To run Kali Linux in a VMware sandbox we are going to download an ISO, Run the install in VMware Workstation Player 17. We will assign 4GB of RAM, at least 2 Cores and 32GB of disk space. The goal for us is to provide an isolated virtual environment to test and securely run the cyber security tools.

Kali Linux is a specialized, open-source Linux distribution based on Debian, designed primarily for digital forensics, penetration testing, and security auditing. Maintained by Offensive Security, it comes pre-installed with hundreds of tools for ethical hacking, vulnerability scanning, and reverse engineering. It is considered an industry standard for security professionals.

Steps
1) Download the latest ISO from kali.org.
2) Select the ISO to be installed in VMware Workstation Player 17.
3) Set the system settings with regards to the processor, ram and disk space.
4) For isolation, configure the network adapter to “Host-only”. For internet access, set it to “NAT” (default) or “Bridged”.
5)Remove or disconnect CD/DVD drives, USB controllers, sound cards, and printers to reduce the attack surface.
6)Disable drag-and-drop, copy-paste (clipboard sharing), and shared folders in the VM settings (VM Settings -> Options -> Guest Isolation) to prevent malware from escaping to the host.
7) Run the OS Kali Linux.
8) Take a snapshot of the operating system after boot for a clean snapshot.

To have a true sandboxed operating system in VMware with internet access, use NAT networking for connectivity, set the virtual disk to Independent-Nonpersistent mode to discard changes on reboot, and take a snapshot before executing risky files. Disable shared folders, clipboard sharing, and drag-and-drop to ensure total isolation.

Use NAT (Network Address Translation). This allows the VM to access the internet through your host’s IP address without being directly visible or reachable from other machines on your local network.

Disable the Unnecessary: Within the guest OS, disable IPv6, LLMNR, and NetBIOS if not needed to reduce visibility.

Always revert to the clean snapshot after testing malware or suspicious software.

Separate Network: If possible, keep the sandbox on a separate VLAN to protect your home/work network.

To create a separate VLAN/sandbox in VMware Player, use the Virtual Network Editor to create a custom network (LAN segment) that is not connected to any physical network, ensuring total isolation. Assign sandbox VMs to this new VMnet (e.g., VMnet2-8), set static IPs, and disable DHCP for that segment.