Setting up Metasploitable lab

By on

 Image showing Metasploitable logo.


In this blog:

  • What is Metsploitable?
  • Downloading Metasploitable on Virtual Machine.
  • Inside Metasploitable.
  • What's next?

This blog is one of a 4 part series in Metasploitable.

Click here to see how to run a DOS attack on Metasploitable.

Click here to see how to deface Metasploitable's webpage.




What is Metasploitable?

Metasploitable is an intentionally vulnerable Linux based virtual machine that is used to train pentesters and security professionals. 

As mentioned, the machine is vulnerable to attacks that are not possible to execute on modern systems and is solely for educational purposes. 

Metasploitable should not be able to face the public network due to its vulnerability. 


Downloading Metasploitable on Virtual Machine

Download Metasploitable2 here ➡️ 

https://sourceforge.net/projects/metasploitable/

Click download and the zip file will be downloaded. 

Image showing Metasploitable download page.
Metasploitable download page.

To access the files, right click and extract all from the zip file. I have already extracted it so you can see it underneath. 

Image showing downloaded zip file.
Downloaded zip file.


I have already installed Kali Linux in VirtualBox as you can see on the left. To add a new virtual machine for Metasploitable, click New. 

Image showing VirtualBox.
VirtualBox.

Name the new machine and select where you want to download it. Select the type as Linux and version as Ubuntu (64-bit) as this is the version of my kali Linux machine. 

Image showing creation of new virtual machine.
Creating a new virtual machine.


Select your base memory and processors. I have set my base memory to the recommended 1024MB and the processors to 1.


Image showing creation of new virtual machine.
Choosing hardware resources for virtual machine.



Now use an existing virtual hard disk file and choose the Metasploitable virtual machine disk format file we extracted from the zip file.


Image showing creation of new virtual machine.
Adding our virtual hard disk.


Now click finish.


Image showing creation of new virtual machine.
Finishing the set-up.


Inside Metasploitable

Click b to start booting the vm.

Image showing Metasploitable bootup screen.
Booting Metasploitable


We are in as msfadmin.

Image showing Metasploitable.
Inside Metasploitable.

What's next?


Shone is a Cyber Security student at the Manchester Metropolitan University. Shone started writing blogs to document his own learning and help others along the way.

Comments

Post a Comment

Popular posts from this blog

Connecting Metasploitable to Kali Linux

By on
Image
  In this blog: Pre-text. Setting up NAT Network. Connected. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to fix a common timer error that occurs during bootup .  Pre-text This blog comes after the tutorial on creating a Metasploitable virtual machine and solving the kernel timer error. Setting up a NAT Network In our Linux machine, I checked the network interfaces on the system and I have a tunnel connection that I set up earlier for Openvpn access.  To terminate this connection, type ➡️  sudo killall openvpn . Killing Openvpn connections. Now to connect the metasploitable machine to the kali Linux machine we must create a NAT Network.  We want to make sure that the machine is not able to communicate with connections outside the host. Go to file ➡️...
Read more

Fixing kernel timer error in Metasploitable

By on
Image
In this blog: Disclaimer. Fixing the kernel timer error. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to set up a Metasploitable lab . Click here to see how to connect Metasploitable with Kali Linux . Disclaimer The solution given in this blog is for the kernel timer error that is caused by a misconfiguration in the kernel boot settings in the BIOS. The solution is not permanent and you must complete the steps each time you start a new session. Fixing timer errors To start the virtual machine, go back to VirtualBox and click start. When starting, if you get this kernel panic – not syncing error message, follow these steps ➡️  Kernel panick error message. Go to settings, system and double the base memory to 2048MB. Doubling base memory. Provide the machine with two processors instead of one and click OK.  Doubling p...
Read more

Wireshark alternative ➡️ tcpdump (Linux)

By on
Image
In this blog: What is tcpdump? Installation. Usage. Saving captures to a file. Filtering output. Expressions. Understanding the output. Packet content.   The end? See my Wireshark blog here. See my blog on uncovering network attacks using Wireshark here.                                   What is tcpdump? Tcpdump is a command line alternative to Wireshark and runs natively on Linux based operating systems.  The tool is not as feature rich as Wireshark but can be faster and more efficient in capturing and displaying packets, hence why many network admins and security professionals like using tcpdump for quick analysis.  Being a command line tool allows it to be run on remote servers to troubleshoot networks where a gui may not be available. The .PCAP files can then be analysed with Wireshark later. Most Linux distributions come with tcpdump installed, so your distro might already have it d...
Read more