Installation — Kali Setup

Ctrl+F: tool name · apt install · pip install · gem install · git clone

How to install anything (mechanics): Install Download and Run — .deb, git clone, pip, PATH, make tools runnable everywhere.

This note: Per-tool install commands (lookup by name).

Approach	Use
Install Download and Run	How-to — file types, git clone, PATH, .deb, pip install .
This note	Per-tool install command lookup
Individual tool notes	Short Install (Kali) block at top — links back here

Most Kali images ship with recon/password tools preinstalled. Run which TOOL first; install only if missing.

sudo apt update

---

📌 Exam-prep batch (common apt packages)

One shot for tools often missing or worth confirming:

sudo apt update && sudo apt install -y \
  default-mysql-client \
  postgresql-client \
  redis-tools \
  ldap-utils \
  dnsutils \
  snmp \
  nbtscan \
  samba-common-bin \
  smbclient \
  crackmapexec \
  freerdp2-x11 \
  rlwrap \
  steghide \
  libimage-exifperl-perl \
  peass \
  krb5-user \
  python3-impacket \
  nmap \
  gobuster \
  ffuf \
  sqlmap \
  nikto \
  hydra \
  hashcat \
  john \
  exploitdb \
  netcat-openbsd \
  curl \
  openssl \
  awscli \
  pidgin \
  sqlite3

---

📌 Recon & web

Tool	Install	Preinstalled?	Note
Nmap	sudo apt install -y nmap	Usually yes
netdiscover	sudo apt install -y netdiscover	Usually yes	ARP host discovery
Port Knocking - knock	sudo apt install -y knockd	Usually yes	Client: knock
RustScan	sudo apt install -y rustscan or releases	Sometimes	See RustScan > Install
Gobuster	sudo apt install -y gobuster	Usually yes
ffuf	sudo apt install -y ffuf	Usually yes
Burp Suite	portswigger.net/burp — .jar or Kali menu	Community in Kali	Not via apt
SQLMap	sudo apt install -y sqlmap	Usually yes
Nikto	sudo apt install -y nikto	Usually yes
WPScan	sudo apt install -y wpscan	Usually yes	API token optional
CMSeeK - cmseek	sudo apt install -y cmseek	Yes	CMS detection — 180+ CMSs
searchsploit	sudo apt install -y exploitdb	Usually yes	DB: searchsploit -u
DNS (dig & host)	sudo apt install -y dnsutils	Usually yes	dig, host, nslookup
ldapsearch	sudo apt install -y ldap-utils	Usually yes
snmpwalk	sudo apt install -y snmp	Usually yes
nbtscan	sudo apt install -y nbtscan	Usually yes	NetBIOS / 137-139
Mail (SMTP POP3 IMAP)	sudo apt install -y swaks (SMTP test)	Partial	telnet/nc often enough
Pidgin	sudo apt install -y pidgin	No	XMPP client
BeanShooter	JAR download — see BeanShooter > Install	No	Needs Java + ysoserial

# Recon quick install
sudo apt install -y nmap netdiscover knockd gobuster ffuf sqlmap nikto wpscan cmseek exploitdb dnsutils ldap-utils snmp nbtscan

---

📌 Databases

Tool	Install	Includes
MySQL client	sudo apt install -y default-mysql-client	mysql, mysqldump
MSSQL	sudo apt install -y python3-impacket	impacket-mssqlclient
PostgreSQL	sudo apt install -y postgresql-client	psql
Redis	sudo apt install -y redis-tools	redis-cli
MongoDB	sudo apt install -y mongodb-clients or mongosh	mongosh
SQLite	sudo apt install -y sqlite3	Usually preinstalled
Oracle	Oracle Instant Client + sqlplus	Manual; or Oracle odat via git

# MySQL client (includes mysqldump) — recommended
sudo apt update
sudo apt install -y default-mysql-client
 
# All DB clients
sudo apt install -y default-mysql-client postgresql-client redis-tools sqlite3

---

📌 Password attacks

Tool	Install	Preinstalled?
Hashcat	sudo apt install -y hashcat	Usually yes
Hydra	sudo apt install -y hydra	Usually yes
John	sudo apt install -y john	Usually yes
CeWL	sudo apt install -y cewl	Usually yes

sudo apt install -y hashcat hydra john cewl

---

📌 SMB / Windows enum (Linux)

Tool	Install	Preinstalled?
Impacket	sudo apt install -y python3-impacket	Usually yes
CrackMapExec - nxc	sudo apt install -y crackmapexec	Often yes (netexec / nxc)
nxcspray	pip install nxcspray or git — see nxcspray > Install	No
enum4linux	sudo apt install -y enum4linux-ng or enum4linux	Usually yes
smbclient	sudo apt install -y smbclient	Usually yes
smbmap	sudo apt install -y smbmap	Sometimes
rpcclient	sudo apt install -y samba-common-bin	Usually yes
rpcdump	via Impacket	Usually yes

sudo apt install -y python3-impacket crackmapexec enum4linux smbclient smbmap samba-common-bin
pip3 install certipy-ad bloodyAD pypykatz --break-system-packages

---

📌 Active Directory (Kali-side)

