Lab 00 — Set Up Your Lab
Start from a laptop with nothing installed and finish with a safe, self-contained Kali machine you can practise in. No prior setup assumed — every click is spelled out.
0 / 6 steps
What you’re building
A virtual machine — a whole second computer running Kali Linux (the distribution loaded with security tools) inside a window on your own PC. It’s walled off from your real system, you can break it freely, and if you ever wreck it you roll back to a clean copy in seconds. This is the sandbox every other lab runs in.
⚠ Why a VM and not the real thing. Security tools poke at systems in ways you don’t want touching your everyday computer or network. The VM keeps all of it in a box. Keep it that way: only ever point tools at machines inside your lab or at hosts that explicitly allow it.
Steps
01Install VirtualBox
VirtualBox is the free program that runs virtual machines. It’s made by Oracle and it’s free for personal use.
- Go to virtualbox.org/wiki/Downloads
- Under VirtualBox platform packages, click Windows hosts (or macOS / Intel hosts if you’re on a Mac). An installer downloads.
- Open the downloaded file and click Next → Next → Yes → Install. Accept the defaults; it’s safe to say yes to the network warning during install.
- When it finishes, let it launch. You should see the Oracle VirtualBox Manager window, empty for now.
On a work laptop? If the installer is blocked, your machine is locked down by IT — use a personal computer for the lab. Don’t fight a managed device.
02Download the ready-made Kali machine
You could install Kali from scratch, but there’s a shortcut: Kali publishes a pre-built VirtualBox image. You download one file and import it — no OS install to sit through.
- Go to kali.org/get-kali and pick Virtual Machines.
- Click the VirtualBox download (a large
.7zfile, ~3–4 GB — this is the slow part). - You’ll need 7-Zip to unpack a
.7z. Install it, then right-click the downloaded file → 7-Zip → Extract Here. You get a folder with a.vboxfile inside.
Why the prebuilt image: a from-scratch install means partitioning, drivers, and guest-additions headaches. The prebuilt VM skips all of it and boots straight to a working desktop. Start here; do a manual install later if you ever want to.
03Add it to VirtualBox and start it
- In VirtualBox Manager, double-click the
.vboxfile you extracted (or use Machine → Add and point it at that file). Kali appears in the left-hand list. - Select it and click the green Start arrow.
- A window opens and Kali boots to a login screen.
- Log in with username
kaliand passwordkali.
If it won’t boot with a VT-x / virtualization error: reboot into your PC’s BIOS/UEFI and enable Intel VT-x or AMD-V. It’s off by default on some machines and VMs can’t run without it.
04Update it once
The image was built a while ago. Bring it current so tools behave. Open the Terminal (the black icon in Kali’s top bar) and run:
$ sudo apt update && sudo apt full-upgrade -y
It asks for your password (kali) — the screen shows nothing as you type, that’s normal. Then it downloads and installs updates. Grab a coffee; this can take 10–20 minutes the first time.
05Take a snapshot — your undo button
This is the step beginners skip and regret. A snapshot freezes the machine’s exact state so you can return to it after any mess.
- In the Kali VM window’s menu bar, click Machine → Take Snapshot.
- Name it
clean installand click OK.
Why it matters: break something, get a tool tangled, or want to redo a lab from zero — right-click the VM → Snapshots → Restore and you’re back to this exact moment in seconds. Take a fresh snapshot before each new lab.
06Confirm you’re ready
One command proves the tools are there. In the Kali terminal:
$ nmap --version
If it prints a version line (Nmap version 7.xx), everything works. That’s the tool you’ll use in the very next lab.
You have a safe, isolated Kali machine with a clean snapshot to fall back on. Every other StashGrid lab starts from right here.
Next
Original walkthrough. Download links go to the official VirtualBox, Kali and 7-Zip sites; steps reflect current standard setup — versions and screens change, so trust the official page if a button has moved.