I have completed a few Bug Bounty tutorials. All of them use Kali Linux installed on VMs. Either VirtualBox or VMWare. Is there a reason why Web App Pen testing would be done from a VM? I'm just wondering if just installing Kali on my machine is a bad idea for some reason I don't know.
Kali Linux provides ISO specifically for VirtualBox and VMWare so there must be some habit of running it on VMs