Oracle VirtualBox

Create an isolated Virtualbox host machine for pentesting, security research, etc.

1. General -> Advanced

   • Shared clipboard: Disabled

   • Drag n Drop: Disabled

2. Only a single adapter enabled:

   • NAT network

   • NO port forwarding rules

3. Disable Audio & USB

   • USB -> Uncheck "Enable USB Controller"

   • Audio -> Uncheck "Enable Audio"

1. User management

   • DO NOT login as root user

   • Remove all unnecessary users

   • Use strong password for users, especially those with superuser privileges (sudo group, and root itself)

   • Ensure that permissions for all users are kept to the minimum (check with sudo -l, groups <user>)

2. **VM snapshot

   • Save a fresh install to revert back to after each engagement (or when required)

3. Additional tools:

   1. firejail

   2. opensnitch

   3. apparmor