Download Guide
What you're downloading, in what format, and how to verify it.
Installation
How to Install Metasploitable 2
Installing Metasploitable 2 means importing a pre-built virtual disk image into a hypervisor and putting it on an isolated network — there's no installer to run inside the VM itself. This hub links to every step: downloading the image, importing it into VirtualBox or VMware, configuring networking, and connecting an attacking machine.
Choose Your Path
Both hypervisors run Metasploitable 2 identically once it's booted — the difference is only in how you import the disk image.
Install on VirtualBox
Free and cross-platform. The path most tutorials, including this one, default to.
Install on VMware
For Workstation, Player, or Fusion, if that's what you already run.
Network Configuration
Set up host-only networking so the lab stays isolated from everything else.
Kali Linux Setup
Bring an attacking machine onto the same isolated network.
Find IP Address
Confirm the target's address before you run your first scan.
Keep the Network Isolated
Whichever hypervisor you use, attach Metasploitable 2 to a host-only or internal virtual network only. Never select a bridged adapter that puts it on your real LAN, and never forward ports to it from your router.
Installation FAQ
Should I use VirtualBox or VMware for Metasploitable 2?
Either works identically for learning purposes. VirtualBox is free and cross-platform, which is why most tutorials default to it. Use VMware if you already have a license or prefer its interface.
Do I need to install Kali Linux first?
No. Metasploitable 2 can be installed on its own. You'll want an attacking machine like Kali Linux once you're ready to scan and enumerate it, but the two installs are independent.
Why won't Metasploitable 2 boot after import?
This is almost always a virtualization setting, not a corrupted download. Check the troubleshooting guide for the most common fixes, including enabling virtualization in your host BIOS.