how to build a HACKING lab (to become a hacker)

About this video

NetworkChuck walks through building a safe, isolated hacking lab on a single laptop using VirtualBox. He installs VirtualBox, downloads a Kali Linux attacker VM and a deliberately vulnerable target VM from VulnHub (he picks the Mr. Robot-themed machine), and imports both as OVA files. The key safety step is networking: both VMs are moved from NAT/bridged to the same VirtualBox internal network so they cannot reach the host, the home network, or the internet, and vice versa. Because an internal network has no address service, he uses the VBoxManage command-line tool to create a DHCP server for that network, defining a small address pool, then boots Kali and confirms it received an address from that pool and cannot ping the host or Google. He then boots the target, finds it with an Nmap SYN scan of the pool, notes its open web and SSH ports, and opens its themed web page in a browser. He stops before exploiting it, framing it as a capture-the-flag exercise with three flags to find, and encourages beginners to learn by following walkthroughs and then trying other VulnHub boxes in the same isolated lab.

Key takeaways

• A safe hacking lab needs only one computer with at least 16 GB of RAM, VirtualBox, a Kali Linux attacker VM, and a deliberately vulnerable target VM
• Put both VMs on the same VirtualBox internal network to isolate them from the host, home network, and internet, because vulnerable machines are also attackable by others
• An internal network has no DHCP by default, so create one with VBoxManage dhcpserver add, specifying the network name, server IP, address pool, and netmask
• Verify isolation before attacking: confirm Kali got an address from your pool and cannot reach the host IP or the internet
• Use Nmap to enumerate the isolated range, identify the target and its open ports, then treat the box as a capture-the-flag challenge

Episode details: published March 5, 2021 · 16:28 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: forcing my kids to make Ethernet cables // FREE CCNA // EP 11 · Next: find social media accounts with Sherlock (in 5 MIN) →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube