University of North Texas Metasploit Framework Vulnerability Assesment

Description

Begin with a Vulnerability Scan on the Metasploitable 2 VM exactly as you did from the previous homework (steps 1-3 below). You do not have to re-do this portion if you don’t want to. The scan that you preformed from Lab 2 should have the info you need.

______________________________________________________

1. Download and setup Metasploitable 2 as a VM @

http://sourceforge.net/projects/metasploitable/files/Metasploitable2/ (Links to an external site.)Links to an external site.

2. Run Metasploitable 2 and make sure it’s connected to your VM network… might take a bit of Linux shell power. I recommend separating your Kali and Metasploitable 2 VM’s so that they can only talk to each other and are not connected to the rest of your home network. You may need to break this initially in order to update and upgrade your Kali instance.

3. Use Kali to host a network vulnerability scanning tool (OpenVAS, Nessus, Nexpose, Retina, etc) to scan the Metasploitable 2 OS for vulnerabilities. DO NOT INCLUDE any of the rest of your home network. Output the results in a format that you can submit here and evaluate for future homework. No editing required this one time. The direct output from the tool will be acceptable. Analyze the results looking for major weaknesses and potential false positives .

______________________________________________________

4. From the result from step 3, identify the SAMBA service. Alternatively, if your tool does not catch the SAMBA vulnerability, note that. You can then get this result via a simple nmap scan either external to or within Metasploit. Exploit Metasploitable 2 via a SAMBA vulnerability using Metasploit from your Kali machine.

TIP: In order to do this, you will first need to determine what version of SAMBA is running on on Metasploitable 2 (auxiliary/scanner/smb/smb_version) and then identify and appropriate vulnerability for this version. (Hint: exploit/multi/samba/usermap_script)
***YOU MUST LIST THE RESOURCE THAT YOU USED TO IDENTIFY THIS VULNERABILITY. This needs to be independent of any walkthroughs or tutorials for Metasploitable*** (exploit/multi/samba/usermap_script)

5. Demonstrate that this exploit actually gives you some level of control over the Metasploitable 2 machine via your Kali box. Showing that you can perform “root” functions would be a good example of this.

6. Create a BRIEF report showing the output from your vulnerability scan identifying the SAMBA vulnerability and showing a few screenshots with descriptions of your execution of Metasploit to exploit the vulnerability.



^{Have a similar assignment? "Place an order for your assignment and have exceptional work written by our team of experts, guaranteeing you A results."}

Our Service Charter

1. Professional & Expert Writers: Eminence Papers only hires the best. Our writers are specially selected and recruited, after which they undergo further training to perfect their skills for specialization purposes. Moreover, our writers are holders of masters and Ph.D. degrees. They have impressive academic records, besides being native English speakers.

2. Top Quality Papers: Our customers are always guaranteed of papers that exceed their expectations. All our writers have +5 years of experience. This implies that all papers are written by individuals who are experts in their fields. In addition, the quality team reviews all the papers before sending them to the customers.

3. Plagiarism-Free Papers: All papers provided by Eminence Papers are written from scratch. Appropriate referencing and citation of key information are followed. Plagiarism checkers are used by the Quality assurance team and our editors just to double-check that there are no instances of plagiarism.

4. Timely Delivery: Time wasted is equivalent to a failed dedication and commitment. Eminence Papers are known for the timely delivery of any pending customer orders. Customers are well informed of the progress of their papers to ensure they keep track of what the writer is providing before the final draft is sent for grading.

5. Affordable Prices: Our prices are fairly structured to fit in all groups. Any customer willing to place their assignments with us can do so at very affordable prices. In addition, our customers enjoy regular discounts and bonuses.

6. 24/7 Customer Support: At Eminence Papers, we have put in place a team of experts who answer all customer inquiries promptly. The best part is the ever-availability of the team. Customers can make inquiries anytime.