Ethical Hacking Academy · Lesson

Installing Kali Linux

Your attack box.

Installing Kali Linux is a free Ethical Hacking Academy lesson on CoddyKit — lesson 2 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the Ethical Hacking Academy learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.

What Is Kali Linux

Kali Linux is a Debian-based distribution maintained by Offensive Security, purpose-built for penetration testing and security research.

It ships with hundreds of pre-installed tools - Nmap, Metasploit, Burp Suite, Wireshark, and more - so you do not have to assemble a toolkit by hand.

Download Options

Kali offers several images on kali.org:

Installer ISO - full install to a VM or disk.
Pre-built VirtualBox/VMware appliance - fastest for a lab.
Live ISO - boot without installing.

For a hacking lab, the pre-built VM appliance is the easiest path.

Verify the Download

Always verify the integrity of the image before using it. Compare the SHA256 hash with the value published on the official site.

This protects you from corrupted or tampered downloads.

sha256sum kali-linux-2024.1-virtualbox-amd64.7z
# Compare output to the hash on kali.org

Importing the Appliance

For the pre-built VM, extract the archive and import the .ova/.vbox file.

VirtualBox: File then Import Appliance, or open the .vbox directly.
VMware: File then Open, select the .vmx.

The VM arrives pre-configured with sensible CPU, RAM, and disk settings.

Default Credentials

Recent Kali releases use a non-root user by default.

Username: kali
Password: kali

Change this password immediately. Use sudo for administrative tasks rather than logging in as root.

passwd
# you will be prompted to set a new password

First Update

Before doing anything else, update the package lists and upgrade installed software so you have the latest tools and security fixes.

sudo apt update
sudo apt full-upgrade -y

Kali Metapackages

Kali groups tools into metapackages so you can install exactly what you need.

kali-linux-default - the standard toolset.
kali-linux-large - a much wider selection.
kali-tools-web, kali-tools-wireless - category bundles.

sudo apt install kali-tools-web

Taking a Clean Snapshot

Once Kali is updated and configured the way you like, power it off and take a snapshot named something like clean-base.

If you ever break the system or want a fresh start, you roll back in seconds instead of reinstalling.

Guest Additions

Install the guest integration package for a smoother experience: shared clipboard, dynamic resolution, and shared folders.

sudo apt install -y virtualbox-guest-x11
# then reboot

Exploring the Tools

Kali organizes its tools in the application menu by category: Information Gathering, Vulnerability Analysis, Web Application Analysis, Exploitation Tools, and more.

You can also launch any tool from the terminal. Most accept -h or --help to show usage.

nmap --help
msfconsole -h

Use Kali Responsibly

Kali is powerful and many of its tools are illegal to use against systems you do not own or have explicit permission to test.

Only attack your own lab VMs or authorized targets.
Keep Kali on isolated networks (covered later).

Quick Check

Recall the modern default login.

Recap

You set up your attack box:

Kali Linux is a Debian-based pentest distro with hundreds of tools.
Use the pre-built VM appliance and verify its hash.
Default login is kali/kali - change it and run apt full-upgrade.
Take a clean-base snapshot and only attack authorized targets.

Frequently asked questions

Is the “Installing Kali Linux” lesson free?

Yes — the full text of “Installing Kali Linux” is free to read here on the web, and the Ethical Hacking Academy course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the Ethical Hacking Academy course, upgrade to CoddyKit PRO.

What will I learn in “Installing Kali Linux”?

Your attack box. You practise Ethical Hacking Academy with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.

Do I need any experience to start Ethical Hacking Academy?

No prior experience is required. Ethical Hacking Academy on CoddyKit is structured for beginners through advanced learners; this is — lesson 2 of 4, so you can start here or from the beginning and move at your own pace.

How long does the “Installing Kali Linux” lesson take?

Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.

Can I write and run code in this Ethical Hacking Academy lesson?

Yes. Every Ethical Hacking Academy lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.

All lessons in this course

← Back to Ethical Hacking Academy