Chapter Is this a real box? Or is this just fantasy?
Oracle Virtual Box VMs, Environments and Kali Linux
For our workshop purposes we need a way to organize multiple Virtual Machines within
a work Environment that’s both practical and simple to understand. For that reason the
tool that was chosen is Oracle VirtualBox.
Oracle VirtualBox is a general-purpose full virtualizer for hardware, targeted at server,
desktop and embedded use.
Basically, it allows you to run more than one OS at a time. This means that we can run
an OS such as Linux or MAC in our Windows distribution, without having to go through
the hassle of doing a full installation in our real machines, which also includes a big
bonus for us in that you can set it up in your Endava machine and run a VM for a
different OS distribution without hindering it in any way.
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 2
Oracle Virtual Box VMs, Environments and Kali Linux
No surprises here, just a standard installation.
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 3
Chapter What is this?
Kali Linux VMs, Environments and Kali Linux
Is an open-source and Debian-based Linux distribution, aimed at advanced
Penetration Testing and Security Auditing. It does this by providing common tools,
configurations, and automations which allows the user to focus on the task that needs
to be completed, not the surrounding activity.
Kali contains industry specific modifications as well as several tools targeted towards
various Information Security tasks, such as Penetration Testing, Security Research,
Computer Forensics, Reverse Engineering, Vulnerability Management and Red Team
Testing.
It is also among the most common OS distributions used as an entry point for
security practices and learning. There's A LOT of available documentation, help forums
and online courses available to learn how to use it and all of its in-built capabilities.
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 5
Chapter The Good, the Bad and the Ugly
Metasploitable, TryHackMe and HackTheBox VMs, Environments and Kali Linux
Metasploitable refers to a vulnerable machine that enables the learning and practice
of the framework known as Metasploit, as well as other techniques and use of security
tools. This vulnerable machine enables users to set up a penetration testing
environment to learn and practice hacking.
Online platforms that provide a wide variety of vulnerable machines, with the objective
of providing cyber security trainees or enthusiasts with hands-on training means to
practice and learn hacking techniques. They are set up as real-world scenarios (or as
close as it gets).
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 7
Chapter What is it gonna look like?
Environment Review VMs, Environments and Kali Linux
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 9
Chapter Now, let’s get a good grip on how Kali works and some useful tips
Installation Metasploitable VMs, Environments and Kali Linux
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 11
Installation Kali Linux VMs, Environments and Kali Linux
© Copyright 2023 Endava • Confidential and Proprietary • Version 1.0 12
Chapter Gotta love ‘em
1 - Oracle VirtualBox Download
2 - Oracle VirtualBox Documentation
3 - Kali Linux - Workshop Download
4 - Kali Linux Documentation
5 – Metasploitable Download
6 – Metasploitable Documentation
7 – HackTheBox *needs registration to access –it’s free :)
8 – TryHackMe
9 – HackTricks *Useful resource compiling info about tricks/techniques and tools
10 – Linux Commands Cheat Sheet
11 – Windows Commands Cheat Sheet