1️⃣ Installing Kali Linux
Option 1: Install Kali Linux as a Virtual Machine (Recommended)
Step 1: Download Kali ISO or Prebuilt VM Image
- Download the Kali ISO: https://www.kali.org/get-kali/#kali-bare-metal
- Prebuilt VM Image (for VirtualBox/VMware): https://www.kali.org/get-kali/#kali-virtual-machines
Step 2: Install Kali on VirtualBox or VMware
- Create a new VM with at least:
- 4 GB RAM (8 GB+ preferred)
- 2 CPU cores (4+ recommended)
- 30 GB+ Disk Space
- Attach the Kali ISO and boot into the installer.
Option 2: Install Kali Linux as a Bare Metal OS
-
Download Kali ISO from kali.org.
-
Create a bootable USB using:
sh
CopyEdit
sudo dd if=kali-linux.iso of=/dev/sdX bs=4M status=progress
Replace
/dev/sdX
with your USB device (uselsblk
to check). -
Boot from USB and follow the GUI installer.
Option 3: Run Kali as a Docker Container (Quick & Lightweight)
If you want a quick Kali setup without installing it natively:
sh
docker pull kalilinux/kali-rolling docker run -it --rm kalilinux/kali-rolling /bin/bash
To install tools inside the container:
sh
apt update && apt install -y kali-linux-default
2️⃣ Installing Arch Linux for Pentesting
Option 1: Install Arch Linux (Manual Process)
Step 1: Download Arch ISO
Download from: https://archlinux.org/download/
Step 2: Create a Bootable USB
sh
CopyEdit
sudo dd if=archlinux.iso of=/dev/sdX bs=4M status=progress
Step 3: Boot into Arch ISO and Install
-
Set up networking:
sh
ip link
If using WiFi:
sh
iwctl station wlan0 connect <SSID>
-
Partition Disk (use
fdisk
orcfdisk
). -
Mount filesystems and install base system:
sh
mount /dev/sdX1 /mnt pacstrap /mnt base linux linux-firmware
-
Configure system (hostname, bootloader, users).
Option 2: Use BlackArch (Arch-Based Pentesting OS)
Instead of setting up tools manually, you can use BlackArch (Arch Linux preloaded with pentesting tools).
Install BlackArch on top of an existing Arch system:
sh
curl -O https://blackarch.org/strap.sh chmod +x strap.sh sudo ./strap.sh
Then install all tools:
sh
sudo pacman -S blackarch
3️⃣ Installing Penetration Testing Tools
On Kali Linux
Kali has tool meta-packages for easy installation:
sh
CopyEdit
sudo apt update && sudo apt upgrade -y sudo apt install -y kali-linux-default kali-linux-top10 kali-linux-full
On Arch Linux / BlackArch
sh
sudo pacman -S blackarch
Or install specific tool categories:
sh
CopyEdit
sudo pacman -S blackarch-exploitation blackarch-forensics
Manually Installing Popular Pentesting Tools
Metasploit
sh
CopyEdit
sudo apt install -y metasploit-framework # Kali sudo pacman -S metasploit # Arch
Nmap (Network Scanning)
sh
CopyEdit
sudo apt install -y nmap sudo pacman -S nmap
Burp Suite (Web Hacking)
sh
CopyEdit
sudo apt install -y burpsuite sudo pacman -S burpsuite
Wireshark (Packet Sniffing)
sh
CopyEdit
sudo apt install -y wireshark sudo pacman -S wireshark-qt
Aircrack-ng (WiFi Hacking)
sh
CopyEdit
sudo apt install -y aircrack-ng sudo pacman -S aircrack-ng
4️⃣ Recommended Setup for Pentesting
Component | Recommended Setup |
---|---|
OS | Kali Linux or BlackArch |
Virtualization | VirtualBox or VMware for isolation |
Networking | VPNs, Proxies, and Custom Routing |
Tools | Metasploit, Nmap, Burp Suite, Wireshark |
Hardware | USB WiFi Adapter (for wireless hacking) |
Containers | Run vulnerable web apps in Docker |
5️⃣ Next Steps
✅ Customize your environment – Install only the tools you need.
✅ Use Docker for testing – Spin up vulnerable containers (e.g., DVWA, Metasploitable).
✅ Practice on TryHackMe, HackTheBox – Real-world pentesting labs.
Would you like a pre-configured script to automate tool installation? 🚀