The lab introduces Metasploitable 2, a purposely vulnerable VM, guiding users through setup for ethical hacking practice. By downloading it from Rapid7 and configuring it with VirtualBox, along with setting up networking, users can safely explore security flaws. Additionally, it provides instructions on booting up Kali Linux, a common penetration testing OS.
- Setting up virtual machines using VirtualBox.
- Downloading and configuring vulnerable virtual machines like Metasploitable 2.
- Configuring network settings to enable communication between virtual machines.
- Basic usage of Kali Linux for penetration testing and vulnerability scanning.
- Virtualization platforms like VirtualBox or VMWare.
- Metasploitable 2, a vulnerable virtual machine.
- Kali Linux, a penetration testing operating system.
- Network configuration tools within VirtualBox.
- Download Metasploitable 2 from Rapid7's SourceForge link
- Create a new virtual machine profile in VirtualBox.
- Import the Metasploitable.vmdk file into the virtual machine.
- Boot up the Metasploitable 2 virtual machine and log in with default credentials.
- Configure network settings in VirtualBox to enable communication between VMs.
- Find the IP address of the Metasploitable 2 VM using ifconfig.
- Test network connectivity by pinging the Metasploitable 2 VM from Kali Linux.
-
Which company created Metasploit and Metasploitable 2? Rapid 7
-
How many TCP ports are OPEN on MS2? (Use the -sT flag in Nmap). 23 open TCP ports

-
How many UDP ports are OPEN on MS2? (Use the -sU flag in Nmap – this may take a while). 7

-
What port is running a Metasploitable Root Shell? (Use the -sV flag in Nmap). 1524

-
What non-standard port is FTP running on? (NOT p21) (Use the -sT flag in Nmap). 2121

-
What version of FTP is running on the non-standard port? (Use the -sV flag in Nmap). ProFTPD 1.3.1


