metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : root@kitploit: netcat -lnvp Table of contents Exemples Requirements Payloa...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 Exploitation Lab Overview This project demonstrates a penetration testing workflow against a deliberately vulnerable machine, Metasploitable 2. The objective was to identify, exploit, and analyze a known vulnerability in the FTP service, ultimately achieving...

CTF---CVE-2011-2523

परिदृश्य फ़्लैग कैप्चर - CVE-2011-2523 असुरक्षित Metasploitable 2 सर्वर से डिक्रिप्टेड /etc/shadow और /etc/passwd फ़ाइल कैप्चर करें। सेटअप वातावरण चरण 1: वर्चुअल मशीन डाउनलोड और अनज़िप करें इस CTF के लिए, हम दो वर्चुअल मशीनों के साथ VMware Workstation Pro चलाते हैं। हम आक्रमणकारी मशीन के रूप में...

PHP-CGI-Argument-Injection-Exploit

🎬 This YouTube video 1️⃣ Target Check Determine the Metasploitable IP from Kali: root@kitploit: ip a For example: Kali: 192.168.56.101 Metasploitable2: 192.168.56.102 Let's check the port and service: root@kitploit: nmap -p 80 192.168.56.102 You can also check in the browser: http://192.168.56.102/...

CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 सिस्टम भेद्यता जाँच सूची एक भेद्य Linux लक्ष्य मशीन पर किया गया सुरक्षा मूल्यांकन और नेटवर्क सख्तीकरण अभ्यास। यह परियोजना महत्वपूर्ण भेद्यताओं की पहचान करने, उनके प्रभाव का आकलन करने और IPTables का उपयोग करके फ़ायरवॉल-आधारित शमन लागू करने पर केंद्रित है। 📌 परियोजना अवलोकन परियोजना शीर्षक:...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

This repository does not have a README...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...

Metasploitable2-VAPT-Report

VAPT Report: Metasploitable 2 System Compromise Project Overview This repository contains a comprehensive Vulnerability Assessment and Penetration Testing VAPT report for the Metasploitable 2 vulnerable environment. The assessment follows the standard 5-phase ethical hacking methodology,...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

metasploitable-pentest-lab

Exploitation of vulnerabilities in Metasploitable Complete cycle of a real attack on a controlled and isolated environment: lab preparation, reconnaissance with nmap, attack surface prioritization, mapping to CVE, exploitation with Metasploit, post-exploitation, credential extraction and cracking...

07-Web-Application-Security

Cybersecurity Home Lab - Lab 7: Web Application Security O...

Vulnerability-Assessment-Exploitation-Lab

भेद्यता-मूल्यांकन-शोषण-प्रयोगशाला Metasploitable 2 पैठ परीक्षण प्रयोगशाला कार्यकारी सारांश यह परियोजना Metasploitable 2 लिनक्स वातावरण के विरुद्ध एक सफल, पूर्ण-जीवनचक्र पैठ परीक्षण का दस्तावेजीकरण करती है। मूल्यांकन पैठ परीक्षण निष्पादन मानक PTES का अनुसरण करता है, जिसमें प्रारंभिक टोही, शोषण, और...

Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

Kali-Metasploitable

Audit Report and Security Laboratory Project: Vulnerability Analysis and Secure Network Exploitation Date: April 2026 Author: Ivo Albacete 1. Executive Summary This project involved the deployment of a controlled environment for practicing cybersecurity techniques. A virtualized laboratory was...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823. Vulnerable Lab Setup & PHP CGI Exploitation CVE-2012-1823 🎯 Project Overview This project demonstrates the creation of an isolated virtual lab...

Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 This YouTube video 1️⃣ Target identification Nmap root@kitploit: nmap -sV -p 3632 192.168.56.102 ✅ Result will be like this: 3632/tcp open distccd v1 👉 So distcc is open and exploitable. 2️⃣ Launch Metasploit root@kitploit: msfconsole 3️⃣ Select the Distcc exploit root@kitploit: use...