Introduction to Nmap

What is Nmap Tool in Cyber Security? Types of Nmap Scans, Scanning Methodology

Setting up Lab

How to Install Nmap on Ubuntu? (Step by Step Process)

How to Install Zenmap on Kali Linux? Download, Install, Run

How to Download Metasploitable2 for VMware? Install & Run

How to Install Windows XP on VMware?

Checking Host Status and Buffer Size

How to Install Metasploit on Kali Linux? (Download & Use)

Scanning with Nmap

Full List of Nmap Scan Commands

How to Run Different Commands in Nmap Tool?

Nmap Tutorial for Beginners - Certificate

<p>Nmap is one of the most used tools for network administrators and cybersecurity pros. Nmap or the Network Mapper is an open-source tool, which means it can be used for free.</p>
<p>The role of the Network Mapper is to use commands for scanning and mapping networks. It can be used to detect live hosts on a network, scan different ports, find the operating system of the network along with its version, and perform security auditing. Learn how to use the <a href="https://www.tutorialsfreak.com/nmap-tutorial/nmap-tool-and-scans" target="_blank" rel="noopener"><strong>Nmap tool</strong></a> in this detailed tutorial.&nbsp;</p>

Nmap Tutorial for Beginners - Example

Nmap Interview Questions and Answers - 2025

Are you new to Nmap? This comprehensive Nmap tutorial for beginners will help you learn everything with examples, Quizzes, Videos, and More.

Nmap Tutorial for Beginners 2025: Basic to Advanced

Nmap Tutorial

Nmap Tutorial for Beginners - Quiz

Master the use of the Nmap tool for scanning and mapping networks.

Nmap Tutorial for Beginners

Introduction

Prerequisites for Metasploitable Installation on Kali Linux

How to Download Metasploitable?

Setting Up a Virtual Machine (VM) for Metasploitable

How to Install Metasploitable in Kali Linux?

Walkthrough: Metasploitable Installation Process

Post-Installation Configuration

How to Obtain the IP Address of Metasploitable VM in Kali Linux?

Verifying Metasploitable Installation in Kali Linux

Metasploitable Commands

<p dir="ltr">Metasploitable is a purposely vulnerable virtual machine designed for security professionals and enthusiasts to practice <a href="https://www.tutorialsfreak.com/web-application-penetration-testing-tutorial/types-of-penetration-testing" target="_blank" rel="noopener">penetration testing</a>, <a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial/what-is-vulnerability-assessment" target="_blank" rel="noopener">vulnerability assessment</a>, and ethical hacking techniques in a controlled environment. It serves as a valuable tool for learning and improving cybersecurity skills without the need to compromise real-world systems.</p>
<p dir="ltr">The purpose of this tutorial is to provide a step-by-step guide on how to install Metasploitable on Kali Linux system. By following this tutorial, you will gain access to a deliberately vulnerable target system that simulates various security weaknesses and misconfigurations.&nbsp;</p>
<p dir="ltr"><strong>This hands-on experience will enable you to:</strong></p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Learn <a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial" target="_blank" rel="noopener">Ethical Hacking</a>:</strong> Metasploitable allows you to explore the tactics and techniques used by ethical hackers to identify and exploit vulnerabilities in systems.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Enhance Penetration Testing Skills:</strong> You can practice penetration testing methodologies, including scanning, enumeration, exploitation, and post-exploitation, in a safe environment.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Understand Common Vulnerabilities:</strong> Metasploitable emulates common security flaws, helping you understand how they can be identified and mitigated in real-world scenarios.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Test Security Tools:</strong> You can test and experiment with various <a href="https://www.tutorialsfreak.com/web-application-penetration-testing-tutorial/best-penetration-testing-tools" target="_blank" rel="noopener">penetration testing tools</a>, such as Metasploit, Nmap, and Wireshark, against a target system.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Strengthen Cybersecurity Knowledge:</strong> This tutorial will serve as a foundation for building your knowledge and skills in cybersecurity, making you better prepared to defend against <a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial/different-types-of-hacking" target="_blank" rel="noopener">cyber threats</a>.</p>
</li>
</ul>
<p dir="ltr">Whether you are a cybersecurity enthusiast looking to expand your knowledge or a professional seeking to improve your practical skills, this tutorial on installing Metasploitable on Kali Linux will guide you through everything.</p>

