Kali Linux 2025.3 Brings Nexmon Support, New Tools, and VM Improvements

The developers of Kali Linux have released Kali Linux 2025.3, the latest quarterly update for penetration testers and security researchers. The release introduces significant improvements for virtualization, wireless testing, and mobile platforms, while also adding ten powerful new tools.

What’s new at a glance

• Release: Kali Linux 2025.3 (rolled out in the third 2025 update cycle).
• Virtual image tooling: Full redesign of the virtual-image build process with refreshed integration for HashiCorp Packer and Vagrant (now using template version 2), plus standardized preconfiguration files and improved post-boot provisioning. This simplifies lab deployments and reduces manual post-install steps.
• Nexmon restored: Nexmon firmware support for Broadcom/Cypress chipsets is back — enabling monitor mode and packet injection on devices that lack those features in stock drivers, now including Raspberry Pi 5. This is a major win for wireless researchers.
• ARMel support dropped: Support for the older ARMel architecture (Raspberry Pi 1 / Zero W and similar) was removed following Debian’s maintenance decisions; the team says resources are being redirected toward RISC-V preparation.
• NetHunter mobile updates: Kali NetHunter gets significant device support and firmware improvements — including a Samsung Galaxy S10 port with Broadcom-compatible firmware, a specialized kernel, and an ARM64 Hijacker build. Internal frame injection monitoring for 2.4/5 GHz bands is also expanded.
• 10 new tools: A mix of GUI and CLI packages were added (highlights listed below).

Virtualization and Deployment Enhancements

Kali’s team has redesigned the process of creating virtual images, updating integrations with HashiCorp Packer and Vagrant. Scripts now follow template version 2, ensuring consistency across lab environments. Preconfiguration files for automated installs have been standardized, and Vagrant scripts can apply additional settings immediately after startup, eliminating routine steps.

Wireless Support and Architecture Updates

A major highlight is the return of Nexmon support for Broadcom and Cypress chipsets, including the Raspberry Pi 5. This enables monitor mode and packet injection on devices where stock drivers lack such functionality.

At the same time, support for the ARMel architecture has been dropped, following Debian’s decision to end maintenance after the release of “Trixie.” Development efforts are now being directed toward RISC-V, preparing for the next generation of architectures.

Desktop and NetHunter Improvements

For desktop users, the Xfce IP panel has been redesigned, making it easier to select interfaces and copy IP addresses.

On the mobile side, Kali NetHunter now supports additional devices and improves frame injection monitoring in the 2.4 GHz and 5 GHz bands. The Samsung Galaxy S10 port introduces Broadcom-compatible firmware, a specialized kernel, and an ARM64 build of the Hijacker utility.

How to Update to Kali 2025.3

• New installs: Download the latest images from the official Kali download page.
• Existing systems: Run:

• sudo apt update && sudo apt full-upgrade
• Then confirm the update with /etc/os-release.

For detailed changelogs, see the Kali 2025.3 release blog.