Metasploitable 3
Disclaimer: This manual will focus on Windows
Summary
Metasploitable 3 is a Virtual Machine with many open vulnerabilities to provide learners with a safe and legal environment to test their pentesting skills. Metasploitable is also suitable for demonstration purposes. Version 1 & 2 only offered ubuntu based machines. Version 3 now has a Windows Server 2008 based VM which can be setup to test kerberoasting and other windows specific techniques.
Requirements
- Operating system: Ubuntu 18.04 bionic amd64
- VT-x/AMD-V Supported Processor
- VirtualBox
- Vagrant
- Vagrant Reload Plugin
- Packer
- git (optional)
Description
Step 0: Preparations
Install all necessary Software which was mentioned in the Requirements.
Step 1: Clone the Repository
Clone the Metasploit3 GitHub-Repository : https://github.com/rapid7/metasploitable3.git Open the folder you want to work at in your Terminal and clone the repository with the command:
git clone https://github.com/rapid7/metasploitable3.git
Step 2: Fix the build script
For the currently linked version of Packer the buildscript needs to be adapted as the version Format seems to have changed. Add the following line after line 66:
$packerVersion = $packerVersion.split("v")[1]
Step 3: Start the Build
Open the cloned repository and execute
.\build.ps1 (ubuntu1404|windows2008)
if you provide no base OS, the script will build both versions of Metasploitable 3
Step 4: Configure the Machine to your needs
Once finished the VMs will start up in VirtualBox. They will go through an automated installation process. After that you can add features if you need special services running on the machine, that you want to target. The default credentials are
username: vagrant password: vagrant