Kali Linux – The most advanced penetration testing distribution, running on Windows 11 via Windows Subsystem for Linux (WSL)
In 2026, running Kali Linux on Windows 11 is genuinely seamless. WSL 2 has matured into a robust, production-quality Linux environment, and Kali's integration with it has kept pace — offering everything from a full graphical desktop to a curated suite of pre-installed security tools. If you already have Windows 11 and the appropriate permissions in your environment, this is one of the fastest ways to get a professional penetration testing setup running without touching your boot configuration.

TL;DR – On Windows 11 with WSL 2, it just works. The tooling has only improved since WSL first launched, and Kali's Windows integration is now a first-class deployment option rather than a curiosity.
Contents
- Kali Linux – The most advanced penetration testing distribution, running on Windows 11 via Windows Subsystem for Linux (WSL)
- Get permission first
- What's available in 2026
- Install from the Microsoft Store
- Kali Desktop Experience for Windows (Win-Kex)
- Installing tools with metapackages
- Use kali-tweaks to customise your shell and environment
- Performance and practical considerations
Get permission first
What's available in 2026
Kali Linux has continued its rolling release model, meaning the version you install from the Microsoft Store is kept current with upstream Offensive Security updates. The default installation now ships with a more curated default toolset — rather than installing every tool at once, Kali uses metapackages so you install the categories of tools you actually need. The kali-linux-default metapackage covers the most commonly used tools, while specialists can pull in kali-linux-everything for the full suite, or targeted packages like kali-tools-web, kali-tools-wireless, or kali-tools-forensics.
WSL itself has also evolved significantly. Microsoft's WSL now supports systemd by default, which resolves a long-standing limitation that prevented certain Kali services — including some network daemons and the Metasploit service — from running cleanly inside WSL. If you're on a current Windows 11 build, systemd support is enabled automatically and you'll notice fewer workarounds are needed compared to earlier WSL configurations.
Install from the Microsoft Store
With WSL 2 installed on Windows 11, getting Kali running is straightforward. Search for Kali Linux in the Microsoft Store and install it directly.
- Check your WSL version – Open a PowerShell or Windows Terminal session and run
wsl --list --verbose. You want to seeVERSION 2next to your distributions. If you're still on version 1, upgrade withwsl --set-version kali-linux 2or set version 2 as the default going forward withwsl --set-default-version 2.
"wsl --list --verbose" Command - Install from the Microsoft Store – Find Kali Linux, install it, and click Open when it finishes.

Kali Linux installed from Windows Store - Enable systemd – For the best experience in 2026, ensure systemd is enabled in your WSL configuration. Edit or create
/etc/wsl.confinside your Kali instance and add:
Then restart WSL with[boot] systemd=truewsl --shutdownfrom PowerShell and relaunch Kali. This unlocks proper service management and resolves compatibility issues with several Kali tools. - If something doesn't work – The Kali Linux WSL documentation is thorough and actively maintained. It covers edge cases around corporate proxy configurations, Windows Defender interactions, and network adapter quirks that occasionally catch people out.
- Once installed, you have a full Kali Linux command-line environment running inside Windows Terminal.

Kali in the Windows Terminal - The command line is powerful, but there's a full graphical desktop available too — and it's worth setting up.
Kali Desktop Experience for Windows (Win-Kex)
Win-Kex gives you a full Xfce graphical desktop for Kali Linux running inside WSL, with a shared clipboard between Windows and Linux and seamless window integration. It has become a genuinely polished experience — less of a hack, more of a workflow.
- Update first – At the Kali command line, run sudo apt update && sudo apt full-upgrade -y. Note that
full-upgradeis now preferred overupgradefor Kali's rolling release model, as it handles dependency changes more cleanly. This step takes a while on a fresh install. - Install Win-Kex – Run sudo apt install -y kali-win-kex
- Launch Win-Kex – Run kex --win for a window mode desktop, or kex --sl for seamless mode, which integrates Kali application windows directly into your Windows desktop alongside your native apps.
The seamless mode in particular is worth trying if you're doing active assessments — you can have Burp Suite, a Kali terminal, and your Windows reporting tools all on the same desktop without switching contexts. The shared clipboard makes copying output between environments frictionless.
Installing tools with metapackages
Rather than installing tools one by one, Kali's metapackage system lets you pull in entire categories of tooling with a single command. A few useful starting points:
- sudo apt install kali-linux-default – The standard set of tools covering most penetration testing scenarios
- sudo apt install kali-tools-web – Web application testing tools including Burp Suite Community, nikto, sqlmap, and dirb
- sudo apt install kali-tools-wireless – Wireless assessment tools including aircrack-ng and associated utilities
- sudo apt install kali-tools-forensics – Digital forensics and incident response tools
- sudo apt install kali-tools-exploitation – Exploitation frameworks including Metasploit
This approach keeps your WSL instance lean. Install what you need for the engagement, and the apt package manager makes it easy to add or remove tool categories as your work changes.
Use kali-tweaks to customise your shell and environment
The default two-line Kali shell prompt divides opinion. If you prefer something cleaner, kali-tweaks handles this and a range of other configuration options without manual dotfile editing.
Install it with sudo apt install kali-tweaks and launch it with kali-tweaks. The Shell & Prompt section lets you switch to a single-line prompt, choose between zsh and bash configurations, and toggle Powerlevel10k theming if you want a more information-dense prompt with Git branch indicators and exit code display.



- Run kali-tweaks from the terminal, or from Settings in Win-Kex
- Choose Shell & Prompt
- Choose Configure Prompt
- Select One Line from Prompt Style (or experiment with Powerlevel10k if you want more detail)
- Tab to Apply
- Close and reopen your terminal — the new prompt takes effect immediately in new sessions
Kali-tweaks also covers network repository configuration, which is useful if you want to enable additional Kali package repositories or switch to a closer mirror for faster updates.
Performance and practical considerations
WSL 2 runs a real Linux kernel in a lightweight Hyper-V virtual machine, which gives it near-native filesystem and network performance for most penetration testing tasks. The main practical limitation remains raw network access — WSL 2 sits behind a virtual network adapter, so tools that require direct Layer 2 access or raw socket manipulation may behave differently than they would on a native Kali installation or a dedicated VM. For most web application testing, OSINT work, exploitation, and post-exploitation activity, this is not a meaningful constraint. For wireless assessments or scenarios requiring packet injection, a dedicated Kali installation or a full virtual machine with USB passthrough for a compatible wireless adapter will serve you better.
For the majority of professional engagements, Kali on WSL 2 in 2026 is a capable, well-integrated, and low-friction environment that fits naturally into a Windows-primary workflow.
See also: