EH-Net

By Raphael Mudge, Armitage Creator

Metasploit (http://www.metasploit.com/) is a popular exploitation framework that has seen plenty of Armitage (http://www.fastandeasyhacking.com/), a new GUI for Metasploit built around the hacking process. Today, I will show you how to use Armitage to scan a Linux host, find the right exploit, exploit the host, and handle post-exploitation. By following this process, you will learn how to use Armitage and Metasploit in your own work.

The target we will use is the Metasploitable Linux virtual machine (http://blog.metasploit.com/2010/05/introducing-metasploitable.html). Metasploitable contains several vulnerabilities making it a safe, and, dare I say ethical, training ground for future penetration testers.

Read the Armitage documentation (http://www.fastandeasyhacking.com/manual/) to get Armitage running. Through the rest of this article, I will assume that you have Metasploitable running, Armitage is ready, and that you have downloaded this Python script (http://www.outflux.net/blog/archives/2010/10/13/mountall-umask/) that we will use later.  Let's get to work.