Metasploit Penetration Testing Lab Report

📋 Overview

This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testing methodology in a controlled lab environment.

⚠️ DISCLAIMER

READ BEFORE USING THIS CONTENT

• FOR AUTHORIZED LAB TESTING ONLY
• Target System: Metasploitable 2 (intentionally vulnerable training VM)
• Purpose: Educational and training purposes ONLY
• Unauthorized access to computer systems is ILLEGAL
• Follow all applicable laws, regulations, and ethical guidelines
• Obtain written authorization before testing any systems
• The authors assume no liability for misuse or damage

See DISCLAIMER.md for full legal disclaimer.

🎯 Lab Details

📑 Report Phases

Phase 1: Service Discovery & Reconnaissance

• Initial Nmap service version scan
• Enumeration of open ports on target host
• Identification of running service versions
• Risk assessment for each discovered service

Services Identified:

• FTP (vsftpd 2.3.4) - CRITICAL
• SSH (OpenSSH 4.7p1)
• Telnet
• SMTP (Postfix)
• HTTP (Apache 2.2.8)
• Samba (SMB)
• MySQL
• PostgreSQL
• VNC

Phase 2: Vulnerability Analysis & Module Information

• Metasploit Framework module search
• Module specifications and vulnerability details
• CVE-2011-2523 vulnerability analysis
• Module ranking: Excellent

Phase 3: Module Configuration

• Loading exploit module
• Configuration of target host (RHOSTS)
• Configuration of local handler host (LHOST)
• Setting target FTP port (RPORT)

Phase 4: Pre-Exploitation Verification

• Non-destructive banner check
• Verification of target vulnerability status
• vsFTPd 2.3.4 banner confirmation

Phase 5: Exploitation & Post-Exploitation Proof

• Exploit execution against verified target
• Backdoor spawned on TCP port 6200
• Meterpreter reverse session established
• Raw shell session output captured

📚 Learning Resources

Official Documentation

• Metasploitable 2 Exploitability Guide
• Metasploit Framework Documentation
• Rapid7 Vulnerability Database

Security Standards

• OWASP Top 10
• OWASP Testing Guide
• NIST Cybersecurity Framework

Training Platforms

• HackTheBox
• TryHackMe
• OWASP WebGoat

CVE Information

• CVE-2011-2523 Details
• NVD Database

🛠️ Requirements to Reproduce

Virtual Lab Setup

• Hypervisor: VirtualBox, VMware, or Hyper-V
• Metasploitable 2 VM - Download from Rapid7
• Attacker VM (Kali Linux or similar)

Software

• Metasploit Framework (pre-installed on Kali Linux)
• Nmap for service scanning
• SSH client for remote access

Network

• Host-only or NAT network (isolated from production)
• No internet connectivity required

📂 Repository Structure

metasploit-lab-report/
├── README.md                      # This file
├── DISCLAIMER.md                  # Legal disclaimer
├── Metasploit_Lab_Report.pdf      # Full lab report
├── Metasploit.doc                 # Original Word document
└── resources/
    └── references.md              # Additional learning resources

🔍 Key Findings

Vulnerability Details

• Service: vsftpd (Very Secure FTP Daemon)
• Affected Version: 2.3.4
• Issue: Contains a hidden backdoor in the source code
• CVSS Score: High
• Impact: Remote Code Execution as root
• Authentication: Not required

Exploitation Method

The vsftpd 2.3.4 backdoor is triggered by sending a crafted FTP command containing the text :) in the username field, which causes the service to spawn a shell on port 6200.

📊 Lab Methodology

1. Information Gathering: Nmap reconnaissance
2. Vulnerability Identification: Service version analysis
3. Exploit Selection: Metasploit module identification
4. Pre-exploitation Testing: Verification checks
5. Exploitation: Module execution
6. Post-exploitation Analysis: System evidence collection

✅ Testing Checklist

• Reconnaissance completed
• Vulnerabilities identified
• Exploit module selected and configured
• Pre-exploitation verification performed
• Exploitation successful
• Post-exploitation proof documented

📝 Notes

• This lab demonstrates a known, 15-year-old vulnerability
• Real-world penetration testing requires proper scoping and authorization
• Metasploitable 2 is intentionally vulnerable for educational purposes
• Always follow your organization's security policies and legal requirements

🤝 Contributing

This is an educational repository. Contributions welcome:

• Additional lab scenarios
• Remediation recommendations
• Defense strategies
• Related CVE documentation

📄 License

This educational content is provided for learning purposes only.

👤 Author

Name:samir Chapagain

Created: September 8, 2026

⚡ Quick Start

1. Download Metasploitable 2 VM
2. Set up isolated lab network
3. Run Nmap reconnaissance
4. Follow Phase 1-5 procedures in the PDF report
5. Review exploitation results

⚠️ Remember: Always obtain written authorization before conducting security testing on any systems you do not own or have explicit permission to test.

For questions or clarifications, refer to the official Metasploit documentation or OWASP resources.