1
00:00:00,360 --> 00:00:04,750
So allow me to introduce you to the metastable to virtual machine.

2
00:00:05,550 --> 00:00:13,170
It's an intentionally vulnerable version of a wound to Linux design for testing security tools and demonstrating

3
00:00:13,170 --> 00:00:14,400
common vulnerabilities.

4
00:00:15,510 --> 00:00:21,600
It is created by Rapid Seven was also the producer of the Métis Boik project.

5
00:00:22,750 --> 00:00:30,520
This virtual machine is compatible with VMware Virtual Box and other common virtualization platforms.

6
00:00:31,840 --> 00:00:39,700
Now, by default, that exploitable network interfaces are bound to the net and host only network adapt.

7
00:00:40,870 --> 00:00:46,960
I sense there are a lot of vulnerabilities in it, you don't want to use the virtual machines in bridge

8
00:00:46,960 --> 00:00:47,380
mode.

9
00:00:48,830 --> 00:00:55,340
One of the top reasons is someone in that network might hack the vulnerable virtual machine and try

10
00:00:55,340 --> 00:00:59,120
to access the host machine, which means your computer.

11
00:01:01,080 --> 00:01:08,640
So now you're going to scan exploit this machine to gather what you expect from the course.

12
00:01:10,270 --> 00:01:14,170
So let's go ahead and download it and imported into virtual box.

13
00:01:16,250 --> 00:01:23,090
So go ahead and fire up your favorite browser again and type meta exploitable to.

14
00:01:24,020 --> 00:01:25,100
Into the address bar.

15
00:01:26,970 --> 00:01:34,560
And look at that in the first row is Rapid Sevens Page, so this is the official page for Métis, voidable

16
00:01:34,560 --> 00:01:34,950
to.

17
00:01:37,340 --> 00:01:41,770
Now, here you're going to see a SourceForge link, so let's follow it.

18
00:01:43,950 --> 00:01:51,390
Now, you can go ahead and click this big button, which is a download button and wait for a few seconds.

19
00:01:52,650 --> 00:01:53,940
Then your download starts.

20
00:01:55,830 --> 00:01:59,980
But for sure, I will not record this whole download process.

21
00:02:00,000 --> 00:02:00,840
You don't need to see it.

22
00:02:00,840 --> 00:02:01,830
You're going to see your own.

23
00:02:03,420 --> 00:02:08,070
So after the download, I'll move the file to my tools folder.

24
00:02:09,730 --> 00:02:12,360
But you can find it in your download folder.

25
00:02:13,890 --> 00:02:16,530
So just go there and right, click on the file.

26
00:02:18,070 --> 00:02:23,110
And now you can extract it to a virtual box VM folder.

27
00:02:24,700 --> 00:02:29,290
We're a little bit while that extraction finishes, OK, now it's finished.

28
00:02:30,370 --> 00:02:35,680
So now you should be able to import the virtual machine and virtual box.

29
00:02:36,740 --> 00:02:45,260
So Metastable two is a VMware virtual machine, but you can import its hard drive into virtual box.

30
00:02:46,430 --> 00:02:54,890
So let's first create a virtual machine from the beginning, press new and this window's going to come

31
00:02:54,890 --> 00:02:55,100
up.

32
00:02:56,320 --> 00:03:00,730
And let's type in Mattos voidable to.

33
00:03:02,050 --> 00:03:05,350
And choose the operating system type as Linux.

34
00:03:07,380 --> 00:03:14,070
And we'll choose the version as Debian 64 bit and click next.

35
00:03:14,940 --> 00:03:21,810
Now, I don't want to change the memory, so I mean, I let it stay as is click next.

36
00:03:23,180 --> 00:03:28,970
And yeah, so here's the important part, because you should import the virtual hard drive that you

37
00:03:28,970 --> 00:03:38,240
have extract, so choose the third option and show the folder that you have extracted the Métis voidable

38
00:03:38,240 --> 00:03:40,340
to to you.

39
00:03:41,270 --> 00:03:42,260
And then.

40
00:03:43,380 --> 00:03:44,130
It create.

41
00:03:46,180 --> 00:03:48,690
So as you can see, it doesn't take too much effort.

42
00:03:49,860 --> 00:03:54,180
Right, so now let's open MEDDER spoil two by double clicking on it.

43
00:03:57,830 --> 00:04:01,780
Won't be long, and finally, you're going to see the log in show.

44
00:04:02,880 --> 00:04:06,600
So the default user is MSF admin.

45
00:04:07,930 --> 00:04:12,580
And the password for this user is MSF admin as well.

46
00:04:14,140 --> 00:04:15,680
But don't let's forget it here.

47
00:04:15,700 --> 00:04:20,200
This is a U.S. keyboard layout, so watch it while you're typing.

48
00:04:21,420 --> 00:04:28,770
OK, it started and congratulations, hopefully, if you are mirroring what I'm doing, you have imported

49
00:04:28,770 --> 00:04:31,590
Métis exploitable to into your lab environment.