Kali Linux 2026.3 Released with Kernel 7.1.5 and Six New Penetration Testing Tools
Kali Linux 2026.3 is now available, featuring the Linux kernel 7.1.5, six new penetration testing tools, and enhanced image-building scripts.

Kali Linux 2026.3 has been released as the third major update of the year, bringing significant enhancements for penetration testers and security professionals. This release introduces six new tools to its extensive repository, upgrades the Linux kernel to version 7.1.5, and includes a substantial refresh of its image-building scripts for greater flexibility.
The six new penetration testing tools added to Kali's network repositories are Dalfox, Katana, Qsreplace, Rustscan, SDRangel, and Snaffler-ng. Dalfox is an automated cross-site scripting (XSS) scanner designed to identify and verify XSS vulnerabilities in web applications. Katana offers a web crawling and spidering framework, aiding researchers in mapping web applications and discovering endpoints before in-depth testing. Qsreplace is a utility for processing URLs, useful for preparing repeatable web security tests by replacing query string values. Rustscan is a high-speed port scanner written in Rust, capable of quickly scanning large port ranges and integrating with Nmap for deeper analysis. SDRangel provides a graphical interface for software-defined radio devices, benefiting wireless security research. Finally, Snaffler-ng is a scanner for Windows SMB shares, designed to find exposed credentials and sensitive data.
Beyond the new tools, Kali Linux 2026.3 incorporates 126 package updates and notably upgrades the core Linux kernel from version 6.19 to 7.1.5. This kernel update is crucial as it provides the foundation for hardware support, driver functionality, system calls, and essential security fixes across the entire distribution. Users are advised to test critical hardware components and custom kernel modules to ensure compatibility before deploying the new kernel in sensitive security operations.
A significant development in this release is the overhaul of Kali's public build scripts. These scripts are the same ones used by the Kali project to generate its official operating system images. The refreshed scripts now boast a more consistent structure, improved command-line options, and enhanced features across different platforms. A key addition is the build-in-container.sh script, which automatically detects Docker or Podman, creates a build container, and executes the image build within it. This streamlines the process, removing the previous requirement to build Kali on a Kali system and making custom image creation more accessible on other Debian-based distributions.
The optional KDE desktop environment has also been updated to Plasma 6.7. This version introduces features such as per-screen virtual desktops, allowing users to manage workspaces independently on multiple monitors, which can be highly beneficial for complex security workflows. Plasma 6.7 also enhances Wayland protocol support, improves performance for integrated Intel graphics, and offers better power efficiency. Additionally, the release includes updated icons for better tool identification within the application menu and on the Kali tools website, enhancing the overall user experience.
The image-building script refresh is an ongoing effort, with Kali indicating that some scripts did not meet the deadline for the 2026.3 release and are planned for Kali 2026.4. Future updates are expected to focus on further automation, workflow integration, and advanced customization options. Teams relying on older build scripts are encouraged to review their continuous integration pipelines, as changes introduced during this refresh may impact existing workflows.
Kali Linux 2026.3 continues the distribution's commitment to providing security professionals with up-to-date tools and a stable, powerful operating system. The inclusion of new specialized tools, a modern kernel, and improved build infrastructure makes this release a valuable update for both new and experienced users in the cybersecurity domain.