Virtualization Basics

Virtualization lets you run a complete operating system inside software on your existing computer. The simulated machine is called a virtual machine (VM).

For ethical hacking this is essential: you get a disposable, isolated environment where you can run attacks and break things without harming your real system.

• Snapshots let you undo any damage instantly.
• Multiple VMs can share one physical host.

The software that creates and runs VMs is a hypervisor.

• Type 1 (bare-metal): runs directly on hardware (ESXi, Hyper-V, Proxmox).
• Type 2 (hosted): runs as an app on top of your OS (VirtualBox, VMware Workstation).

For a home lab you almost always use a Type 2 hypervisor.

VirtualBox by Oracle is free and open-source, available for Windows, macOS, and Linux. It is the most common starting point for beginners.

You install it, then create VMs by pointing it at an ISO file or importing a pre-built appliance.

VMware Workstation Pro (Windows/Linux) and VMware Fusion (macOS) are powerful commercial alternatives, now free for personal use.

VMware generally offers better performance and snapshot management, while VirtualBox is fully open-source. Either works for a hacking lab.

You build VMs from two main sources:

• ISO image: an installer disc you boot from and install step by step.
• OVA/OVF appliance: a pre-configured VM you import in one click (.ova file).

Kali Linux and most vulnerable VMs ship as ready-to-import appliances.

When creating a VM you assign it host resources:

• CPU cores - 2 is fine for most labs.
• RAM - 2 to 4 GB per VM; never give away more than half your host RAM.
• Disk - dynamically allocated disks grow only as needed.

Over-allocating starves the host and makes everything slow.

A snapshot saves the exact state of a VM (disk, memory, settings) at a moment in time. You can roll back to it later.

Take a clean snapshot right after installing a VM. If an attack corrupts it, restore in seconds.

Modern CPUs include hardware support for virtualization: Intel VT-x and AMD-V. These must be enabled in your BIOS/UEFI.

Without them, 64-bit guests will not run or will be extremely slow. Look for the setting under CPU or Advanced in your firmware.

After installing a guest OS, add the integration package:

• VirtualBox Guest Additions
• VMware Tools

These enable shared clipboard, better screen resolution, shared folders, and smoother mouse handling between host and guest.

A clone is a copy of a VM. Useful when you want a fresh victim machine without reinstalling.

• Full clone: independent copy with its own disk.
• Linked clone: shares the base disk, saving space but depending on the original.

The whole point of virtualization in a hacking lab is isolation. Keep malware and attacks inside VMs:

• Use isolated or host-only networking (covered later).
• Disable shared folders when handling real malware.
• Keep your hypervisor patched - VM escape bugs are rare but real.

Test your understanding of hypervisor types.

You learned the foundations of virtualization for a hacking lab:

• Hypervisors run VMs; Type 2 (VirtualBox, VMware) is best for beginners.
• Build VMs from ISO installers or OVA appliances.
• Snapshots let you undo damage instantly.
• Enable VT-x/AMD-V and isolate VMs to protect your host.

Next you will install Kali Linux, your attack box.