EH-Net

Need help on logging into and using metasploitable.

I've tried searching the entire web for the commands that allow me access inside but i cant find any.

First is this: Metasploitable Login:

Then I use 'msfadmin' as username and password here to get the next line: msfadmin@metasploitable:~$

What next now...

This seems like a noob question, but i just cant get any proper answer to this anywhere..
Could someone please give me a complete tutorial on how to use metasploitable. I have the metasploitable on one VMware workstation and backtrack5 on another VMware workstation.

How do i configure metasploitable...
I posted this question on another forum but got very little detail on how to use metasploitable.

Seriously need an immediate answer to this as soon as possible!!

Thnx

You do not have to "configure" metaploitable. It is completely configured as it is when downloaded. All you need to do is make sure that within VMWare the network is configured so that it will be on the right vmnetX. I would suggest host-only.

After that it is up to you to get root. I will say, though, there are tons of tutorials out there on many, many methods to do that. Check these out:

http://www.backtrack-linux.org/forums/backtrack-videos/29619-owning-metasploitable-backtrack.html

http://www.youtube.com/watch?v=kdtMthVeC1M

http://www.youtube.com/watch?v=O_5N9_sZ3i8

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5491.0/

http://ipositivesecurity.blogspot.com/2011/08/metasploitable-exploring-ssh-service.html#axzz1Y7VFZF00

There are many more out there...those results are just from the first page of Google results using the term "metaploitable" as the query.

Good Luck!

Hi ultraviolet,

With metasploitable, just pretend it's a machine on the internet you have no access to.  The point of metasploitable is to break into the machine the same way as a blackhat hacker would.

Did you find the msfadmin credentials through Google or through enumeration? (that's a rhetorical question by the way)

A hacker would have to do some enumeration (such as open ports) on the target in order to penetration the box and gain control.

Good luck,
TheXero

You have metasploit on your attacking system, metasploitable is victim.  Commence cracking!  It does have holes, you only need to find them.  Sort of like tossing WebGoat on an XP system. :D  If you are having a hard time with the MSF console you can cheat a little and use Armitage.  But hell work the console and learn the hard way!

++1 <nod>