🔐 Metasploitable 2 Penetration Testing Lab

A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment.

---

📌 Project Overview

This project simulates a real-world penetration testing engagement conducted in a controlled virtual lab.

The objective was to identify exposed services on a vulnerable system, detect critical vulnerabilities, perform controlled exploitation, validate system compromise, and implement mitigation strategies.

The project demonstrates both offensive and defensive cybersecurity capabilities.

---

🏗 Lab Environment

Host System: Windows 11
Virtualization Platform: VMware Workstation Pro 17
Attacker Machine: Kali Linux
Target Machine: Metasploitable 2
Network Mode: NAT (Isolated Internal Network)
Subnet: 192.168.163.0/24

An architecture diagram is available in the /architecture directory.

---

🔎 Methodology

The project followed a structured penetration testing lifecycle:

1. Reconnaissance
2. Scanning & Enumeration
3. Vulnerability Identification
4. Exploitation
5. Post-Exploitation Validation
6. Mitigation & Hardening

Each phase was documented with command outputs and evidence.

---

🚨 Vulnerability Identified

Service: vsFTPd 2.3.4
CVE: CVE-2011-2523
Severity: Critical
Type: Remote Command Execution (Backdoor)

The vulnerability allows attackers to execute arbitrary commands with root privileges due to a maliciously modified FTP service.

---

💥 Exploitation

The vulnerability was exploited using the Metasploit Framework module:

exploit/unix/ftp/vsftpd_234_backdoor

Result:

• Shell session established
• Root access obtained (uid=0(root))
• Full system compromise validated

Evidence screenshots are available in the /evidence directory.

---

🔐 Post-Exploitation Validation

To confirm complete system compromise, the following actions were performed:

• Verified root privileges (whoami, id)
• Retrieved system information (uname -a)
• Accessed sensitive system files
• Created proof-of-compromise file
• Inspected network configuration

Root-level control confirmed total system access within the authorized lab scope.

---

🛡 Mitigation & Defensive Controls

To reduce the attack surface, firewall rules were implemented using:

iptables -A INPUT -p tcp --dport 21 -j DROP

This blocked external access to the vulnerable FTP service (Port 21).

Security Recommendations:

• Regular patch management
• Service hardening
• Network segmentation
• Continuous vulnerability assessment
• Least privilege enforcement

---

📊 Security Impact Analysis

If present in a production environment, this vulnerability could lead to:

• Unauthorized root access
• Data breach
• Service disruption
• System manipulation
• Regulatory non-compliance

This project reinforces the importance of proactive security management and layered defense strategies.

---

🛠 Tools & Technologies

• VMware Workstation Pro
• Kali Linux
• Metasploitable 2
• Nmap
• Nmap NSE Scripts
• Metasploit Framework
• Linux Command Line
• iptables

---

👥 Team

This project was conducted collaboratively by:

• Krish Yagnik – Lab setup, exploitation execution, post-exploitation validation
• Khushi Kotkar – Network scanning, vulnerability assessment, CVE analysis
• Abhi Solanki – Mitigation implementation, firewall configuration, risk documentation

---

⚖ Ethical Statement

All testing was conducted strictly within a legally authorized and isolated virtual lab environment for educational purposes only.

No external systems or real-world networks were targeted.

---

📁 Repository Structure

README.md /report /architecture /Screenshots

---

👨‍💻 Author Information

Cybersecurity Undergraduate Students
BSc Cybersecurity
Focused on practical security assessment and defensive security techniques