-1

I have read on somewhere that:

"Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network."

Why? Does it create a bridge to the attacker's system directly? If yes, how does this happen?

  • 1
    I guess you mean "bridged" network adapter mode in Virtualbox. Say you run your PC in an untrusted network. Running it that way might expose vulnerable services of Metasploitable on your IP in the LAN. An attacker could infect the VM and use it for persistence / pivoting. – J.A.K. Jun 26 '18 at 7:30
  • Do you know what a Bridge Network is? – schroeder Jun 26 '18 at 8:49
4

If you run Metasploitable bridged in your network, the VM is connected to the network directly. Everyone in the network has access to the VM so everyone can exploit the vulnerabilities.

The VM runs on your host so an attacker can use your resources. It could also be, that the attacker could escape the VM and attack your host device.

You should use a host only adapter to prevent this.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.