metasploitable3 - Metasploitable3 is a VM that is built from the gro

项目说明

Metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security . It is intended to be used as a target for testing exploits with metasploit.

Metasploitable3 is released under a BSD-style license. See COPYING for more details.

Quick-start

To use the prebuilt images provided at create a new local metasploitable workspace:

Linux users:

Windows users:

Or clone this repository and build your own box.

Building Metasploitable 3

System Requirements:
* OS capable of running all of the required applications listed below
* VT-x/AMD- Processor recommended
* 65 GB A space on drive
* 4.5 GB RAM

Requirements:

* Packer
*
* Reload Plugin
* , libvirt/qemu-kvm, or (paid license required), or parallels (paid license required)
* Internet connection

To build automatically:

1. - On Linux/OSX run ./build.sh windows2008 to build the Windows box or ./build.sh ubuntu1404 to build the Linux box. If /tmp is small, use TMPDIR=/var/tmp ./build.sh ... to store temporary packer disk images under /var/tmp.
- On Windows, open powershell terminal and run .\build.ps1 windows2008 to build the Windows box or .\build.ps1 ubuntu1404 to build the Linux box. If no option is passed to the script i.e. .\build.ps1, then both the boxes are built.
2. If both the boxes were successfully built, run up to start both. To start any one VM, you can use:
- up ub1404 : to start the Linux box
- up win2k8 : to start the Windows box
3. When this process completes, you should be able to open the and login. The default credentials are U: and P: .

To build manually:

1. Clone this repo and na to the main directory.
2. Build the base by running packer build --only=<provider> ./packer/templates/windows_2008_r2.json where <provider> is your preferred platform. Currently , qemu, and pro are supported. This will take a while the first time you run it since it has to download the OS installation ISO.
3. After the base box is created you need to add it to your en. This can be done with the command box add packer/builds/windows_2008_r2_*_0.1.0.box --name=rapid7/metasploitable3-win2k8.
4. Use plugin install to install the reload pro if you haven't already.
5. To start the VM, run the command up win2k8. This will start up the VM and run all of the installation and configuration scripts necessary to set e up. This takes about 10 minutes.
6. Once this process completes, you can open up the and login. The default credentials are:
- Username:
- Password:

ub1404 De and Modification

Using and a lightweight Ubuntu 14.04 cloud box image, you can
quickly set up and customize ub1404 Metasploitable3 for de or
customization. To do so, install and a hypervisor such as ,
, or libvirt.

Install the relevant provider plugin:

#
plugin install

# libvirt
plugin install

Then, na to the chef/de directory in this repository.
Examine the there. Select a base box that supports your provider.

Metasploitable ub1404 uses the chef-solo pro. Configure the
chef_solo block in the with the metasploitable chef recipes that you
desire -- you can browse them in the chef/cookbooks/metasploitable
folder. Or, add or edit your own cookbook and/or recipes there.

From the chef/de directory, you can run up
to get a de ub1404 instance. After the initial up build and pro,
when you edit the chef runlist or when you edit a chef recipe, run
rsync && pro from the same directory. For faster
de, you can comment-out recipes that you do not need to rerun -- but
even if they are all enabled, re-pro should not take longer than
one or two minutes. Chef aims to be idempotent, so you can rerun this command often.

Consider taking a snapshot (e.g., snapshot sa) before modifying
recipes, so that you can always return to an initial state ( restore fresh).
If you want a _totally_ fresh snapshot, you can do the initialization with
up --no-pro, then take a snapshot, followed by pro.

* See the wiki page

More Information

The wiki has a lot more detail and serves as the main source of documentation. Please check it out.

Acknowledgements

The Windows portion of this project was based off of GitHub user joefitzgerald's packer-windows project.
The Packer templates, original , and installation answer files were used as the base template and built upon for the needs of this project.

项目信息

开发语言：HTML

Star 数：5729

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。