CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...

metasploitable-pentest-report

Metasploitable 2 — Penetration Test Report Disclaimer: This penetration test was conducted in a private, isolated VMware lab environment for educational purposes only. No real systems were accessed. All IP addresses have been anonymised. Overview Field| Details ---|--- Tester| Prafullya Shandilya...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

metasploit-lab-report

Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...

CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 Exploitation Lab Overview This project demonstrates a penetration testing workflow against a deliberately vulnerable machine, Metasploitable 2. The objective was to identify, exploit, and analyze a known vulnerability in the FTP service, ultimately achieving...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

PHP-CGI-Argument-Injection-Exploit

🎬 This YouTube video 1️⃣ Target Check Determine the Metasploitable IP from Kali: ip a For example: Kali: 192.168.56.101 Metasploitable2: 192.168.56.102 Let's check the port and service: nmap -p 80 192.168.56.102 You can also check in the browser: http://192.168.56.102/ 2️⃣ Start Metasploit...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

This repository does not have a README...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

Metasploitable2-VAPT-Report

VAPT Report: Metasploitable 2 System Compromise Project Overview This repository contains a comprehensive Vulnerability Assessment and Penetration Testing VAPT report for the Metasploitable 2 vulnerable environment. The assessment follows the standard 5-phase ethical hacking methodology,...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

metasploitable-pentest-lab

Exploitation of vulnerabilities in Metasploitable Complete cycle of a real attack on a controlled and isolated environment: lab preparation, reconnaissance with nmap, attack surface prioritization, mapping to CVE, exploitation with Metasploit, post-exploitation, credential extraction and cracking...

Kali-Metasploitable

Audit Report and Security Laboratory Project: Vulnerability Analysis and Secure Network Exploitation Date: April 2026 Author: Ivo Albacete 1. Executive Summary This project involved the deployment of a controlled environment for practicing cybersecurity techniques. A virtualized laboratory was...

Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

Vulnerability-Assessment-Exploitation-Lab

Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823. Vulnerable Lab Setup & PHP CGI Exploitation CVE-2012-1823 🎯 Project Overview This project demonstrates the creation of an isolated virtual lab...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...