<p dir="ltr">Before you begin the installation of Metasploitable on Kali Linux, make sure you have the following prerequisites in place:</p>
<h3 dir="ltr">1. Kali Linux Installed and Updated:</h3>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Ensure that you have Kali Linux installed on your computer or in a virtual machine (VM). If you don't have Kali Linux installed, you can download it from the official Kali Linux <a href="https://www.kali.org/downloads/" target="_blank" rel="noopener">website</a> and follow their installation instructions.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Verify that your Kali Linux system is up-to-date by running the following commands in the terminal:</p>
</li>
</ul>
<p dir="ltr"><em>sudo apt update</em></p>
<p dir="ltr"><em>sudo apt upgrade</em></p>
<h3 dir="ltr">2. Basic Familiarity with Linux Terminal:</h3>
<p dir="ltr">You should have a fundamental understanding of how to navigate and execute commands in a Linux terminal. Knowledge of common Linux commands will be beneficial for the installation and configuration process.</p>
<h3 dir="ltr">3. Internet Connection:</h3>
<p dir="ltr"><span id="docs-internal-guid-612ee1df-7fff-1245-71ee-5d966f0a8ca0"></span></p>
<p dir="ltr">Ensure that your Kali Linux system has an active internet connection throughout the installation process. This is essential for downloading Metasploitable and any required dependencies.</p>

<p dir="ltr">Metasploitable is available for download from various sources on the internet. However, it's crucial to ensure that you download it from a trusted and legitimate source to avoid any potential security risks.</p>
<p dir="ltr">The most reliable and trusted source to download Metasploitable is its official GitHub repository maintained by Rapid7, the company behind Metasploit. The GitHub repository provides the latest and official releases of Metasploitable.</p>
<p dir="ltr">To download Metasploitable from its official GitHub repository, follow these steps:</p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Open your web browser.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Visit the official Metasploitable GitHub repository at the following link:</p>
</li>
</ul>
<p dir="ltr"><a href="https://github.com/rapid7/metasploitable3">https://github.com/rapid7/metasploitable3</a>&nbsp;</p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">On the GitHub repository page, you will find a green "Code" button. Click on it to reveal a dropdown menu.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">In the dropdown menu, click on "Download ZIP." This will download the Metasploitable repository as a ZIP archive to your computer.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Once the ZIP file is downloaded, extract its contents to a directory of your choice on your Kali Linux system. You can use the unzip command or a graphical archive manager to extract the files.</p>
</li>
</ul>

<p dir="ltr"><strong>Using a virtual machine for Metasploitable offers several key advantages:</strong></p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Isolation: </strong>A virtual machine provides an isolated environment, ensuring that any actions taken on the Metasploitable system do not affect your host operating system or other virtual machines. This isolation is crucial when dealing with intentionally vulnerable systems like Metasploitable.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Safety:</strong> Metasploitable is designed to be vulnerable, and running it directly on a physical system can pose significant security risks. Using a virtual machine allows you to experiment with Metasploitable safely and without exposing your network to potential threats.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Easy Reset:</strong> If you make mistakes or need to start over, virtual machines allow you to take snapshots and revert to a previous state quickly, making the learning and testing process more flexible.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Portability:</strong> Virtual machines can be easily copied or moved to different systems, allowing you to carry your Metasploitable environment with you wherever you go.</p>
</li>
</ul>
<h3 dir="ltr">Recommended Virtualization Software</h3>
<p dir="ltr">There are several virtualization software options available, but two popular choices for setting up virtual machines on Kali Linux are:</p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>VirtualBox:</strong> Oracle VM VirtualBox is a free, open-source virtualization platform that is widely used and well-documented. It is available for Windows, macOS, Linux, and other platforms.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>VMware Workstation Player:</strong> VMware Workstation Player is another reliable option for virtualization, offering a user-friendly interface and advanced features. While it's not open-source, a free version called VMware Workstation Player is available for personal use.</p>
</li>
</ul>

<p dir="ltr"><strong>Here's a step-by-step guide on how to install Metasploitable in Kali Linux after creating the VM:</strong></p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Open your virtualization software (e.g., VirtualBox or VMware).</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Select the Metasploitable VM you created in the previous steps.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Look for an option like "Settings" or "Configuration" for the selected VM and click on it to open the settings menu.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">In the VM settings, find the "Storage" or "Hardware" section.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Locate the virtual CD/DVD drive and ensure that it is empty or disconnected.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Click on the CD/DVD drive, and in the settings, locate the option to choose an ISO file. Browse your computer to select the Metasploitable ISO file that you downloaded earlier.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Save the settings and exit the configuration menu.</p>
</li>
</ul>

