VMware Fusion

VMware Fusion is VMware's desktop hypervisor for macOS. It lets you run Windows, Linux, and other operating systems as virtual machines on your Mac. Essential for running Kali Linux, Windows VMs, and lab environments on Apple hardware. As of 2024, Fusion Pro is free for personal use.

Why Use Fusion for Security

• Run Kali Linux alongside macOS without dual-booting
• Isolated lab environment (snap before breaking things)
• Test malware in sandboxed VMs
• Run Windows for testing Windows-specific tools
• Create vulnerable practice environments (Metasploitable, VulnHub VMs)

Installation

1. Download from vmware.com or Broadcom portal (now Broadcom owns VMware)
2. Install like any macOS app
3. Personal use: get a free license key from Broadcom registration
4. Fusion Pro is free for personal/educational use since 2024

Key Features

• Snapshots — save/restore VM state (use before any risky test)
• Network modes — NAT, Bridged, Host-only, Custom
• Shared folders — share files between host and VM
• Unity mode — run Windows apps alongside Mac apps
• Import OVA/OVF — import VMs from VirtualBox, ESXi, etc.

Network Modes (Critical for Security Labs)

# For an isolated attack lab: Host-only
# Attacker VM and target VM both on vmnet1
# No internet access for target — contained

CLI Management (vmrun)

# List running VMs
vmrun list

# Start a VM
vmrun start /path/to/vm.vmx

# Stop (graceful)
vmrun stop /path/to/vm.vmx

# Suspend
vmrun suspend /path/to/vm.vmx

# Take snapshot
vmrun snapshot /path/to/vm.vmx "pre-attack"

# Revert to snapshot
vmrun revertToSnapshot /path/to/vm.vmx "pre-attack"

# List snapshots
vmrun listSnapshots /path/to/vm.vmx

# Run command in VM (VMware Tools must be installed)
vmrun runProgramInGuest /path/to/vm.vmx /bin/bash -c "whoami"

Importing OVA Files

VulnHub and HackTheBox VMs often come as OVA files:

1. File → Import → select .ova file
2. Choose storage location
3. Fusion handles conversion automatically
4. Set network to Host-only or NAT depending on the lab

Kali Linux on Fusion

# Download Kali VMware image from kali.org
# Import the .vmx or .ova

# Enable USB adapter passthrough for wireless attacks
# VM Settings → USB & Bluetooth → Add adapter

# Shared folders for easy file transfer
# VM Settings → Sharing → Enable shared folders

Snapshot Strategy for Labs

Base Kali Install (clean)
  └── Tools Installed
        └── Lab 1 - Pre-attack
              └── Lab 1 - During attack (restore here if broken)

Always snapshot before:

• Installing new tools
• Running exploits
• Modifying system configs

Performance Tips

• Allocate 4GB+ RAM for Kali (8GB if running heavy tools)
• Use NVMe/SSD storage for VM disk files
• Enable hardware virtualization in VM settings
• Disable unnecessary VM hardware (serial ports, floppy drive)

See Also

• vmware-workstation-guide - Windows/Linux equivalent of Fusion
• vmware-esxi-guide - Enterprise bare-metal hypervisor
• future-of-tech-emerging-trends-2023 - VMware overview