How to get Kioptrix working on VirtualBox — An OSCP Story
Kioptrix boot-to-root VM is well known as a good starter vulnerable machine for hacking challenges. This is especially true for persons looking to pursue the OSCP certification, as it is considered to be beginner friendly.
Kioptix is intended to be used with VMWare, but maybe you prefer VirtualBox as your virtualization software. It now begs the question: How to I get Kioptrix working on VirtualBox?
It took some time to research and test different methods, but the following were the steps I took to get the Kioptrix #1 VM working on VirtualBox:
- Create a new machine in VirtualBox (Note: I am on “Expert Mode”).
- Give the VM a name, select “Linux” as the Type and “Linux 2.2” as the Version.
- Set the memory size to 512MB and select “Do Not add a Virtual Hard Disk” as seen below.
- Select Create and wait for your VM to appear in your VM list.
- Select your VM and select “Settings”.
- Select Audio in the left settings pane and uncheck “Enable Audio”.
- Select USB in the left settings pane and uncheck “Enable USB Controller”.
- Select Network in the left settings pane and change the Attachment setting to “Bridged Adapter”.
- Expand the Advance setting and select Adapter Type to “ PCnet-PCI II (Am79c970A)”.
- Select Storage in the left settings pane and select the “Controller: IDE” under Storage Devices.
- Select the “Add Hard disk” button (the button that looks like a hard disk with a plus sign and is to the right of the Controller: IDE).
- When the dialog appears, select “Choose Existing Disk”.
- Search and add the Kioptrix VMDK disk file.
- Select OK to save and close the VM settings.
The following settings should allow the VM to boot and fix any reconfiguration issues related to the porting of the VM to VirtualBox (see below). Once you get the VM to boot, you should then be able to root. :)
Happy Hacking…..
P.S. Remember to take a snapshot of the newly created Kioptrix VM before starting the hacking challenge.
========================================
If you liked this article, you can see more on my security blog, Anti-phishing Club
Twitter: @AntiPhishClub
Facebook: AntiPhishClub
LinkedIn Group: Anti-Phishing Club