12 Create a Kali Linux VM
Mathew J. Heath Van Horn, PhD
Kali Linux is the distribution of choice for attacking a network thanks to the many attack tools it comes bundled with. This lab provides instructions for making a Kali Linux VM.
Phase 0 – Professional Alignment
Securing enterprise networks requires understanding how attackers discover vulnerabilities and exploit misconfigurations. In this chapter, you will install and configure a Kali Linux virtual machine, creating a professional penetration testing workstation equipped with industry-standard tools used to assess, validate, and strengthen enterprise network security.
DCWF Work Roles
The knowledge and skills developed in this chapter align with the following Department of Defense Cyber Workforce Framework (DCWF) work roles:
- 451 – System Security Analyst
- 511 – Network Operations Specialist
- 541 – Cyber Defense Analyst
NICE Work Roles
This chapter supports competencies associated with the following NICE Workforce Framework for Cybersecurity work roles:
- Cyber Defense Analyst
- Vulnerability Assessment Analyst
- Network Operations Specialist
Professional Skills
By completing this chapter, you will begin developing the ability to:
- Deploy a penetration testing workstation in a virtual enterprise environment.
- Configure Linux-based security assessment tools.
- Maintain a cybersecurity workstation through software updates and package management.
- Prepare a security testing platform for vulnerability assessment and penetration testing.
- Verify the functionality of offensive security tools in a controlled laboratory.
- Build a reusable cybersecurity workstation for future enterprise security exercises.
What You’ll Be Able to Do
After completing this chapter, you should be able to:
- Install the Kali Linux virtual machine in Oracle VirtualBox.
- Update and maintain the Kali Linux operating system and software packages.
- Install additional security tools required for later laboratory exercises.
- Verify that Kali Linux functions correctly within your virtual networking environment.
- Integrate the Kali Linux virtual machine into your GNS3 laboratory.
- Prepare a fully operational penetration testing workstation for future offensive and defensive cybersecurity labs.
Learning Objectives
- Successfully download, install, and run Kali Linux in a GNS3 environment
Prerequisites
Deliverables
- None – this is a preparatory lab that supports other labs in this book
Resources
- Download Kali Linux
- Download Nessus Essentials for Education
Contributors and Testers
- Kyle Wheaton, Cybersecurity Student, ERAU-Prescott
Phase I – Download and Installation
We will download and install the Kali Linux virtual machine (VM).
- Start by downloading the VirtualBox Virtual Machine Image
Figure 1 – download the VM IMPORTANT: Ensure you download the Virtual Machine image.
- Unzip the downloaded file with 7-Zip
Figure 2 – unzip and double-click - Double-click on the unzipped file, and it will add itself to VirtualBox
Figure 3 – added to VirtualBox - Start the Kali VM
- The default login is
- USERNAME: kali
- PASSWORD: kali
- Open the terminal
Figure 4 – open a terminal - Update Kali
sudo apt update -y
- Upgrade Kali
sudo apt upgrade -y
- Update Kali
- This will take quite a while, depending on the last time the image was updated
Figure Zzzzzz - VirtualBox Guest Additions are already installed
- We recommend turning off the machine and renaming it with today’s date so you can keep a lightweight version of Kali in your library. We named ours “Kali – 15 Feb 2025”
Phase II – Necessary Software (eventually)
While Kali comes with a large toolset, there are two tools we will need later that are not preinstalled. These tools do not need to be installed right now, just remember that the instructions are here when the chapters call for them.
- Install Rainbow Crack
- Open the terminal and run this command to install Rainbow Crack
sudo apt-get install rainbowcrack
- Once the installation completes, close the terminal and open Firefox
- Open the terminal and run this command to install Rainbow Crack
- Install Nessus Essentials. At the time of this writing, the Kali VM has a large enough hard drive to accommodate Nessus. However, you should know that you will need at least 80GB. If you have difficulties due to disk size, visit our Miscellaneous Chapter for instructions on resizing the hard drive
- In Firefox, go to this link to download Nessus Essentials for Education. Click on try now
Figure 24 – Install Nessus - You will need to provide a business (school) email, but none of our testers have reported spam from this
- Click the download button that appears. Then leave the defaults on the next screen and click download. At the time of writing, the version of Nessus is 10.11.2
- Open the folder where you downloaded the file. Right-click inside the folder and click Open Terminal Here
Figure 25 – Open the download folder - Use the following command to install the Nessus Package
NOTE: Adjust the filename to reflect the current file name you just downloaded
sudo dpkg -i Nessus-10.7.1-ubuntu1604_amd64.deb
- Use the following command to start the Nessus Scanner. While we won’t do much with it right now, we will need to input the activation code from our email
/bin/systemctl start nessusd.service
- In the window that pops up, enter the user password. Following that, reopen Firefox and go to this link
https://kali:8834
- The page will tell you that it is insecure. Click advanced and then Accept the risk and continue
Figure 26 – Using Firefox to navigate Nessus - Click continue on the first screen
Figure 27 – Continue - Select the Register for Nessus Essentials radio button
Figure 28 – Register - And click continue. If you have already received the email earlier, then click skip
Figure 29 – Skip if you already have the code - Input the activation code from your email and click continue
Figure 30 – Input the activation code - Make a username and password for your account and select submit
Figure 31 – Create username and password 
Figure 32 – This could take a while - Nessus will take a while to download and compile plugins, so wait for this process to complete before switching the machine off
Career Connection
Kali Linux is one of the most widely recognized platforms used by cybersecurity professionals for penetration testing, vulnerability assessments, digital forensics, and security validation. Security analysts, penetration testers, incident responders, and network defenders rely on many of the same tools included with Kali Linux to identify weaknesses before adversaries can exploit them. The workstation you build in this chapter will become your primary platform for evaluating, attacking, and defending enterprise networks throughout the remainder of this textbook.
End of Lab
