Cyber Security News

Kali Linux Introduces Two New Tools for Raspberry Pi to Boost Wi-Fi Performance

Kali Linux maintainers have unveiled two new packages designed to unleash the full potential of the Raspberry Pi’s onboard wireless chipset, enabling native monitor-mode and packet-injection capabilities without the need for external adapters.

Arriving as part of the recent Kali Linux 2025.1 release, these additions—brcmfmac-nexmon-dkms and firmware-nexmon—aim to streamline wireless security assessments on popular ARM-based Pi boards.

By formalizing support for the celebrated Nexmon firmware-patching framework, the Kali team promises to remove longstanding hurdles that previously confined many users to USB dongles and convoluted driver builds.

Overcoming Hardware Limitations

Until now, Raspberry Pi models have relied on Broadcom/Cypress Wi-Fi chips that ship with closed-source firmware lacking monitor-mode or injection support.

While the open-source Nexmon project from SEEMOO Lab has long offered a workaround by patching the brcmfmac driver and its firmware binaries, integrating those community-led efforts into a distribution was far from trivial.

Kali’s developers found themselves caught between kernel-series constraints and the brittleness of manual patch management, stuck on the Linux 5.15 kernel for an extended period.

Streamlined Installation Process

The new packages can be installed with straightforward commands that eliminate previous complexity:

$ sudo apt update

$ sudo apt full-upgrade -y

$ sudo apt install -y brcmfmac-nexmon-dkms firmware-nexmon

$ sudo reboot

After installation, users can verify the Nexmon-patched driver is active:

$ modinfo brcmfmac | grep filename

Enhanced Wireless Capabilities

By embracing the 6.12-series kernel and overhauling their packaging strategy, the Kali team has reimagined how Nexmon fits into the distribution.

The new brcmfmac-nexmon-dkms package leverages DKMS (Dynamic Kernel Module Support) to automatically rebuild the patched driver against any installed kernel, dramatically reducing maintenance headaches.

Activating monitor mode is now as simple as:

$ airmon-ng start wlan0

Users can then verify the interface status:

$ iw dev

Testing injection capabilities requires:

$ sudo aireplay-ng --test wlan0mon

Early testing has confirmed support across a broad swath of Pi hardware, from the flagship Raspberry Pi 5 and 4 down to the diminutive Zero 2 W and Zero W.

Performance in monitor mode compares favorably to common third-party adapters, while injection stability remains subject to individual chip revisions and antenna designs.

For troubleshooting, Kali maintainers recommend disabling power management:

$ sudo iwconfig wlan0 power off

Security professionals and hobbyists alike stand to benefit from this streamlined approach. For penetration testers on the go, the ability to carry a single Raspberry Pi with built-in wireless analysis capability simplifies travel and logistics.

With these two new Nexmon-powered packages, Kali Linux cements its reputation for cutting-edge wireless security tooling, extending the scope of what the Raspberry Pi can achieve in network assessment scenarios.

Get Free Ultimate SOC Requirements Checklist Before you build, buy, or switch your SOC for 2025 - Download Now

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago