## Setting Up Your Lab

You cannot learn hacking by reading. You must **do**.
A Home Lab is safe place to break things.

### The Virtualization Hypervisor
Allows you to run multiple Operating Systems on one physical computer.
*   **VirtualBox**: Free, Open Source. (Recommended).
*   **VMware Workstation Player**: Free for personal use. fast.

### The Attack Box: Kali Linux
A Debian-based Linux distribution pre-installed with 600+ hacking tools.
*   **Nmap**: Scanner.
*   **Metasploit**: Exploit Framework.
*   **Wireshark**: Packet Sniffer.
*   **Burp Suite**: Web Proxy.
*   *Download*: Get the "VirtualBox Image" from kali.org. Do not install the ISO unless you are comfortable.

### The Victim Box: Metasploitable 2
An intentionally vulnerable Linux machine.
*   It has open ports, weak passwords, and old web apps.
*   **WARNING**: Never expose Metasploitable to the internet (Bridge Mode). Always use "Host Only" or "NAT Network" mode in VirtualBox. If you expose it, **you will be hacked**.

### Network Modes
1.  **NAT**: VM creates a private network inside the host. Can access internet. Safe.
2.  **Bridged**: VM gets an IP from your home Router. It sits next to your laptop. Risky for vulnerable VMs.
3.  **Host-Only**: Isolated network. VM can only talk to Host and other VMs. Most Secure.

### Lab Exercise
1.  Install VirtualBox.
2.  Import Kali Linux.
3.  Import Metasploitable.
4.  Set both to "NAT Network".
5.  Ping Metasploitable from Kali.