Level 01: Environment Setup
To become an ethical hacker, you must first build your environment. Kali Linux is the industry standard for offensive security. This guide walks you through installing it safely inside a virtual machine. Doing it this way prevents any hardware risk, and it makes dual-boot a thing of the past! Most importantly, it's fully isolated from your host machine, protecting your personal data.
Step One
Download the official Kali Linux ISO image from the Kali project. Always verify the SHA-256 checksum after download. Security begins before the install. Use the Installer image (not the Live image) for a persistent virtual machine installation.
kali.org/get-kali# Verify the ISO checksum after download (Linux/macOS)
sha256sum kali-linux-2026.1-installer-amd64.iso
# Compare the output to the checksum listed on kali.org
# If they don't match, delete the file and re-download
Security Note
Only download Kali Linux from kali.org. Third-party mirrors can distribute modified ISOs with backdoors pre-installed. Always verify the SHA-256 hash before proceeding.Step Two
A virtual machine runs Kali Linux inside a sandboxed environment on your existing operating system. Your host OS remains untouched. Choose the platform that fits your setup. No preference is given here, each has trade-offs.
VirtualBox
Free & Open SourcePros
Completely free, no license required
Cross-platform: Windows, macOS, Linux hosts
Large community and extensive documentation
Cons
Performance lags behind paid alternatives
USB 3.0 and some hardware features require extension pack
Guest additions setup can be finicky on Kali
VMware Workstation
Free Personal / Paid ProPros
Best performance of local VM options
Snapshot and cloning workflows are excellent
Kali Linux provides pre-built VMware images
Cons
Pro version costs money; free tier has feature limits
Heavier install footprint than VirtualBox
License management can be frustrating on upgrades
DigitalOcean
Cloud — Pay-as-you-goPros
No local hardware requirements. Runs in the cloud
Spin up and destroy environments instantly
Accessible from any device via SSH or browser
Cons
Ongoing cost, billed by the hour
GUI-heavy tools (Burp Suite, Wireshark) require extra setup
Not ideal for network-layer exercises that require a local LAN
Recommendation
If you're just starting out and want the simplest path with no cost: VirtualBox is the default choice for this course.
If performance matters and your machine has the RAM: VMware Workstation offers the smoothest experience with Kali's pre-built images.
Step Three
Open your chosen VM software and create a new virtual machine. Use these recommended settings for a Kali Linux installation that won't feel sluggish:
In VirtualBox or VMware, create a new VM. Set the OS type to Linux and the version to Debian 64-bit. Kali is Debian-based so this gives the VM the right default settings.
Set RAM to at least 4 GB (4096 MB) 8 GB if your host machine has 16 GB or more. Allocate at least 2 CPU cores. Give the virtual disk at least 80 GB of storage with dynamic allocation.
# Minimum viable for coursework
RAM: 4096 MB (4 GB)
CPU: 2 cores
Disk: 80 GB (dynamically allocated)
In the VM settings, navigate to the Storage or CD/DVD section and attach the Kali Linux ISO you downloaded as the boot media. Start the VM; it will boot from the ISO into the Kali installer.
Choose Graphical Install from the boot menu. Follow the prompts: select your language, timezone, and keyboard layout. When asked about disk partitioning, choose Guided: use entire disk. Enable LVM encryption if your coursework involves sensitive data. if the VM file is copied, the contents remain inaccessible.
Step Four
Once installation completes and you boot into Kali for the first time, the default login credentials are:
Kali Default Credentials
These are publicly known. Change them immediately after first login. Do not run any tools, connect to any network, or perform any testing before updating your credentials.
Change your username and password via the terminal immediately after logging in:
# Open a terminal and run these commands
# 1. Change the password for the current user (kali)
passwd
# You will be prompted: current password → new password → confirm
# 2. Change the username (run as root)
sudo su
usermod -l yournewname kali
usermod -d /home/yournewname -m yournewname
# 3. Update the group name to match
groupmod -n yournewname kali
# 4. Log out and log back in with the new username
exit
Important
Do not rename the user while logged in as that user in a GUI session. Run theusermod commands from a root shell or TTY session (Ctrl+Alt+F2) to avoid file locking issues.
Step Five
Before you install any tools or run any scans, update your system. A fresh Kali install may be weeks behind on packages. Run these commands in order immediately after changing your credentials.
# 1. Update the package index
sudo apt update
# 2. Upgrade all installed packages to the latest versions
sudo apt full-upgrade -y
# 3. Remove packages no longer needed
sudo apt autoremove -y
# 4. Clean the local package cache
sudo apt clean
Once the system is updated, install the VM guest additions for better screen resolution and clipboard sharing:
# For VirtualBox: install guest additions
sudo apt install -y virtualbox-guest-x11
sudo reboot
# For VMware, install open-vm-tools
sudo apt install -y open-vm-tools-desktop
sudo reboot
Verify your environment is ready:
# Check Kali version
cat /etc/os-release
# Check your network interface
ip a
# Verify nmap is installed
nmap --version
# Check Metasploit is present
msfconsole --version
Environment Ready
Your Kali Linux virtual machine is now configured. You are ready to proceed to the course modules below. Take a VM snapshot now, this gives you a clean restore point before you start any exercises.
Goddess Fortuna Academy
We retired the standalone 25-hour course catalog. The Academy now runs as a tiered, ongoing membership: you train inside environments we actually own and operate, working alongside a real team from day one.
Tier I
$10/ month
Train on our live web environment and join two hours of instructor-led sessions every week.
Tier II
$20/ month
Everything in Apprentice, plus report writing and a seat on collaborative bounty engagements.
Tier III
Invite only
Full team status, extended to Operators based on performance. Paid engagements and a monthly stipend.
Ready to begin?
Start as an Apprentice, advance to Operator, and earn your way to Researcher through performance, not tenure.
Apply Now