Kali Linux 2026.2: What’s New in the Latest Release

<!– wp:paragraph –>
<p>Kali Linux 2026.2 landed with nine new tools, a kernel bump, refreshed desktops and faster VM boot times. Here’s a tour of what changed and which new tools are worth a look.</p>
<!– /wp:paragraph –>

<!– wp:heading –>
<h2 class=”wp-block-heading”>The release at a glance</h2>
<!– /wp:heading –>

<!– wp:paragraph –>
<p><strong>Kali Linux 2026.2</strong> shipped on 30 June 2026, moving the distribution to the Linux 6.19 kernel and refreshing both desktop environments to GNOME 50 and KDE Plasma 6.6. Offensive Security also reported noticeably faster VM boot times in this release, which matters if you’re spinning Kali up and down regularly in a lab.</p>
<!– /wp:paragraph –>

<!– wp:paragraph –>
<p>This follows 2026.1 from March, which added a wave of tools this site has already covered individually – AdaptixC2, GEF, Metasploit MCP and WP Probe among them.</p>
<!– /wp:paragraph –>

<!– wp:heading –>
<h2 class=”wp-block-heading”>The nine new tools</h2>
<!– /wp:heading –>

<!– wp:paragraph –>
<p>2026.2 added the following to the repositories:</p>
<!– /wp:paragraph –>

<!– wp:list –>
<ul class=”wp-block-list”><!– wp:list-item –>
<li><strong>arsenal-ng</strong> – a cheat-sheet style command launcher that helps you build and re-run complex command lines for other tools without re-typing them from memory each time.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>hydra-gtk</strong> – a graphical front end for the long-standing Hydra login cracker, useful if you’d rather configure a run visually than assemble flags by hand.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>legba</strong> – a Rust-based multi-protocol credential bruteforcer and password sprayer, pitched as a faster, more consistent alternative to juggling several single-protocol tools.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>oletools</strong> – a defensive toolkit for inspecting Office documents (OLE and OOXML formats) for embedded VBA macros and other suspicious content, aimed at analysts triaging a file rather than at building one.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>penelope</strong> – a modern shell handler positioned as a netcat replacement for catching reverse shells, with session logging, file transfer and PTY upgrades built in.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>shell-gpt</strong> – a command-line AI assistant that answers questions and suggests shell commands directly in your terminal session.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>tailscale</strong> – the mesh VPN client, now packaged directly in the Kali repos for easy install on an engagement box or lab machine.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>tookie-osint</strong> – an OSINT username-search tool that checks a handle against many platforms at once.</li>
<!– /wp:list-item –><!– wp:list-item –>
<li><strong>uro</strong> – a small utility that deduplicates and cleans up long URL lists from crawlers, cutting a recon output down to the URLs actually worth testing.</li>
<!– /wp:list-item –></ul>
<!– /wp:list –>

<!– wp:heading –>
<h2 class=”wp-block-heading”>What’s worth trying first</h2>
<!– /wp:heading –>

<!– wp:paragraph –>
<p>If you’re short on time, <strong>uro</strong> and <strong>arsenal-ng</strong> are the easiest wins – both are small quality-of-life tools that tidy up workflows you already have, with no new concepts to learn. <strong>oletools</strong> is worth a look if any of your work involves triaging suspicious documents rather than only offensive testing. The credential-attack tools (legba, hydra-gtk) and penelope are more specialised and, as with any bruteforce or shell-handling tool, should only ever be pointed at systems you’re explicitly authorised to test.</p>
<!– /wp:paragraph –>

<!– wp:heading –>
<h2 class=”wp-block-heading”>Updating</h2>
<!– /wp:heading –>

<!– wp:paragraph –>
<p>An existing Kali install picks all of this up with a normal <code>apt update && apt full-upgrade</code>; a fresh 2026.2 ISO is also available from Kali’s downloads page if you’d rather start clean. As always with a desktop-environment bump, back up any customised dotfiles before upgrading in place.</p>
<!– /wp:paragraph –>