Metasploitable 3 Ova [top] -

Built by Rapid7 (the makers of Metasploit), version 3 is not just an update; it is a completely different beast. It is intentionally misconfigured, riddled with thousands of vulnerabilities, and designed to teach you how modern Windows (and Linux) exploitation works.

Metasploitable 3 OVA: The Ultimate (and Chaotic) Pentesting Lab Setup metasploitable 3 ova

But there is a catch: Getting the file is notoriously difficult. Why isn't there a simple "Download OVA" link? Unlike its predecessor, Metasploitable 3 was designed as a "Build-your-own" VM. The official GitHub repository uses Packer (an automation tool) to download an ISO, install the OS, configure the vulnerabilities, and package it for you. Built by Rapid7 (the makers of Metasploit), version