Kali

Kali Linux is a Debian-based Linux distribution purpose-built for penetration testing, digital forensics, and security research, maintained by Offensive Security. Rather than being a general-purpose desktop operating system, it ships pre-loaded with hundreds of security tools spanning network scanning, vulnerability analysis, password attacks, wireless testing, web application testing, and exploitation frameworks — organised so a practitioner has most of what they need available immediately rather than installed piecemeal.

Kali can be run in several ways depending on the task: as a full installed operating system, as a live boot USB for portable, disposable use, as a virtual machine for isolated testing within another host OS, or — increasingly common for lighter workflows — as a Docker container providing just the Kali userspace and tools without the overhead of a complete virtual machine.

Choosing how to run it

• Full virtual machine — best when genuine isolation, a full desktop environment, unusual virtual networking, or hardware-level access (like wifi adapters in monitor mode) is needed
• Docker container — best for command-line tool access without the resource cost of a full guest OS, particularly useful when other virtualisation-dependent services on the same machine would otherwise conflict for hardware virtualisation access

Warning

Security testing with Kali’s tools is restricted to systems, networks, and services owned by or explicitly authorised for testing.

Role in this vault

Within this Homelab Kali runs primarily as a Docker-based CLI toolbox rather than a full virtual machine — an architectural change made specifically to avoid conflicts between Docker’s KVM requirements and VirtualBox’s requirements on the same machine, detailed further in the lab’s KVM vs VirtualBox note. The full Kali VM remains available for the smaller set of tasks that genuinely need a complete machine rather than just its tools.