Kali Linux 2025.4, released on December 12, 2025, marks a major step forward in usability and infrastructure. While Kali remains the go-to platform for penetration testing, this release focuses heavily on modernizing the desktop experience. At the same time, it preserves the depth and flexibility security professionals expect.
The update delivers desktop environment upgrades, complete Wayland support across virtual machines, and three powerful new tools, including the widely anticipated Wifipumpkin3 integration. Together, these changes make Kali Linux more polished, faster, and easier to use in both bare-metal and virtualized setups.
GNOME 49 Goes Wayland-Only With a Refreshed Experience
One of the biggest changes in Kali Linux 2025.4 is the move to GNOME 49, which drops X11 support entirely. From this release onward, GNOME runs exclusively on Wayland, signaling a full commitment to modern display technology.
The desktop now features refined themes across all Kali variants. Visual consistency has improved, and performance feels smoother. Notably, Kali replaces the aging Totem video player with Showtime, a modern GTK4 application. Showtime offers a clean interface, chromeless windows, and subtle fading controls that reduce distractions.
Additionally, the GNOME application grid now organizes Kali’s extensive toolkit into logical folders that mirror the main menu. This change makes tool discovery far more intuitive. Users also gain a long-requested terminal shortcut—Ctrl+Alt+T or Win+T—bringing GNOME in line with KDE and Xfce workflows.
KDE Plasma 6.5 and Xfce Gain Major Usability Enhancements
Kali Linux 2025.4 upgrades KDE Plasma to version 6.5, incorporating improvements from two major releases. The update introduces more flexible window tiling, a redesigned screenshot tool with advanced editing options, and faster access to pinned clipboard items directly from the panel.
KRunner also receives fuzzy matching support. As a result, users can now find applications even when names are misspelled.
Meanwhile, Xfce achieves long-awaited feature parity with GNOME and KDE. For the first time, Xfce supports full color theming. Users can customize icons, GTK 3 and GTK 4 windows, and the window manager through the Appearance settings. Qt applications can also be styled using qt5ct or qt6ct, offering a consistent look across toolkits.
Full Wayland Support Arrives in Virtual Machines
With GNOME now Wayland-only and KDE having defaulted to Wayland since Kali Linux 2023.1, virtual machine compatibility became a priority. Kali Linux 2025.4 delivers full Wayland functionality across VirtualBox, VMware, and QEMU.
Clipboard sharing, window resizing, and display scaling now work reliably in VM environments. This update removes one of the final barriers preventing penetration testers from adopting Wayland in daily workflows. Users no longer need to fall back to X11 for stability or compatibility.
New Tools Expand Kali’s Offensive Capabilities
Kali Linux 2025.4 adds three new tools to its repositories:
bpf-linker – A simple static linker for Berkeley Packet Filter programs, critical for eBPF-based security tooling
evil-winrm-py – A Python implementation for executing commands over Windows Remote Management (WinRM), supporting NTLM, Pass-the-Hash, certificates, and Kerberos
hexstrike-ai – An MCP server that allows AI agents to autonomously execute security tools, pushing Kali toward AI-assisted penetration testing
These additions reflect Kali’s expanding focus on automation, cross-platform testing, and AI-driven workflows.
Kernel 6.16 Delivers Performance and Storage Improvements
The release upgrades the Linux kernel to version 6.16. This update brings improved system performance, USB audio offload support, XFS large atomic writes, and optimized build options for local CPU architectures. Together, these enhancements improve responsiveness on both modern laptops and high-performance testing rigs.
Wifipumpkin3 Strengthens Wireless Testing in NetHunter
Although not counted among the three new tools, Wifipumpkin3 plays a major role in this release. The rogue access point framework now integrates more deeply with Kali NetHunter.
The NetHunter app includes a new Wifipumpkin3 preview tab featuring updated community templates. These include phishing pages for popular platforms like Facebook, Instagram, iCloud, and Snapchat. Built in Python and powered by GStreamer, Wifipumpkin3 supports Evil Twin attacks, captive portals, DNS spoofing, traffic interception, and advanced man-in-the-middle scenarios.
A Strong Step Forward for Kali Linux
Kali Linux 2025.4 successfully balances modernization with functionality. With Wayland fully supported, desktops refreshed, powerful new tools added, and Wifipumpkin3 enhanced, this release reinforces Kali’s status as the leading penetration testing platform—now with a smoother and more modern user experience.