Tool	Install	Note
krb5-user	sudo apt install -y krb5-user	kinit, kpasswd, klist
Certipy & Certify	pip install certipy-ad	Certify.exe = Windows download
bloodyAD	pip install bloodyAD
pypykatz	pip3 install pypykatz --break-system-packages	Offline LSASS / hive parser
Kerbrute	releases	Binary to /usr/local/bin
Responder	sudo apt install -y responder or git	See Responder
Bloodhound + Sharphound	Docker / bloodhound-cli	See note
RustHound	cargo install rusthound or releases	See RustHound > Install
ntlm_theft	git clone + pip install -r requirements.txt	See note
Impacket Kerberos scripts	python3-impacket	getTGT, GetUserSPNs, etc.
Shadow Credentials - pywhisker	git — see note	PKINITtools + pywhisker
krbrelayx	git clone + pip	dnstool · addspn · printerbug · krbrelayx.py

git clone https://github.com/dirkjanm/PKINITtools.git
git clone https://github.com/ShutdownRepo/pywhisker.git
git clone https://github.com/dirkjanm/krbrelayx.git
git clone https://github.com/micahvandeusen/gMSADumper.git
pip3 install -r PKINITtools/requirements.txt
pip3 install -r krbrelayx/requirements.txt --break-system-packages

Windows tools on Kali (apt + transfer):

Tool	Install (Kali)	Binary path
Rubeus	sudo apt install -y rubeus	/usr/share/windows-resources/rubeus/Rubeus.exe

Windows-only (transfer to target — download if not in apt):

Tool	Get it
Mimikatz	gentilkiwi/mimikatz
SharpHound	BloodHound collectors
PowerView	PowerSploit — Recon
PowerUp	PowerSploit Privesc/PowerUp.ps1
PowerUpSQL	NetSPI/PowerUpSQL — transfer to target
RunasCs	antonioCoco/RunasCs releases
Certify	GhostPack/Certify

sudo apt install -y krb5-user samba-common-bin
pip3 install certipy-ad bloodyAD pypykatz --break-system-packages

---

📌 Remote access & pivoting

Tool	Install	Preinstalled?
SSH client	sudo apt install -y openssh-client	Yes
ssh-audit	pip install ssh-audit	No
evil-winrm	sudo apt install -y evil-winrm or gem install evil-winrm	Often yes
xfreerdp	sudo apt install -y freerdp2-x11	Usually yes
rdesktop	sudo apt install -y rdesktop	Optional
Chisel	releases	No — binary
FTP client	sudo apt install -y ftp	Usually yes
Netcat	sudo apt install -y netcat-openbsd	Usually yes
Penelope	sudo apt install -y penelope	Kali package
rlwrap	sudo apt install -y rlwrap	Usually yes
Socat	sudo apt install -y socat	Usually yes
sshuttle	sudo apt install -y sshuttle	Usually yes
Ligolo-ng	sudo apt install -y ligolo-ng	Kali 2024.2+
Plink	/usr/share/windows-binaries/plink.exe (transfer to target)	On Kali
Plink .ppk keys	sudo apt install -y putty-tools	For puttygen

sudo apt install -y openssh-client evil-winrm freerdp2-x11 penelope rlwrap netcat-openbsd socat sshuttle ligolo-ng putty-tools
pip3 install ssh-audit

---

📌 Linux utilities

Tool	Install	Preinstalled?
Curl	sudo apt install -y curl	Yes
OpenSSL	sudo apt install -y openssl	Yes
exiftool	sudo apt install -y libimage-exifperl-perl	Usually yes
Steghide	sudo apt install -y steghide	Usually yes
stegseek	sudo apt install stegseek	Usually yes
File Transfer	impacket-smbserver via Impacket
Text Processing	coreutils — grep, awk, sed, cut, sort, uniq, tr, xargs	Yes — no install
Python	sudo apt install -y python3 python3-pip	Yes

---

📌 Cloud

Tool	Install
AWS CLI	sudo apt install -y awscli or pip install awscli

---

📌 MetaSploit

Tool	Install	Preinstalled?
MetaSploit	sudo apt install -y metasploit-framework	Yes on Kali
Msfvenom / Msfconsole	part of metasploit-framework	Yes

sudo systemctl start postgresql
sudo msfdb init    # first-time DB setup if needed
msfconsole

---

📌 Privilege escalation

Tool	Install	Note
Privesc Tools LinPEAS/WinPEAS	sudo apt install -y peass	/usr/share/peass/
winExploitSuggester	git clone — see winExploitSuggester	Run on Kali
linux-exploit-suggester	git clone — see linux-exploit-suggester	Run on Kali
Churrasco	Re4son/Churrasco — Windows .exe	Transfer to target
Potato Attacks binaries	Download GodPotato, PrintSpoofer, etc.	Transfer to target

sudo apt install -y peass

---

📌 Impacket — install / update

Full walkthrough → Install Download and Run > Impacket (apt vs git)

# Kali package (recommended for OSCP)
sudo apt install -y python3-impacket
impacket-psexec -h
 
# Latest from GitHub
git clone https://github.com/fortra/impacket
cd impacket && pip3 install . --break-system-packages
 
# Script paths
ls /usr/share/doc/python3-impacket/examples/

See Impacket > Installation & Location

---

📌 Verify install

which nmap gobuster sqlmap impacket-secretsdump hashcat hydra mysql psql redis-cli ldapsearch
impacket-psexec -h 2>&1 | head -1
certipy-ad -h 2>&1 | head -1

---

Related Notes

• Install Download and Run
• Tools
• Database
• Recon
• Active Directory
• Linux Tools
• Reference