What is the best tool for scanning website vulnerabilities?

I have never used kali linux
With what to scan the vulnerability of websites?

Now that would depend on which type of web vulnerability you are actually looking for..

burp suite or owasp zap give you a GUI to help you when your starting out, and later, when your more experienced, you might use tools from a shell, such as metasploit or sqlmap.