Reference no: EM133214160

Attacking Metasploitable2

In this lab you will:

• Perform reconnaissance against a target
• Determine which vulnerabilities to exploit
• Perform an attack against the target
• Document your attack steps

The Metasploitable2 system is a machine intentionally designed to be insecure. There are several vulnerabilities on this computer that can used to attack, escalate privileges, and take-over the computer. These vulnerabilities include weak passwords, poor security practices, exploitable applications, and more.

Task

Attack and Exploit the system in 2 or more different ways. Document your attack process.

Steps:

1. Power on the Kali and Metasploitable2 systems
2. Determine the type of attack and outcome desired
3. Using the Cyber Kill Chain as a model, inspect, prepare, and attack the system 
4. Document the steps used to attack the machine, again using the Cyber Kill Chain as a model
   1. NOTE: Not all steps of the kill chain are necessary, and some will be combined

Suggestions:

Don't use the obvious usernames and passwords (such as vagrant/vagrant or msfadmin/msfadmin) as your attack.

You are not the first person to attempt to attack this machine or application. Use your research to help you.

It is suggested that you revert the system to checkpoint before/after each attack. This ensures the system is in a known state between attacks.