metasploitable3 VS UTM

There's also a bunch of intentionally vulnerable Webapps and VMs aimed at demonstrating potential footholds and common exploits leading to owning of the host including but not limited to: bWAPP, Damn Vulnerable Web App, WebGoat, Metasploitable 3, Mutillidae, Juice Shop

Note: to practice, you don;t have to attack real targets which are very hard for a beginner anyways.Use a vulnerable on purpose vm to train specific skills.

Set this up, have fun: Metasploitable 3

Op, this is good. But if you want to make your existing DC vulnerable, you can just make download the software rapid7 did to make this box https://github.com/rapid7/metasploitable3/wiki/Vulnerabilities

Metasploitable is a virtual machine image that includes lots of vulnerabilities (on purpose) and that can be used to learn how to hack into a machine.

If you want to do offensive security like penetration testing, learn some tools like Burp Suite and Metasploit and point them at a vulnerable Linux distro. While you're doing that, find some local security user groups and start attending so you can find out about openings right away. The job is to run automated and manual tests against specific hosts and write reports about what you find. A technical writing course is a big benefit here.

you know what i mean

Metasploitable https://github.com/rapid7/metasploitable3 and as someone else also mentioned OWASP's vulnerable/broken apps

If you have TrollStore then install the HV version of UTM to try for yourself: https://github.com/utmapp/UTM/releases/latest/download/UTM.HV.ipa

Researching a little showed that this is basically what can be expected running x86 emulation and the systems will just be wonky and slow, although it was running flawlessly, just slow.

There seem to be ways to use Rosetta2 inside a VM [0] to then translate binaries but I found no official support or documentation (using UTM+QEMU that was), this would be such a cool feature, at least there are discussions about it [1,2]

- [0] https://mybyways.com/blog/using-rosetta-in-a-utm-linux-vm-wi...

- [1] https://github.com/utmapp/UTM/discussions/4939

- [2] https://github.com/utmapp/UTM/issues/5460

UTM is open source too though: https://github.com/utmapp/UTM#license

UTM makes it easy to set up and manage macOS and Windows virtual machines. This can be especially useful for developers such as Tauri contributors who need to test their applications across multiple platforms, or for those looking to experiment with different operating systems without affecting their primary system.

If you don't need high performance and want to use the OS only occasionally, check UTM.app, at https://mac.getutm.app/ (or https://github.com/utmapp/UTM ). Free, open source.