Network Exploitation and Defense Simulation

Name: Prabin Pandey
Semester: 6th | Course: B.Tech CSE
Date: 15/05/2025

🔍 Project Summary

Simulated real-world cyber attacks using Kali Linux on a vulnerable Metasploitable system. Tasks included scanning, enumeration, exploitation, user creation, and password cracking.

🛠️ Tools Used

• Nmap (port scan)
• Metasploit (exploitation)
• John the Ripper (password cracking)

⚠️ Vulnerabilities Found

• vsftpd 2.3.4: Backdoor (CVE-2011-2523) ➜ Upgrade to 3.0.5
• Samba SMB 3.0.20: RCE & null sessions ➜ Upgrade to 4.20.1
• R Services: Insecure legacy services ➜ Disable & use SSH

✅ Key Learnings

Learned basic penetration testing, user privilege escalation, and system hardening steps.