Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

I am just starting to use Metasploit and I would like to use a linux system that I have in my production network to pivot from to complete monthly scans on that network. How do I setup the project/host from metasploit with the SSH creds to get in.

I have the username and password and the port is open in the firewall to allow SSH access to that IP. I just need to figure out how to setup the host in metasploit to use the creds. I cannot seem to get it to work. As I said I am new and need some help. Is this the best way to even do this? Because I want to run these monthly scans from home not onsite each time.

Thanks in advance.

share|improve this question
3  
I'm a little lost. You want to use a pivot system to run monthly vulnerability scans from home? This is really a horrible idea for a setup IMHO. If you want to do regular scans on the network, from inside the network, you should build a dedicated server for that purpose. Then, configure a VPN either directly to that server or to your company's gateway so that you can access it from the outside. Pivot systems are set up during penetration testing when you are not granted access to a particular network segment - not for regular maintenance and health checks. If I'm misreading, please clarify. – Iszi Sep 24 '12 at 17:59
2  
I pretty much agree with @Iszi - this doesn't seem to make much sense. A pivot system is designed to be temporary - a box on the perimeter of a network that you hijack in order to provide a gateway into the internal network. The goal is to keep noise on that machine minimal, as it's (often) your only potential gateway. – Polynomial Sep 24 '12 at 18:21
1  
What is doing the scanning? MSF or an application on your home system? – schroeder Sep 24 '12 at 18:24
You either need just SSH access to your box in order to command MSF to start scans, or set up an ssh tunnel on the machine to run scans from home. That last option is not recommended at all... In either case, MSF is not a factor in the remote connection. – schroeder Sep 24 '12 at 18:35
@schroeder Regarding your first question, I think it's a cross between the two: MSF on his home system. In that case, I think the latter of your two SSH suggestions would be appropriate - though, I agree, not recommended. – Iszi Sep 24 '12 at 18:38
show 1 more comment

closed as too localized by Iszi, Scott Pack, Rory Alsop♦ Sep 25 '12 at 11:22

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.

1 Answer

up vote 0 down vote

The answer is that I did not set this up properly and have since done so. VPN in and do the scan with an account that has rights to that network.

Done.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.