Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
Go to file
2016-11-19 15:04:52 -05:00
answer_files/2008_r2 Will install dotnetfx4.0 and choco with packer. WARNING STILL WIP 2016-11-19 15:03:43 -05:00
iso Initial commit. 2016-08-30 10:53:02 -05:00
resources Add ten of diamonds 2016-11-04 16:38:11 -05:00
scripts Will install dotnetfx4.0 and choco with packer. WARNING STILL WIP 2016-11-19 15:03:43 -05:00
.DS_Store Will install dotnetfx4.0 and choco with packer. WARNING STILL WIP 2016-11-19 15:03:43 -05:00
.gitignore Change to .gitignore 2016-11-19 15:04:52 -05:00
build_win2008.ps1 Fix logic error in Windows build script. Fixes #42 2016-11-15 12:58:31 -06:00
build_win2008.sh ACTUALLY fix the version error in bash build script. Fixes #49. 2016-11-17 13:29:04 -06:00
COPYING Remove year specification from Copyright since it was incorrect and actually not necessary. 2016-11-01 15:57:02 -05:00
LICENSE Remove year specification from Copyright since it was incorrect and actually not necessary. 2016-11-01 15:57:02 -05:00
README.md Fix typos. 2016-11-17 10:05:29 -06:00
Vagrantfile Use environment variable for setting difficulty. 2016-11-08 15:02:26 -06:00
vagrantfile-windows_2008_r2.template Enable bidirectional clipboard functionality by default for VirtualBox. 2016-09-29 13:53:16 -05:00
windows_2008_r2.json Will install dotnetfx4.0 and choco with packer. WARNING STILL WIP 2016-11-19 15:03:43 -05:00

Metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit.

Metasploitable3 is released under a BSD-style license. See COPYING for more details.

Building Metasploitable 3

Requirements:

NOTE: A bug was recently discovered in VirtualBox 5.1.8 that is breaking provisioning. More information here.

NOTE: A bug was recently discovered in Vagrant 1.8.7 on OSX that is breaking provisioning. More information here.

To build automatically:

  1. Run the build_win2008.sh script if using bash, or build_win2008.ps1 if using Windows.
  2. If the command completes successfully, run 'vagrant up'.
  3. When this process completes, you should be able to open the VM within VirtualBox and login. The default credentials are U: vagrant and P: vagrant.

To build manually:

  1. Clone this repo and navigate to the main directory.
  2. Build the base VM image by running packer build windows_2008_r2.json. This will take a while the first time you run it since it has to download the OS installation ISO.
  3. After the base Vagrant box is created you need to add it to your Vagrant environment. This can be done with the command vagrant box add windows_2008_r2_virtualbox.box --name=metasploitable3.
  4. Use vagrant plugin install vagrant-reload to install the reload vagrant provisioner if you haven't already.
  5. To start the VM, run the command vagrant up. This will start up the VM and run all of the installation and configuration scripts necessary to set everything up. This takes about 10 minutes.
  6. Once this process completes, you can open up the VM within VirtualBox and login. The default credentials are U: vagrant and P: vagrant.

Vulnerabilities

More Information

The wiki has a lot more detail and serves as the main source of documentation. Please check it out.

Acknowledgements

The Windows portion of this project was based off of GitHub user joefitzgerald's packer-windows project. The Packer templates, original Vagrantfile, and installation answer files were used as the base template and built upon for the needs of this project.