The developers have released Kali Linux 2025.3 — the third release of this year, featuring 10 new tools, Nexmon support, and improvements to NetHunter.
Nexmon is a framework for patching the firmware of Broadcom and Cypress Wi‑Fi chips, enabling monitor mode and frame injection. Its support was announced in July 2025, when Raspberry Pi users were promised enhanced Wi‑Fi features.
“In Kali 2025.1, we changed the way we package the Raspberry Pi kernel and also moved to a new major version,” the developers write. “Now Nexmon and Raspberry Pi 5 support is back! Other devices, besides the Raspberry Pi, can also use Nexmon.”
Additionally, this release brings a number of updates to Kali NetHunter (including support for the Samsung S10) and Kali NetHunter Car Hacking (including an updated UI and numerous bug fixes). The Kali team also promised to release a video in the future on how to use CARsenal, with a visual demonstration of its various capabilities.
As for the new tools, Kali Linux 2025.3 includes ten:
- Caido — the client-side component of the caido web security auditing toolkit (graphical/desktop interface, i.e., the main interface);
- Caido-cli — the server-side component of caido;
- Detect It Easy (DiE) — file type detection;
- Gemini CLI — an open-source AI agent that brings Gemini capabilities to the terminal;
- krbrelayx — a toolkit for Kerberos relay attacks and abusing unconstrained delegation;
- ligolo-mp — a multi-user pivoting solution;
- llm-tools-nmap — allows an LLM to perform network reconnaissance and vulnerability scanning via nmap;
- mcp-kali-server — an MCP configuration for connecting an AI agent to Kali;
- patchleaks — analyzes patches and provides detailed vulnerability descriptions so they can be quickly verified or exploited;
- vwifi-dkms — configures dummy Wi‑Fi networks, and lets you connect to and disconnect from them.
Among other changes and improvements in this release are:
- The VPN IP panel plugin in Xfce now lets you select the monitored interface, making it easy to copy the VPN connection’s IP address to the clipboard;
- Kali is dropping support for ARMel (Acorn RISC Machine, Little-Endian);
- It’s now possible to install kernel modules with Magisk, but the developers warn this is still an experimental feature.
