Skip to content

Latest commit

 

History

3 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 

Repository files navigation

Metasploitable-2

Objective

The lab introduces Metasploitable 2, a purposely vulnerable VM, guiding users through setup for ethical hacking practice. By downloading it from Rapid7 and configuring it with VirtualBox, along with setting up networking, users can safely explore security flaws. Additionally, it provides instructions on booting up Kali Linux, a common penetration testing OS.

Skills Learned

  1. Setting up virtual machines using VirtualBox.
  2. Downloading and configuring vulnerable virtual machines like Metasploitable 2.
  3. Configuring network settings to enable communication between virtual machines.
  4. Basic usage of Kali Linux for penetration testing and vulnerability scanning.

Tools Used

  1. Virtualization platforms like VirtualBox or VMWare.
  2. Metasploitable 2, a vulnerable virtual machine.
  3. Kali Linux, a penetration testing operating system.
  4. Network configuration tools within VirtualBox.

Steps

  1. Download Metasploitable 2 from Rapid7's SourceForge link
  2. Create a new virtual machine profile in VirtualBox.
  3. Import the Metasploitable.vmdk file into the virtual machine.
  4. Boot up the Metasploitable 2 virtual machine and log in with default credentials.
  5. Configure network settings in VirtualBox to enable communication between VMs.
  6. Find the IP address of the Metasploitable 2 VM using ifconfig.
  7. Test network connectivity by pinging the Metasploitable 2 VM from Kali Linux.

Figure 1: ifconfig on MS2 to find VM machine IP

image

Figure 2: ping 10.0.2.4 on Kali VM to verify connectivity to Metasploit

image

Lab Quiz

  1. Which company created Metasploit and Metasploitable 2? Rapid 7

  2. How many TCP ports are OPEN on MS2? (Use the -sT flag in Nmap). 23 open TCP ports image

  3. How many UDP ports are OPEN on MS2? (Use the -sU flag in Nmap – this may take a while). 7 image

  4. What port is running a Metasploitable Root Shell? (Use the -sV flag in Nmap). 1524 image

  5. What non-standard port is FTP running on? (NOT p21) (Use the -sT flag in Nmap). 2121 image

  6. What version of FTP is running on the non-standard port? (Use the -sV flag in Nmap). ProFTPD 1.3.1 image

About

No description, website, or topics provided.

Resources

Stars

5 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors