Kali Linux is the Debian-based Linux distribution that ships with over 600 pre-installed offensive security tools — Nmap, Metasploit, Burp Suite, Wireshark, Aircrack-ng, Hashcat, John the Ripper, and the rest of the standard pentester toolkit. It has become the default operating system for penetration testers, CTF players, bug bounty hunters, and security students for one reason: it removes the friction of setting up a working hacking environment. You don't spend a weekend hunting down tool dependencies. You boot a VM, and you're working.
The tutorials in this section are written for the person who learns by doing. Every guide walks through real commands against a real (intentionally vulnerable) target, with real output you should expect to see. Where a flag is unusual, I explain it. Where a step can fail in five different ways, I cover the common failure modes. If you've ever read a tutorial that skipped from "install the tool" to "now do an advanced attack" with nothing in between, this is the antidote.
The articles below are organized by topic: installation and setup, individual tool deep-dives (Nmap, Hashcat, Wireshark, Burp Suite), wireless and password-cracking workflows, and reference material like the bash cheatsheet. If you're brand new, the recommended starting order is below.
