Kali Linux 2025.3 releases Gemini CLI for automated pentesting
The latest Kali Linux update, version 2025.3, introduces Gemini CLI, an open-source tool that integrates Google's Gemini AI into the terminal. This innovation automates penetration testing tasks like reconnaissance and vulnerability scanning using natural language prompts. Security professionals can now streamline workflows while maintaining control over assessments.
Kali Linux 2025.3, released on October 6, 2025, marks a significant advancement in cybersecurity tools with the addition of Gemini CLI. This command-line interface embeds Google's Gemini AI directly into the Kali terminal, enabling penetration testers to automate repetitive tasks such as reconnaissance, enumeration, and vulnerability scanning.
Traditionally, security operations required manual chaining of tools for activities like port scanning and service identification. Gemini CLI changes this by allowing users to issue natural language prompts to orchestrate these steps dynamically. For instance, a command like "scan webserver for SQL injection and generate report" triggers a sequence: ports are probed using Nmap, services are fingerprinted and version-mapped, specific vulnerability checks for web applications are launched, and findings are compiled into a structured report.
The tool supports testing for OWASP Top 10 vulnerabilities, including Injection, Broken Authentication, and Security Misconfigurations. It provides AI-guided suggestions for identification and remediation, complementing existing Kali packages such as sqlmap and wfuzz. Gemini CLI adapts automatically to discovered targets and configurations, acting as a force multiplier that frees analysts for deeper analysis and strategic decision-making.
Features include an interactive mode for supervised testing and a "YOLO" mode for fully automated operations, ensuring the human operator remains in control. Installation is simple for Kali users: run "sudo apt install gemini-cli," with the package weighing just 12.04 MB. This integration of AI into Kali Linux signals a shift toward more efficient penetration testing, where machine intelligence augments human expertise without replacing it.