Fi chips. That brings affordable, fully capable wireless testing to a broader range of Pi devices and makes compact test rigs easier to deploy for red teams and wireless researchers.

Xfce VPN IP plugin — configurable interface

The Xfce VPN IP panel plugin introduced in 2024.1 gets a practical usability upgrade: you can now select which network interface the plugin monitors. Right-click the plugin → Preferences → update the “Command” parameter to choose a different interface; this is useful if you run multiple VPNs or want to monitor non-default adapters. If the plugin isn’t visible, add the “Generic Monitor” plugin via Panel Preferences → Items.

See Also: So, you want to be a hacker?
Offensive Security, Bug Bounty Courses

Discover your weakest link. Be proactive, not reactive. Cybercriminals need just one flaw to strike.

Ten new tools (quick rundown)

Kali 2025.3 adds ten packages to network repositories, expanding capabilities across web testing, protocol abuse, LLM integrations, and pivoting:

Caido — client GUI for the Caido web security auditing toolkit
Caido-cli — server/backend component of the Caido toolkit
Detect It Easy (DiE) — file type identification utility
Gemini CLI — open-source AI agent for terminal-based Gemini access
krbrelayx — Kerberos relaying / unconstrained delegation abuse toolkit
ligolo-mp — multiplayer pivoting / lateral movement solution
llm-tools-nmap — enabling LLM-driven network discovery and scanning with nmap
mcp-kali-server — MCP config to connect an AI agent to Kali
patchleaks — detects security fixes and summarizes patches for rapid validation (or analysis)
vwifi-dkms — create virtual Wi-Fi networks (dummy interfaces) for testing

These additions broaden both classic offensive toolsets and modern workflows that incorporate AI/LLM tooling.

Kali NetHunter — mobile and device updates

NetHunter continues to advance: the project brought a new budget-friendly device with internal monitor mode and injection beyond the Nexus 5 era — the Samsung Galaxy S10 port (Nexmon firmware patches + NetHunter kernel). The collaboration (Nexmon, kernel port, and app stability fixes) now provides a viable, modern device for mobile wireless testing. Installation guides for Nexmon + NetHunter are available in the project docs.

CARsenal (NetHunter Car Hacking) — revamp and features

CARsenal received a substantial update and refactor:

Settings moved to the menu bar; service commands editable via long-press
New RFCOMM Connect service and improved tools integration
Simulator (formerly ICSim) and UDSim added for richer simulation/testing
New MSF tab to run automotive Metasploit modules against hardware bridges
UI refreshes, extensive bug fixes, and full documentation rewrite for 2025.3 content
New kernel support for CAN on OnePlus6 LineageOS 22.2 (Android 15) — OnePlus6 (6T pending)

The team warns: do not test CARsenal on a production/daily-driver vehicle — use isolated lab hardware.

What’s coming next

Looking ahead to 2025.4, expect more UI polish, improved Metasploit terminal screens, simulator enhancements and additional device/kernel support. CARsenal maintainers plan video demos and continued refinement; community feedback and bug reports are encouraged.

Where to get it & upgrade notes

Kali 2025.3 is available through the usual Kali channels and network repositories. Users should:

Update existing installs via apt update && apt full-upgrade (follow Kali release guidance).
Review the new tools list and post-install any packages you need.
Consult NetHunter/CARsenal installation guides for device-specific steps (especially for Nexmon patches and kernels).
Test Nexmon and wireless features in a lab environment before operational use.

Are u a security researcher? Or a company that writes articles about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing? If you want to express your idea in an article contact us here for a quote: [email protected]

Source: www.kali.org

Read the full blog:
Kali Blog Release