Hello, guys, and welcome.
We'll start a series of lectures on penetration, testing and exploitation.
Taking your first steps with penetration testing can be difficult.
I assume you don't want to conduct your first penetration test on your production network.
This can be really dangerous.
The recommendation is to set up a testing lab environment, and this is where Metasploit table comes
into play.
Metasploit double is a Linux, a vector machine that contains several intentional vulnerabilities for
you to exploit.
Metasploit Uppal is essentially a penetration testing lab in a box available as a VMware or VirtualBox
VM.
This VM can be used to conduct security trainings.
Best security tools and practice common penetration testing techniques.
Metasploit cabal is created by the Rapid7 Metasploit team.
You can download data from rapid7.
Dot com.
Or from SourceForge dot net.
If you download it from rapid7 dot com, you have to first create a free account.
A company email address is required, but you can use a random email address if you don't have one.
It doesn't have to be confirmed.
Or you can choose to download it from SourceForge that limit and no account is required.
I've already downloaded Metasploit about.
It comes as a zip file.
So after downloading it honestly, the file two seeks contents.
This is ex-convicts.
In this video, I'll use the virtual box, but you can use the VMware as well.
So in virtual box I'll create a new VM X name will be Metasploit able to.
He type will be Linux and the version other Linux 64 bit.
And I'm clicking on next, the memory size will be 1024 megabytes.
Next month, I'll use an existing virtual hard disk drive.
This is the Metasploit double date VM decay file.
I've just unzipped.
So Ed, I'm going to my desktop of the directory where I have unzipped Metasploit and I'm selecting
Metasploit double data, VM, D.K. and open.
And finally I'm clicking on Choose and Create.
Okay.
He's done.
Let's start the VM.
Metasploit table is starting.
Bill Metasploit The Linux operating system has started in Tyler Login using the default username, which
is MSF admin.
MSF admit.
And the password is the same MSF admin.
Okay.
Sorry.
I've written off the incorrect bastard.
If you want to become a ruth or execute cummings is ruth using sudo?
You use the same password which is massive for admin.
For example, i'm becoming sudo, so enter the password will be MSF admin and I'm good.
This is an intentional, vulnerable VM and you should never expose it to an untrusted network.
It can be easily hacked.
In Virtual Box or VMware use net or host only mode.
In the next two lectures, I'll use Kali Linux as the machine that will conduct the pantsed or run the
exploits, and the Metasploit table will be the victim machine.
So in Vector Box, I'm going to create a network for these two VMs, Kali and Metasploit Able.
So I'm going to tools.
Preferences.
Network and then add new met network.
Okay.
I have added a new net network.
All options remain if they are default values.
And.
Then I'll select Metasploit, Uppal and Kali and connect them to the newly created Map Network.
So Metasploit Table Settings Network, Map Network, and the name is Mathematica.
And look in the same for Kali Linux.
The net network includes its own DHCP server, so you have to request a new IP address or restart the
VM.
I'm going to restart the VMS.
And by restarting Caylee as well.
I want to check the connection between Kali and the Metasploit table.
I'm logging into Carly and I want to check its IP address.
And its IP address is ten but 0.2.6.
Let's check the IP address of Metasploit double MSF admin and MSF admin.
Okay.
They are in the same network.
And I'm thinking, Carly.
Exciting end from Carli Metasploit double.
Perfect.
The penetration testing environment was set up.
We'll take a short break.
And in the next lecture, we'll continue with Metasploit.