I recently installed Kali Linux 17.2 to a VMWare VM. During the installation I was prompted for a mirror to use to update packages. All of the mirrors available returned an error that they were invalid, so I had to finish the installation as a "minimal installation" like the installer warned me against; but I was stuck with either abandoning the installation and starting over from scratch, which wouldn't guarantee a better outcome, or just go with it and try to figure it out later.
After the installation finished and I booted into my fresh new Kali, I went to " apt update && apt upgrade -y
" and found that it wouldn't. I checked my /etc/apt/sources.list file and it contained this...

No online sources, and the CDROM source lines are commented out, so every time I ran " apt update
", the system was content that it needed no updates.
I updated the sources.list file to...

And in plain text, for your cutty/pastie pleasure ...
deb http://http.kali.org/kali kali-rolling main contrib non-free
# For source package access, uncomment the following line
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free
Save the file, and then re-run " apt update && apt upgrade -y
". It'll take a while to update/upgrade depending on the size of your pipe; and then you will be all updated and able to install stuff.
Hack with reckless abandon!