Raspberry Pi Kali Linux turns a Pi 4 or Pi 5 into a portable penetration testing platform with over 600 pre-installed security tools. Kali Linux is a Debian-based distribution maintained by Offensive Security for authorised security assessments, CTF competitions, and cybersecurity training. All tools and techniques in this guide are for use on networks and systems you own or have written permission to test. Unauthorised use of penetration testing tools against systems you do not own is illegal in most jurisdictions. This guide covers downloading the correct ARM image, flashing it, first-boot configuration, and network setup with nmcli, replacing the deprecated wpa_supplicant.conf and dhcpcd.conf methods shown in older guides.
Last tested: Kali Linux 2024.4 (ARM64) | May 2026 | Raspberry Pi 4 Model B (4GB) and Raspberry Pi 5 (8GB)
Key Takeaways
- The default Kali Linux login credentials are username
kaliand passwordkali. Change the password immediately after first boot with thepasswdcommand. Running a system with default credentials on any network is a significant security risk, particularly on a security-focused distribution. - Current Kali Linux for Raspberry Pi uses NetworkManager for network configuration, not
dhcpcdorwpa_supplicant. Any guide instructing you to create awpa_supplicant.conffile or edit/etc/dhcpcd.confis outdated for current Kali releases. Usenmclifor all network configuration including WiFi and static IP. - Choose the correct image architecture. Pi 4 and Pi 5 use the ARM64 (64-bit) image. Pi 3 can use ARM64 or ARMv7. Pi Zero W uses the specific ARMv6 image. The choice is based on processor architecture, not RAM size. Using a 32-bit image on a Pi 4 works but wastes the 64-bit capability and limits RAM access above 4GB.
Flashing Raspberry Pi Kali Linux
Download the correct Kali Linux ARM image from kali.org/get-kali/#kali-arm. Select the image for your Pi model. Current images as of 2026:
| Pi model | Image | Architecture |
|---|---|---|
| Pi 5 | Raspberry Pi 5 (64-bit) | ARM64 |
| Pi 4 / Pi 400 | Raspberry Pi 4 (64-bit) | ARM64 |
| Pi 3B+ | Raspberry Pi 3 (64-bit) | ARM64 |
| Pi Zero 2W | Raspberry Pi Zero 2W | ARM64 |
| Pi Zero W | Raspberry Pi Zero W | ARMv6 |
Flash the image to a microSD card (minimum 16GB, Class 10 or better). Use Etcher (balena Etcher) or dd from the command line. Etcher is the simplest option on Windows and macOS. On Linux:
# Replace /dev/sdX with your microSD card device (check with lsblk first):
sudo dd if=kali-linux-2024.4-raspberry-pi-arm64.img of=/dev/sdX bs=4M status=progress
sync
Insert the card, connect HDMI, keyboard, and mouse, and power on. Kali boots to a login prompt or desktop login depending on the image variant. Log in with username kali and password kali.
Expected result: The Kali Linux desktop or command prompt loads within 60-90 seconds on Pi 4. If the display shows nothing or freezes, the image may not be compatible with the Pi model. Verify the image name matches the Pi variant on the Kali downloads page. First boot may take longer as Kali generates SSH host keys and resizes the filesystem to fill the card.

Network and SSH Configuration on Raspberry Pi Kali Linux
Change the default password immediately after first login:
passwd
Current Kali Linux uses NetworkManager. Connect to WiFi with nmcli:
# List available WiFi networks:
nmcli device wifi list
# Connect to a network:
nmcli device wifi connect "YourSSID" password "YourPassword"
# Verify connection:
ip addr show wlan0
Expected result: The interface shows an IP address assigned by the router. ping -c 3 1.1.1.1 succeeds. If the connection fails, check the SSID spelling and password. Kali’s 2.4GHz WiFi works on Pi 4’s built-in radio; 5GHz requires a USB adapter with Linux driver support.
Set a static IP for a Pi that will be used as a persistent lab machine:
sudo nmcli con mod "YourSSID" \
ipv4.addresses "192.168.1.100/24" \
ipv4.gateway "192.168.1.1" \
ipv4.dns "192.168.1.1" \
ipv4.method manual
sudo nmcli con up "YourSSID"
Enable and start SSH for headless remote access:
sudo systemctl enable ssh --now
ip addr show # Note the IP for SSH connection
SSH in from another machine:
ssh kali@192.168.1.100
Expected result: SSH accepts the connection with the password set in the passwd step. For key-based authentication (more secure for a lab machine), copy your public key with ssh-copy-id kali@192.168.1.100 then disable password authentication in /etc/ssh/sshd_config.
Essential Kali Linux Tools on Raspberry Pi
All Kali Linux tools should only be used on networks and systems you own or have explicit written authorisation to test. Using these tools without authorisation violates the Computer Fraud and Abuse Act (US), the Computer Misuse Act (UK), and equivalent laws worldwide.
