Build a Portable Kali Pentest Box on a Pi

I keep a Raspberry Pi running Kali in my bag more or less permanently. It's the smallest complete pentest machine I own — no display, no keyboard, just a board the size of a credit card that I can SSH into from my phone or laptop. On an engagement I can leave it plugged into a network closet, walk away, and reach it over the wire later. For learning, it's a cheap sandbox I don't mind breaking.

This is a build tutorial, not a shopping list. Every step forces a hardware decision, so the gear picks are the substance here — I link the exact parts I use as they come up rather than dumping a table at the top. If you've already installed Kali another way, my guides on running Kali from a USB drive and the Kali VirtualBox image on a Mac cover those routes. This one is all about the Pi.

Why a Raspberry Pi makes a great portable pentest box

The appeal is physical. A Pi 5 draws its power from a single USB-C cable, fits in a shirt pocket, and costs a fraction of a laptop. Three things make it useful rather than just cute:

• It's a real ARM Linux box. Kali ships a first-class ARM build for the Pi. You get the same apt repos, the same tools, the same shell you'd use on an amd64 laptop.
• It runs headless. Once SSH is on, you never need a monitor again. Plug it in, find it on the network, and work over the terminal.
• It's disposable and portable. Leave it plugged into a switch as a drop box, run it off a power bank while you walk a building, or hand a spare to a student. If it goes missing, you're out a small amount of money, not a laptop.

Picking the hardware

You have two honest paths: buy a kit that bundles everything, or buy the board and pick each part yourself. Both are fine. The kit is faster and usually cheaper than sourcing separately; going board-only lets you upgrade the microSD or cooler to exactly what you want.

The easiest start: a full kit

If you want one box that arrives ready to flash, get a Pi 5 kit. A good one bundles the board, a case, the active cooler, the correct PSU, and a microSD — so you don't end up one cable short on build night. The RasTech Pi 5 8GB full kit is the one I'd hand a beginner; it has everything in a single order.

The flexible path: board-only

If you already have spare microSD cards and USB-C bricks, or you want to hand-pick every part, buy the board on its own. Get the 8GB model — Kali plus a browser plus a few tools will use the RAM, and the price gap over 4GB is small enough that I never regret the extra headroom.

The parts that actually matter

Going board-only, these are the pieces worth spending on. Skimping on any of them causes the exact problems people blame on "the Pi being slow."

• A fast microSD. This is your whole disk, and a cheap card will bottleneck everything — boot, apt, tool startup. I use a SanDisk Extreme Pro; the A2 rating and real sustained write speed make a Pi feel like a different machine. Get 64GB or larger so you have room for wordlists and loot.
• The 27W USB-C PSU. The Pi 5 wants the official 27W (5V/5A) supply. Underpower it and you'll get low-voltage warnings and random crashes under load — the number-one cause of a "flaky" Pi. Use the real PSU or a known 5A-capable one, not a random phone charger.
• The active cooler. The Pi 5 runs hot and will throttle under sustained load without cooling. The official active cooler (heatsink plus fan) clips straight onto the board and keeps clocks up. On a pentest box that's running scans for a while, this is not optional.

For actual field use

Two additions turn a desk toy into a portable rig:

• A USB-C power bank. To run the Pi untethered — walking a building, sitting in a parking lot, or as a battery-backed drop box — you need a bank that can deliver enough current over USB-C PD. A weak battery browns the Pi out the moment a scan spikes the load, so pick one rated for the Pi 5's draw.
• A monitor-mode WiFi adapter. The Pi's built-in WiFi can't do the monitor-mode and packet-injection work that WiFi auditing needs. You'll want an external USB adapter with a supported chipset. I don't want to re-review those here — I keep a dedicated, current list on my best wireless adapters for Kali Linux page. Pick one from there.

Affiliate links — I may earn a commission at no extra cost to you. Full disclosure.

Flashing Kali ARM with Raspberry Pi Imager

Kali publishes an official ARM image for the Pi, and the cleanest way to write it is Raspberry Pi Imager. Install Imager on your main computer (Windows, macOS, or Linux — it's a free download from raspberrypi.com), then put the microSD in a card reader.

1. Open Raspberry Pi Imager.
2. Under Choose Device, pick Raspberry Pi 5.
3. Under Choose OS, scroll to Other specific-purpose OS → Kali Linux and select the Raspberry Pi (ARM64) image. If you don't see it, download the RPi image from kali.org/get-kali and use the Use custom option to point Imager at the file.
4. Under Choose Storage, select your microSD. Double-check this — Imager will erase whatever you pick.
5. Click Next, decline the OS-customization prompt for now (Kali's defaults are fine, and we'll harden it on first boot), and let it write and verify.

Writing and verifying takes a few minutes. When Imager says it's done, eject the card and move it to the Pi.

First boot and the kali/kali login

For the first boot it's easiest to plug in a monitor, keyboard, and Ethernet — you only need them once, to enable SSH. Insert the microSD, attach the active cooler and PSU, and power on.

Kali boots to a desktop and a login screen. The default credentials on the ARM image are:

Open a terminal and set a real password:

It'll prompt for the current password (kali), then your new one twice. While you're here, update the system so you're not running month-old packages:

That first upgrade can take a while on a fresh image — the microSD choice you made earlier is exactly why. Once it finishes, my things to do after installing Kali checklist walks through the rest of the setup I run on every new box.

Enabling SSH for headless use

The whole point of a Pi pentest box is running it without a monitor. SSH is what makes that work. On the Kali ARM image the SSH server is installed but not enabled by default, so turn it on:

Confirm it's listening:

Find the Pi's IP address so you can reach it from your laptop:

Look for the address on your eth0 or wlan0 interface (something like 192.168.1.x). Now unplug the monitor and keyboard, and from your main machine connect over the network:

Once you're in over SSH, the Pi never needs a screen again. Power it from the wall as a desk sandbox, or from the power bank when you're moving around.

Checking that monitor mode works

If WiFi work is why you built this, verify the adapter does monitor mode before you rely on it in the field. Plug the USB adapter into the Pi and list your wireless interfaces:

You should see your external adapter as a second interface — usually wlan1 (the Pi's built-in radio is wlan0). Use the aircrack-ng suite to switch it into monitor mode:

Then confirm the interface is actually in monitor mode:

Look for type monitor in the output. If it says monitor, your adapter and driver are working on the Pi. A quick live test is to scan for nearby networks for a few seconds:

If access points start populating the list, monitor mode is live. Press Ctrl+C to stop.

From here you've got a full portable Kali box. If you're new to the tools waiting for you, my Kali commands for beginners guide is the natural next stop.