Laurence Dutton/E+ via Getty Images
Follow ZDNET: Add us as a preferred source on Google.
ZDNET’s key takeaways
Kali Linux and Parrot OS are geared toward penetration testing.
Only Parrot OS has an option for general-purpose use.
You can download and install each of these distros for free.
Cybersecurity. The word can bring to mind TV shows and movies in which a roomful of tech elites, sporting headsets and staring at massive arrays of screens, are trying to track down who did what to whom.
Whew.
In reality, cybersecurity isn’t always about rooms deep within the bowels of unmarked, windowless buildings, populated with women and men who are Sheldon Cooper-level brilliant. Sometimes, cybersecurity is one person at home running tests on their own LAN — and the machines on it — to find vulnerabilities that can be fixed.
Also: This Debian-based Linux distro has one of the smartest security features I’ve tested in years
That’s where the likes of Kali Linux and Parrot OS come into play.
Both distributions are geared toward those interested in cybersecurity and pentesting.
What is pentesting?
Pentesting — short for penetration testing — can simulate cybersecurity attacks on a network or system to find and exploit weaknesses before hackers do. The thing is, until a vulnerability is found, it cannot be patched. Those vulnerabilities could be as simple as weak user passwords or as complicated as vulnerable OS kernels.
Without specialized software, how would you ever know about those vulnerabilities? You probably wouldn’t.
Thanks to pentesting, those vulnerabilities can be discovered.
Also: I’m a Linux power user, and this distro made me rethink what an operating system can be
If that interests you, you’ll be glad to know there are two Linux distributions purpose-built for testing your LAN/systems for vulnerabilities.
Let’s take a look at each.
What is Kali Linux?
Kali Linux can be daunting because of all the challenging tools.
Screenshot by Jack Wallen/ZDNET
When people think of pentesting distributions, Kali Linux is usually the first that comes to mind.
The first thing you should know is that Kali Linux is based on Debian, which means it has access to the standard Debian repositories, which include a wealth of installable applications.
Next, you’ll want to know that Kali Linux allows you to choose from the GNOME, KDE Plasma, and Xfce desktop environments.
Kali Linux also uses a security-focused kernel that is regularly patched and highly customized for pentesting and wireless injection.
Also: 7 apps I use to lock down, encrypt, and store my private files – and most are free
There are also the 600+ preinstalled applications, most of which are geared toward information gathering, vulnerability analysis, wireless attacks, web application testing, and more. Many of those applications include industry-specific modifications, such as those for computer forensics, reverse engineering, and vulnerability detection.
And then there are the two modes: Forensics Mode for investigation and “Kali Undercover,” which blends the OS with Windows.
Does this all sound over your head? Kali Linux could still be useful to you. Allow me to explain: Generally speaking, Kali Linux isn’t a general-purpose operating system; it’s built specifically for penetration testing. But I’d argue that Kali Linux is also a great platform for learning about cybersecurity.
For example, you might want to learn how to map your network. For that, Kali Linux includes nmap. You might also want to test for password weaknesses, so you’d use John The Ripper. Once you start learning how to use those tools, you begin to better understand the role cybersecurity plays in IT.
Also: After 30 years with Linux, I switched to Windows 11 – and found 9 serious problems
It can be complicated. But anyone wanting to dive into the cybersecurity world would do well to take Kali Linux one app at a time, because if you look at it as a whole, you will be overwhelmed.
Kali Linux also features:
You can run Kali Linux directly from a USB stick without installation, with options to save sessions and encrypt data.
The ability to build tailored ISO images, choosing desktop environments (Xfce, GNOME, KDE), and even support for ARM hardware.
A regularly patched and customized kernel.
Maintained by Offensive Security under a strict open-source model, free to use and modify.
Broad language support.
Strong support for all types of modern hardware.
Is Kali Linux right for you?
Kali Linux is best suited for two types of users: those who know the ins and outs of cybersecurity and need to run network penetration tests, and those who want to learn about cybersecurity. If you don’t fit either of those descriptions, Kali Linux is definitely not the right Linux distribution for you.
What is Parrot OS?
Parrot OS (aka Parrot Security or just Parrot) is another popular pentesting Linux distribution that operates in a similar fashion. Parrot OS is also based on Debian and is designed for security experts, developers, and users who prioritize privacy.
It’s that last bit you should pay attention to. Yes, Parrot OS includes a similar collection of tools as does Kali Linux, but it also offers apps to protect your online privacy. To that end, Parrot is available in two editions: Security and Home.
Also: This Linux distro has one of the smartest security features I’ve seen (and I’ve tested dozens)
The difference between the Security and Home editions lies in the preinstalled software. While Security is a full-featured distribution geared specifically for pentesting, Home is a more general-purpose OS designed for daily use, privacy, and development.
In other words, you could use Parrot OS as a cybersecurity tool or for general use. If you opt to use Parrot for general use, you can trust that you’ll be working with added layers of security to protect your privacy.
To secure your privacy, Parrot Home Edition includes the following:
A built-in, one-click tool that routes all system traffic through the Tor network
Preinstalled software such as the Tor Browser, metadata cleaners, and VSCodium (a version of VS Code with telemetry removed)
A hardened Linux kernel and AppArmor profiles that help restrict program privileges and prevent common exploitation techniques
Built-in encryption tools like ZuluCrypt and the GNU Privacy Assistant (GPG)
Zero telemetry collection
Is Parrot OS right for you?
What I like about Parrot OS is that you have options. If you want to run tests on your network and/or systems, you can do that. If you want to learn more about cybersecurity, you can do that. If you want to use a general-purpose operating system that has added privacy features, you can do that.
In other words, Parrot OS is the only of these two options viable for everyday users seeking extra protection against privacy invasions.
Kali Linux vs. Parrot OS
If you are really serious about penetration testing (or learning about it), I would go with Kali Linux, as it has become the de facto standard in this space.
However, if you want the option to use such a distribution for everyday computing, I would recommend going with Parrot Home Edition. And if you want to start learning more about security, you can later on go with Parrot Secure Edition.
Also: RAM too expensive? Here’s how to speed up your Linux system anyway – for free
Either way you go, you’ll have all the tools you need to test whether your network or the attached devices are secure against attacks.