Metasploitable is a program for Windows that provides you with an intentionally vulnerable version of Ubuntu Linux intended for testing security instruments and demonstrating common issues. The virtual machine is compatible with VirtualBox, VMware, and similar virtualization platforms.
Launch
After boot, you need to login into the console with username and password titled simply msfadmin. From the shell, you can run the ifconfig command to identify the IP address. Using an attack system of your choice, preferably Kali Linux, you have the ability to discover the open network services on the virtual machine.
Unix basics
TCP ports numbered 512, 513, and 514 have been misconfigured to allow remote access from any host. In order to take advantage of this, it is necessary to make sure the rsh client is installed on Ubuntu. The next step is to run the appropriate command as a local root user. In case you are prompted for an SSH key, this means the required tools have not deployed on the operating system.
NFS system
Another useful backdoor service is the Network File System. NFS may be identified by probing port 2049 directly. You can enter the rpcinfo command to locate the protocol data and showmount -e to determine that the root of the file system is being exported.
Features
- free to download and use;
- compatible with modern Windows versions;
- allows you to tests vulnerabilities of the Linux OS;
- you are able to utilize a wide range of security tools;
- it is possible to rebind network interfaces.
