Question

1- Pentester wants to use Metasploit for perform the Security Assessment. Describe in detail how this is done from start to "pwning the network". You do not have to specify commands but give enough detail on what the pentester does.

we use metapoit by kail box

Answer 1

Initially it invloves four main steps .They are

1.We need to download and install a virtual box.

2.Then download and install kali distribution.

3.Now download and install metasploitable .This is our hacking machine.

4.lastly download and install Windows XP ,this is another hacking machine.

We will have 3 machines logically connected in same network.

The hardware requirements to install Metasploit are-

1)2GHz+processor

2)1GB RAM available

3)1GB + available disk space

The recommended OS versions are:

>Kali Linux 2.0 or Upper versions

>Backtrack3 and Upper versions

>Red Hat Enterprise Linux server 5.10+

>Red Hat Enterprise Linux server 6.5+

>Red Hat Enterprise Linux server 7.1+

>Ubuntu Linux 10.04 LTS

>Ubuntu Linux 12.04 LTS

>Ubuntu Linux 14.04 LTS

>Windows server 2008 R2

>Windows server 2012 R2

>Windows 7

>Windows 8.1

Step 1:download and install virtual box

We can download using this link below-

www.virtualbox.org/wiki/Downloads

Here select an appropriate version . You will get a screen in which you need to select next button and choose a location to download this application .On the next screen you will be getting a warning message click 'yes' there.Then click install and click finish after the installation completed.

Step 2:Download and install kali distribution

Go to the official website of kali Linux i.e.,www.kali.org/downloads/

and download prebuilt kali VirtualBox images.Open VirtualBox and goto machine and select new.Goto the loaction where kali linux is downloaded and choose the virtual hard disk file.In the next screen you will be prompted to create a virtual machine. Click on create and now you can start kali OS.Your default username is root and password is toor.

The next two steps are simple to download.

To connect with metasploit console firstly we need to open kali in kali click on applications ,select exploitation tools in that select metasploit.Then you will be opening a screen i which we can use commands to execute.