Home

Metasploitable3

Welcome to the metasploitable3 wiki!

What is it?

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit.

What's new?

Previous versions of Metasploitable were distributed as a VM snapshot where everything was set up prior and saved in that state. This new version introduces a new approach, dynamically building the VM image. It utilizes Packer, Vagrant, and a ton of scripts to go from nothing to a fully functional, exploitable VM in minutes.

There are a lot of benefits to this new method of building. We can easily apply the same exploits on multiple operating systems, build for multiple virtualization platforms, and best of all, accept contributions from the community.

First Build

Requirements:

• Packer
• Vagrant
• Vagrant Reload Plugin
• VirtualBox
• Internet connection

Steps:

1. Clone this repo and navigate to the main directory
2. Build the base VM image by running packer build windows_2008_r2.json. This will take a while the first time you run it since it has to download the OS installation ISO
3. After the base Vagrant box is created you need to add it to your Vagrant environment. This can be done with the command vagrant box add windows_2008_r2_virtualbox.box --name=metasploitable3
4. To start the VM, run the command vagrant up. This will start up the VM and run all of the installation and configuration scripts necessary to set everything up. This takes about 10 minutes.
5. Once this process completes, you can open up the VM within VirtualBox and login. The default credentials are U: vagrant and P: vagrant.

Vulnerable Services

• GlassFish
• Apache Struts
• [Tomcat])(https://github.com/rapid7/metasploitable3/wiki/Vulnerabilities#tomcat)
• Jenkins
• IIS
• psexec
• SSH
• WinRM
• chinese caidao

Contributing

Want to add more vulnerabilities to Metasploitable3, or just want to fix a few bugs? Check out this page for more details.