At this point, we have one attack 1
platform, which is Kali, and one victim, 2
which is Windows XP. But we also want to 3
put a Linux machine here for a victim. So 4
we're going to go ahead and open up our 5
web browser, and we're going to go to 6
Google, and we're going to search for a 7
program called Metasploitable. And 8
Metasploitable is a downloadable 9
operating system, it is a virtual machine 10
created around Linux, that is actually 11
made for testing and security tool 12
practice. Because it has a bunch of 13
vulnerabilities in there for us to 14
exploit, so it's going to be a great 15
learning environment for us. So we'll go 16
ahead and click on the sourceforge link, 17
and then we will download it which comes 18
as a zip file. Now once the Metasploitable 19
is downloaded it comes as a zip 20
file, we'll have to unzip it. On a Mac 21
environment you'll just double-click it. 22
In Windows you'll right click and 23
extract it. If you open the folder, you'll 24
see that this comes as a vmx file, with 25
the hard drive being a vmdk. That's 26
because this comes as part of VMware file 27
format, but that's okay. VirtualBox will 28
still be able to use that. So what we'll 29
do is we'll go into VirtualBox, we'll 30
click new, in this case will give the name 31
Metasploitable, it's a Linux and is 32
considered Other Linux. We'll hit 33
continue, 256 megabytes is plenty of 34
space for Metasploitable, and for the 35
hard drive we're going to click use an 36
existing hard drive, and then we're going 37
to go to that download folder and select 38
the vmdk file. Hit create, now the last 39
two things we have to do is go to system, 40
go to processor, and again enable that 41
PAE/NX, which will allow this Linux Distro 42
to work, and then click on network, and go 43
to internal network because we don't 44
want this touching the outside world, so 45
we'll keep it on our internal network, 46
and hit OK. At this point we should be able 47
to power it on with no issues. And again 48
if you want to go full screen, view, full 49
screen. 50
And now we have Metasploitable. Now the 51
login is msfadmin with the password of 52
msfadmin. We could try that to ensure 53
that it works, and now we have a usable 54
Metasploitable that's up and running 55
for us to start hacking against. Again 56
I'm going to do the alt tab or command 57
tab to get back to the Macintosh 58
environment, so now I have my Metasploitable 59
and my Kali Linux running, I 60
can also start my Windows XP, and I want 61
to ensure that all of my networks are 62
set to that internal network. So as you 63
can see I've set all of mine to internal 64
network, you want to do the exact same 65
thing just clicking on network and 66
selecting internal network and the name 67
of the network has to be matching on all 68
three of them.