diff --git a/kali/flake.lock b/kali/flake.lock
index 0f47469..76f25a6 100644
--- a/kali/flake.lock
+++ b/kali/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1763618868,
-        "narHash": "sha256-v5afmLjn/uyD9EQuPBn7nZuaZVV9r+JerayK/4wvdWA=",
+        "lastModified": 1778869304,
+        "narHash": "sha256-30sZNZoA1cqF5JNO9fVX+wgiQYjB7HJqqJ4ztCDeBZE=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a8d610af3f1a5fb71e23e08434d8d61a466fc942",
+        "rev": "d233902339c02a9c334e7e593de68855ad26c4cb",
         "type": "github"
       },
       "original": {
diff --git a/kali/flake.nix b/kali/flake.nix
index 7775f3e..92d2e7f 100644
--- a/kali/flake.nix
+++ b/kali/flake.nix
@@ -17,24 +17,37 @@
   in {
     devShells.default = pkgs.mkShell {
       packages = with pkgs; [
+        burpsuite
         dirb # Web content scanner
+        enum4linux-ng # Windows/Samba enumeration tool
+        exiftool
         exploitdb # Archive of public exploits and corresponding vulnerable software
+        feroxbuster # Recursive content discovery tool
+        gdb
         ghidra-bin # Software Reverse Engineering
+        hashcat # Password cracking
         hash-identifier
         john # Password cracker
         ltrace # Library call tracer
         metasploit # collection of exploits
         nikto # Web server scanner
         nmap # Network discovery
+        protobuf
+        pwntools
         smbclient-ng # SMB
         social-engineer-toolkit
+        steghide
         strace # System call tracer
         thc-hydra # Logon cracker
 
         (wordlists.override { lists = with pkgs; [
+          nmap
           rockyou
+          seclists
+          wfuzz
         ]; })
 
+        tmux
         steam-run
       ];
     };