Skip to main content

Questions tagged [metasploitable]

a well-known, intentionally vulnerable Linux distribution, developed by Offensive Security. It is used for training in the fields of vulnerability assessment and penetration testing, often in conjunction with the Metasploit framework (as an attacking platform), which is developed by the same company.

Filter by
Sorted by
Tagged with
0 votes
0 answers
92 views

Cannot exploit Metasploitable 2 VM using Tomcat 5.5 on Metasploit with Parrot OS

I've being trying to perform a simple exploit with msfconsole on Metasploitable 2 without any results. I'm using a host-only network adapter with DHCP enabled so I'm getting 192.168.56.104 on the ...
Martin Montas's user avatar
1 vote
1 answer
2k views

How to use msfvenom elf approach for metasploitable 2?

How to use msfvenom elf approach for metasploitable 2? I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
TeachMeEverything's user avatar
0 votes
2 answers
10k views

What is the difference between SRVHOST and LHOST in metasploit?

What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while ...
Emmany's user avatar
  • 3
1 vote
0 answers
147 views

DVWA file upload background

I've just started in penetration testing with metasploitable and currently trying to learn file upload vulnerability present in DVWA module. I know that somehow upload is preventing files other than ...
Ryuzaki 's user avatar
0 votes
0 answers
525 views

Input multiple password files

I have a number of relatively small password files that I'd like to use with Hydra in one go without having to manually merge them but it seems that it doesn't natively support this or stdin. From ...
mythofechelon's user avatar
1 vote
0 answers
4k views

Nmap Shows all ports are closed [closed]

I am facing a problem with Nmap while scanning metasploitable. I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
Indranil's user avatar
2 votes
1 answer
875 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
Erik Dz's user avatar
  • 35
6 votes
1 answer
6k views

How would I turn an open telnet shell into a Metasploit session?

I'm trying to pivot using a metasploitable2 system, which has a shell port open in a scan: port status service 1524/tcp open shell Accessing the root shell is easy enough in telnet, ...
Pixel's user avatar
  • 63
1 vote
3 answers
2k views

DVWA: "Hacking attempt detected..."

Hello and good evening, i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA. For the moment, i am learning the ...
Mechamod's user avatar
-1 votes
1 answer
7k views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
Utkarsh Agrawal's user avatar
0 votes
1 answer
5k views

proftpd backdoor not backdoored

I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
Abdullah Naina's user avatar
2 votes
1 answer
1k views

Metasploit MsfVenom - Payload binds shell, but unable to spawn it with netcat

Running a SEH BoF exploit script that contains a payload that is generated from msfvenom as such: msfvenom --payload windows/shell/bind_tcp --format py --arch x86 --platform windows --bad-chars "\...
0x5929's user avatar
  • 365
1 vote
0 answers
201 views

Detecting Samba exploit attacks

I've been messing around with metasploitable two and Kali linux. I came across a tutorial that went over the exploit/multi/samba/usermap_script, I used the exploit and got a shell My question is how ...
Nerf D's user avatar
  • 41
6 votes
2 answers
11k views

Reverse connection Metasploitable 2 -> Kali Linux (Samba 3.x) without Metasploit

I am trying to exploit Metasploitable 2 without the use of Metasploit, with the aim of learning. In this case, I am focusing on Samba 3.x (Port TCP 139, 445) In this link http://www.rwbnetsec.com/...
J.g.'s user avatar
  • 63
1 vote
1 answer
751 views

Cannot exploit elasticsearch on Metasploitable3

I am a newbie to security and have started my learning by downloading Metasploitable 3 and trying to get into it using Metasploit's "script_mvel_rce" module to exploit Elasticsearch 1.1.1 At my home ...
Pro_dk's user avatar
  • 21
3 votes
1 answer
1k views

Wordpress 4.0 CSRF Password Reset

I am working on a faculty project. I need to replicate Wordpress CSRF vulnerability on my localhost wordpress. I am trying to do this: https://wpvulndb.com/vulnerabilities/7691 I couldn't find any ...
Danelo's user avatar
  • 43
5 votes
3 answers
18k views

Metasploitable ports closed and web server unavailable [closed]

I have setup a fresh VirtualBox install of both Kali Linux and Metasploitable. I did an ifconfig on the Metasploitable VM and tried to access it through the browser, but that gives the message The 10....
bigtunacan's user avatar
0 votes
4 answers
1k views

Attack Metasploitable using Nessus

For my computer security class I have to prepare a malicious attack using Tenable Nessus security scanner. The scanner and target, which is Metasploitable2, both have been installed on separate ...
Adam's user avatar
  • 1
2 votes
0 answers
5k views

VirtualBox Metasploitable VM not visible to Kali VM [closed]

I am running VirtualBox on Windows 10, and have 2 VMs set up; Metasploitable (target obviously) and Kali (lab host). I am attempting to fping, followed by nmap from Kali, and for some reason my ...
NBacon's user avatar
  • 21
1 vote
0 answers
1k views

Fixing vulnerabilities in metasploitable 2 [closed]

I am new to penetration testing . I've done exploits from kali linux on metasploitable 2, and i want to fix the vulnerabilities i'm exploiting, but all i can find as a solution to these ...
user105453's user avatar
0 votes
1 answer
323 views

Applocker Execution Prevention Bypass - Session parameter

I am still new to Metasploit and I am trying to explore the following module: 1- Module Name: exploit/windows/local/applocker_bypass I did: 1- use exploit/windows/local/applocker_bypass 2- set ...
Emile ASTIH's user avatar
1 vote
1 answer
2k views

Nmap not working as a root

Hi I asked this questions on other forums, and searched on google, but nothing was useful to me. My problem works as a non-privileged used, but whenever I run it as a root, I get: Starting Nmap 7.01 (...
BetimNeutron's user avatar
0 votes
1 answer
579 views

Metasploitable: Change/Location of login page file?

I have been messing around with Metasploitable 2 and changed the default login credentials. The login page looks like this: I want to change where it says "Login with msfadmin/msfadmin to get ...
Gavin Youker's user avatar
  • 1,300
2 votes
3 answers
3k views

armitage find attack tool cli equivalent command

Ive been using metasploit through the cli and a little through armitage. The tool in armitage to find attacks that gives you attacks that are more likely to work is quite useful, so i was wondering ...
dmnte's user avatar
  • 19
1 vote
1 answer
666 views

Hosting a "Capture the Flag" style competition for fun and learning? [duplicate]

A few friends and I want to run some kind of CTF competition in which we both have identical OSes that we can attack and defend as teams/individuals. I was looking on the web and I found some good ...
Ethereal 's user avatar