How to Hack Metasploitable 2 Part 1 « Null Byte :: WonderHowTo

This tutorial is for people who want to try different types of hacks in an environment that is the same for everyone so it will help people to ask questions and learn. This series assumes you know how to run a VM and network them together. This series also assumes that the services running on the Metasploitable machine are needed to be running.Download Metasploitable 2hereFirst off the biggest issue with Metasploitable is the passwords for the accounts. This is super easy to hack because the login screen for Metasploitable gives the default username and password for in the /etc/issue file which we will change later.First off is to login with SSH and accept the keyNot hit ctrl+c to exit this and connect through msfadmin (or you could do this step first ;) )Since we know the default password is msfadmin we can log right in. After this we should grab sudo permissions so we can secure our machine more.Now we know what the default passwords are because it is well documented. Picture fromhere.Next I am going to change the passwords of all these accounts. I changed them all to nullbyte because it is simple even though it is really insecure. Also we want to keep these accounts so employees can do their work.Next we want to prevent root login for SSH. Open the file /etc/ssh/sshdconfig and find the PermitRootLogin yes and change the yes to no. Morehere.Next restart the SSH daemon with /etc/init.d/ssh restart. Next we should remove the default username and password from the welcome login screen. This is located in /etc/issue.This was found with a simple Google search. Also editing the /etc/motd will allow you to edit for all logins no matter if it is local or remote but isn't covered here.At least change this highlighted line. You can change more of this if you like.More coming soon if people like this series! Please give me any feedback in the comments. I will try to help as with the awesome people of this site!Next tutorial coming soon!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Hack Metasploitable 2 Including Privilege EscalationHack Like a Pro:How to Hack Web Apps, Part 4 (Hacking Form Authentication with Burp Suite)How To:Hack Metasploitable 2 Part 2How To:Exploit Remote File Inclusion to Get a ShellHow To:Perform a Large-Scale Network Security Audit with OpenVAS's GSAHack Like a Pro:How to Hack Web Apps, Part 3 (Web-Based Authentication)How To:Upgrade a Normal Command Shell to a Metasploit MeterpreterHowTo:Build Your Own DIY SuperMacro LensHack Like a Pro:How to Extract Email Addresses from an SMTP ServerHow To:Add Your Own Custom Screensaver Images to Your Kindle Lock ScreenHow To:Hack web browsers with BeEFHow To:Hack LAN passwords with EttercapHow To:Hack a Microsoft Zune for a larger hard driveHow To:Hack LG Rumor/Rumour LG260 Virgin MobileHack Video Games, Part 1:IntroductionHow To:Hack payphones and SIM cardsNews:Overhead Camera Boom Made with PVC PipeNews:Make Pandora Battery for a Slim PSPHow To:Hack a Radio to Pick Up Different Frequencies - Including Law Enforcement & MoreNews:Hack Your Computer's BIOS to Unlock Hidden Settings, Overclocking & MoreHow To:8 Jury-Rigged Fitness Tools for Cheap At-Home WorkoutsTVs Are for Old People:A Guide to Handheld ConsolesHow To:13 Awesome Household Cleaning HacksNews:Student Sentenced to 8mo. in Jail for Hacking FacebookHow To:16 Baking Hacks for Your Next Baking Adventure