VirtualBox

Skill Level: Beginner to Intermediate Prerequisites: Basic virtualization concepts

Performance Optimization

# Enable nested virtualization (Intel)
VBoxManage modifyvm "VM Name" --nested-hw-virt on

# Allocate resources appropriately
VBoxManage modifyvm "VM Name" --cpus 4 --memory 8192 --vram 256

# Enable PAE/NX for 64-bit guests
VBoxManage modifyvm "VM Name" --pae on

# Use paravirtualized network adapter (faster)
VBoxManage modifyvm "VM Name" --nictype1 virtio

# Enable disk caching
VBoxManage storagectl "VM Name" --name "SATA Controller" --hostiocache on

# Use SSD optimization
VBoxManage storageattach "VM Name" --storagectl "SATA Controller" --port 0 --nonrotational on

Network Configuration for Labs

Internal Pentest Lab Network

# Create internal network for isolated testing
VBoxManage modifyvm "Kali" --nic1 nat --nic2 intnet --intnet2 "pentestlab"
VBoxManage modifyvm "Target-Windows" --nic1 intnet --intnet1 "pentestlab"
VBoxManage modifyvm "Target-Linux" --nic1 intnet --intnet1 "pentestlab"

# Host-only network for accessing VMs from host
VBoxManage hostonlyif create
VBoxManage hostonlyif ipconfig "vboxnet0" --ip 192.168.56.1 --netmask 255.255.255.0
VBoxManage modifyvm "Kali" --nic3 hostonly --hostonlyadapter3 "vboxnet0"

NAT Network with Port Forwarding

# Create NAT network
VBoxManage natnetwork add --netname "PentestNAT" --network "10.0.2.0/24" --enable

# Port forwarding rules
VBoxManage natnetwork modify --netname "PentestNAT" --port-forward-4 "ssh:tcp:[]:2222:[10.0.2.15]:22"
VBoxManage natnetwork modify --netname "PentestNAT" --port-forward-4 "http:tcp:[]:8080:[10.0.2.15]:80"

MacOS Guest Setup

# Tested in ElCapitan(10.11) to Sonoma(14)
# Find and download your desired vmdk file
# Add your VM using existing disk
# Set Chipset ICH9
# Enable PAE/NX
# Video Memory 128 MB
# After created: 
cd "C:\Program Files\Oracle\VirtualBox\"
VBoxManage.exe modifyvm "VM Name" --cpuidset 00000001 000106e5 00100800 0098e3fd bfebfbff
VBoxManage setextradata "VM Name" "VBoxInternal/Devices/efi/0/Config/DmiSystemProduct" "iMac11,3"
VBoxManage setextradata "VM Name" "VBoxInternal/Devices/efi/0/Config/DmiSystemVersion" "1.0"
VBoxManage setextradata "VM Name" "VBoxInternal/Devices/efi/0/Config/DmiBoardProduct" "Iloveapple"
VBoxManage setextradata "VM Name" "VBoxInternal/Devices/smc/0/Config/DeviceKey" "ourhardworkbythesewordsguardedpleasedontsteal(c)AppleComputerInc"
VBoxManage setextradata "VM Name" "VBoxInternal/Devices/smc/0/Config/GetKeyFromRealSMC" 1

# For Apple Silicon compatibility (limited support)
# Use UTM or Parallels instead for M1/M2/M3 Macs

Windows Target Setup

# Download Windows evaluation VMs
# https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/

# Disable Windows Defender for testing
VBoxManage guestcontrol "Windows" run --exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" \
  --username Administrator --password password -- -Command "Set-MpPreference -DisableRealtimeMonitoring $true"

Kali Linux Setup

# Download Kali VM
# https://www.kali.org/get-kali/#kali-virtual-machines

# First boot setup
sudo apt update && sudo apt full-upgrade -y

# Install additional tools
sudo apt install -y gobuster feroxbuster seclists wordlists

# Configure shared folders
VBoxManage sharedfolder add "Kali" --name "shared" --hostpath "/path/to/shared" --automount
# In Kali: mount -t vboxsf shared /mnt/shared

Snapshots & Clones

# Take snapshot before testing
VBoxManage snapshot "VM Name" take "Clean-State" --description "Before exploitation"

# Restore snapshot
VBoxManage snapshot "VM Name" restore "Clean-State"

# Clone VM for multiple tests
VBoxManage clonevm "VM Name" --name "VM-Clone" --register --mode machine

# Linked clone (saves disk space)
VBoxManage clonevm "VM Name" --name "VM-Linked" --register --mode machine --options link

Vulnerable Lab VMs

# Metasploitable 2/3
https://sourceforge.net/projects/metasploitable/

# VulnHub collection
https://www.vulnhub.com/

# DVWA (Docker)
docker run --rm -it -p 80:80 vulnerables/web-dvwa

# HackTheBox retired machines
# TryHackMe rooms

Headless Operation

# Start VM headless (no GUI)
VBoxManage startvm "VM Name" --type headless

# Control headless VM
VBoxManage controlvm "VM Name" poweroff
VBoxManage controlvm "VM Name" pause
VBoxManage controlvm "VM Name" resume

# List running VMs
VBoxManage list runningvms

Related Topics

• Lab Setup Guide - Docker labs and more

• Docker/Kubernetes - Container testing