Update and upgrade before using any tools:
sudo apt update && sudo apt full-upgrade -y
The standard Kali image for Pi includes a curated subset of tools. The full toolset is available via metapackages:
# Install all tools in a category (example: wireless tools):
sudo apt install -y kali-tools-wireless
# Or install the full Kali toolset (requires ~15GB disk space):
sudo apt install -y kali-linux-everything
Key tools included or available:
| Tool | Category | Use case (authorised only) |
|---|---|---|
| Nmap | Reconnaissance | Network discovery and port scanning on your own network |
| Metasploit Framework | Exploitation | Vulnerability testing on your own systems |
| Wireshark | Network analysis | Packet capture and protocol analysis |
| Aircrack-NG | Wireless | WiFi security auditing on your own access points |
| Burp Suite | Web | Web application security testing |
| John the Ripper | Password | Password strength testing on your own hashes |
Use kali-tweaks after setup to configure hardening options, network repositories, and desktop customisation:
kali-tweaks
Keeping Raspberry Pi Kali Linux Updated and Optimised
Kali Linux releases updates frequently. Run full upgrades weekly to keep tools and security patches current:
sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y
Storage. The Kali ARM image for Pi is designed for microSD but a USB SSD significantly improves tool performance and database update speed (Metasploit’s database, for example). Boot from USB SSD on Pi 4 by flashing the Kali image to the SSD and enabling USB boot in the EEPROM settings. On Pi 5, boot from NVMe via M.2 HAT+. See Raspberry Pi 5 NVMe Boot: Complete Setup Guide.
Metasploit database. Metasploit uses PostgreSQL for storing scan results. Initialise it after install:
sudo msfdb init
msfconsole
Backup. After configuring a working Kali setup, create a backup image of the microSD or SSD with dd or Raspberry Pi Imager’s “read” function. Kali’s tools and database can take hours to set up. A backup image avoids repeating that work after a card failure. For a full backup strategy on Raspberry Pi, see Raspberry Pi Backup: Complete SD, rsync, and Cloud Guide. For static IP setup reference, see Raspberry Pi Static IP: Router Reservation, nmcli, and nmtui Guide.
FAQ
Which Raspberry Pi models support Kali Linux?
Kali Linux supports Pi 2, Pi 3, Pi 4, Pi 5, Pi 400, Pi Zero W, and Pi Zero 2W via separate ARM images for each. Pi 4 (4GB) is the recommended minimum for a useful penetration testing setup. It has enough RAM to run Metasploit, a browser, and Wireshark simultaneously. Pi 5 is significantly faster for tool execution. Pi Zero W works for lightweight tasks but is too slow for Metasploit or any GUI tool. Download images from kali.org/get-kali/#kali-arm.
What are the default Kali Linux Raspberry Pi login credentials?
Username: kali, password: kali. These are the defaults for the standard Kali ARM images. Change the password immediately after first login with the passwd command. If using the Kali “Installer” image (which runs a full installation wizard), credentials are set during the installation process rather than using these defaults.
How do I connect Kali Linux Raspberry Pi to WiFi?
Use nmcli: nmcli device wifi connect "SSID" password "password". Current Kali Linux uses NetworkManager for all network management. The old methods of creating a wpa_supplicant.conf file or editing /etc/dhcpcd.conf do not work on current Kali releases. Use nmcli device wifi list to see available networks and nmcli con show to list configured connections.
Is Kali Linux legal to use on Raspberry Pi?
Kali Linux itself is legal to download, install, and use. The legality question is about what you do with it. Using Kali’s tools to test networks and systems you own, or systems you have explicit written authorisation to test, is legal and is the intended use. Using the tools against any system without authorisation, including your neighbour’s WiFi, your employer’s network without permission, or any public service, violates computer fraud laws in most countries and can result in criminal prosecution regardless of intent. Kali Linux is for authorised security testing only.
How is Kali Linux different from Raspberry Pi OS?
Raspberry Pi OS is a general-purpose Debian-based OS optimised for the Pi’s hardware, suitable for everything from GPIO projects to media servers. Kali Linux is a specialised security-focused distribution with 600+ pre-installed penetration testing tools, a different default kernel configuration, and a toolset not included in standard Raspberry Pi OS. Kali is not a general-purpose OS and is not suited for everyday use, home automation, or as a Pi-hole or NAS host. Use Raspberry Pi OS for general projects and Kali specifically for security work.
References:
- Kali Linux ARM downloads: kali.org/get-kali/#kali-arm
- Kali Linux documentation: kali.org/docs
- Offensive Security: offsec.com
- Kali Linux ARM setup guide: kali.org/docs/arm/raspberry-pi-4
About the Author
Chuck Wilson has been programming and building with computers since the Tandy 1000 era. His professional background includes CAD drafting, manufacturing line programming, and custom computer design. He runs PidiyLab in retirement, documenting Raspberry Pi and homelab projects that he actually deploys and maintains on real hardware. Every article on this site reflects hands-on testing on specific hardware and OS versions, not theoretical walkthroughs.
Last tested hardware: Raspberry Pi 4 Model B (4GB). Kali Linux 2024.4 ARM64, May 2026.

