As you can see above we have gained access to Metasploitable remotely.The pictures below show the settings to setup a new virtual machine for Metasploitable. Metasploitable is a vulnerable system that can be used as a target for attacks and security testing. Metasploit is a framework within Kali to run attacks on other systems. Most of the vulnerabilities on Metasploitable are known so there are tons of resources available to help learn various attack types. This will provide us with a system to attack legally. Metasploitable 2 is designed to be vulnerable in order to work as a sandbox to learn security. To login to Kali: username is root & password is toor. Since we will need both Kali and the Metasploitable vulnerable machine running we will use Virtualbox to emulate both environments. Kali Linux will be our local machine where we can run our attacks from. Virtualbox is an operating system emulation software that gives us the ability to run additional systems from our local machine. We will us both of these to gain access to the victim machine in the exercise detailed later. The payload gives access to the system by a variety of methods (reverse shell, meterpreter etc.) ExploitĪn exploit takes advantage of a system’s vulnerability and installs a payload. We will just focus on exploits and payloads. There are six total modules: exploits, payloads, auxiliary, nops, posts, and encoders. Modules are standalone pieces of code or software that provide functionality to Metasploit. The main components of the Metasploit Framework are called modules. Metasploit is one of the most commonly used penetration testing tools and comes built-in to Kali Linux.
The Metasploit Framework is an open source penetration testing and development platform that provides exploits for a variety of applications, operating systems and platforms.
0 kommentar(er)
