@O'Niel if you've not already, I'd suggest pentesterlab.com as a good place to look for test systems. Some of their stuff is pay for, but a fair amount is free
@RоryMcCune thanks! However I'm trying Shellshock, and thought the ISO was to setup in a VM and represented a 'vulnerable website' however, there is no website on that ISO when I visit it's IP.
