Where to download Kali Linux and how to verify the integrity of Kali Linux images

It is strongly recommended to download any program from official websites; this will help you avoid getting infected with malicious software.

Linux distributions, including Kali Linux, are not exceptions; so they also need to be downloaded only from official websites. This ensures the absence of Trojan and virus programs, and will also allow you to get the latest software versions.

Where to download the latest version of Kali Linux

Kali Linux is used for penetration testing and forensic examinations. Being a professional penetration tester or forensic expert, you must be absolutely sure of the integrity of your tools. If your tools are not trustworthy, then the results of your research are also not credible.

Even if your standards are not so high, it is still highly recommended to follow the steps described here, since not genuine versions of the software can intentionally or unintentionally cause serious harm.

Download Kali Linux (as well as any other programs) only from official websites. For Kali Linux, the official sites are https://www.kali.org/downloads and https://www.offensive-security.com/kali-linux-vmware-arm-image-download/

These sites cannot be accessed without the use of SSL, which significantly hampers the man-in-the middle attack, and thus reduces the danger of getting what you do not want to get.

Which Kali Linux Image should I download?

If you are going to install Kali Linux in a virtual machine, then pay attention to the ready images: https://www.offensive-security.com/kali-linux-vmware-virtualbox-image-download/

However, even for installation in a virtual machine, I prefer to download regular ISO images, as this gives me more options for fine-tuning the system.

ISO images can be used as Live systems, and also can be used as installation media. These images can be downloaded at: https://www.kali.org/downloads/

Kali Linux images divided into 64-bit and 32-bit versions. Kali Linux images differ in the desktop environment. Also there is a lightweight system, with a minimum set of programs - Light. For most modern computers, 64-bit systems are suitable.

If you want the classic look of Kali Linux, the one that is on most screenshots and video on the Internet, then download the image of Kali 64 bit or Kali 32 bit. In this case, you will have GNOME 3 as the desktop environment. If you want a more classic look, then select the version with Mate. If you have a low-power (obsolete) computer, then select e17, Xfce or LXDE.

Kali Linux weekly releases

These images are available at: http://cdimage.kali.org/kali-images/kali-weekly/

A list of checksums for them at: https://archive.kali.org/kali-images/kali-weekly/SHA1SUMS

They are untested. You can occur with issues while using them.

ISO file can be downloaded either by direct link or via torrent. It is recommended to select the download via torrent.

Easy checking the integrity of Kali Linux images

Before running it is strongly recommended to check the integrity of the downloaded file. If the file does not pass the integrity test, then it can not be used.

I'll show you how to check the integrity of the file using the Double Commander.

On the official site, copy the checksum for the file that you downloaded.

In Double Commander, select the downloaded file and go to the Files menu -> Verify checksums … Insert the copied checksum, select SHA2_256 and click OK: