vagrant box add generic/win2008 --provider virtualbox
Metasploitable 3 is an intentionally vulnerable virtual machine (VM) designed by metasploitable 3 ova download
If you choose this route:
Vagrant will begin downloading a base box (a minimal Windows Server 2008 R2 image from a trusted source). Then, it will run a series of provisioning scripts that: metasploitable 3 ova download