<p dir="ltr">Once the Metasploitable VM boots from the ISO file, you will be guided through the installation process. Follow these steps:</p>
<h3 dir="ltr">1. Language and Location Settings:</h3>
<p dir="ltr">Select your preferred language and location settings for the Metasploitable system.</p>
<h3 dir="ltr">2. Disk Partitioning:</h3>
<p dir="ltr">The installer will prompt you to select a disk for installation. Choose the virtual hard disk you created earlier during the VM setup.</p>
<h3 dir="ltr">3. Installation Source (CD/DVD):</h3>
<p dir="ltr">During the installation process, the system will detect that the installation source is the CD/DVD drive, which is the Metasploitable ISO file. Confirm that this is the correct source.</p>
<h3 dir="ltr">4. Network Configuration:</h3>
<p dir="ltr">Configure the network settings for Metasploitable. You may choose to use DHCP (Dynamic Host Configuration Protocol) to automatically obtain an IP address or configure the network settings manually if needed. Note the IP address assigned to Metasploitable; you'll need it later for accessing the system.</p>
<h3 dir="ltr">5. Root Password:</h3>
<p dir="ltr">Set a root password for the Metasploitable system. Ensure it is a strong and secure password.</p>
<h3 dir="ltr">6. Grub Bootloader Installation:</h3>
<p dir="ltr">When prompted to install the Grub bootloader, select "Yes" to install it. The bootloader is necessary to boot the Metasploitable system.</p>
<p dir="ltr">The installation process will continue, copying necessary files and configuring the system. Once the installation is complete, you will be prompted to remove the installation media (the Metasploitable ISO). In your virtualization software, eject the ISO file or detach it from the virtual CD/DVD drive.</p>
<p dir="ltr">After removal of the ISO, the VM will reboot, and you should now have a fully installed and running Metasploitable system. You can log in with the root credentials you set during installation, and you'll be ready to explore and practice your penetration testing and ethical hacking skills on the vulnerable Metasploitable environment.</p>
<p dir="ltr">Make sure to take note of the <a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial/what-is-ip-address" target="_blank" rel="noopener">IP address</a> assigned to Metasploitable during the installation process, as you'll need it to connect to the VM from your Kali Linux host or any other system on your network.</p>

<p dir="ltr">After successfully installing Metasploitable, you can log in with the following initial credentials:</p>
<p dir="ltr"><em>Username: msfadmin</em></p>
<p dir="ltr"><em>Password: msfadmin</em></p>
<p dir="ltr">These default credentials are provided to make the initial setup process more convenient. However, it's crucial to understand the importance of changing the default password promptly.</p>

<p dir="ltr">To obtain the IP address of your Metasploitable VM, follow these steps:</p>
<ol>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Start the Metasploitable VM if it's not already running.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Once the VM is running, you can find its IP address using one of the following methods:</p>
</li>
</ol>
<ul>
<li dir="ltr" role="presentation">Use the Command Line (Linux): Open a terminal on your Kali Linux system or any other system on the same network and use the arp-scan command or the nmap command to scan the local network for devices and identify the Metasploitable VM. For example:</li>
</ul>
<p dir="ltr"><code><em>sudo arp-scan -l</em></code></p>
<p dir="ltr"><code><em># or</em></code></p>
<p dir="ltr"><code><em>sudo nmap -sn 192.168.1.0/24</em></code></p>
<p dir="ltr">Look for a device with a hostname or MAC address corresponding to your Metasploitable VM, and note the associated<a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial/what-is-ip-address" target="_blank" rel="noopener"> IP address</a>.</p>
<ul>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Check the Metasploitable Console: </strong>If you have access to the console of the Metasploitable VM (e.g., through your virtualization software), you can log in using the default credentials (msfadmin/msfadmin) and run the ifconfig or ip a command to display network configuration information, including the IP address.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation"><strong>Check Your Router or DHCP Server:</strong> You can also check your router or DHCP server's interface to see a list of devices that have obtained IP addresses. Look for the Metasploitable VM in the list of connected devices, and note its IP address.</p>
</li>
</ul>

<p dir="ltr">Here is how you can verify that Metasploitable is successfully installed on Kali Linux system:</p>
<ol>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">Open the terminal.</p>
</li>
<li dir="ltr" aria-level="1">
<p dir="ltr" role="presentation">To check if the Metasploitable VM is reachable from your Kali Linux system, you can use the following command:</p>
</li>
</ol>
<p dir="ltr"><code>ping [Metasploitable-IP]</code></p>
<p dir="ltr">If you receive responses (echo replies), it means your Kali Linux system can reach the Metasploitable VM, and the installation is successful.</p>
<p dir="ltr">If you receive no responses or encounter network-related errors, it may indicate a connectivity issue or misconfiguration. Check your network settings and firewall rules.</p>

<p dir="ltr">Below are some common Metasploit commands and their brief descriptions:</p>
<h3 dir="ltr">1. msfconsole:</h3>
<p dir="ltr">Launches the Metasploit Framework console, providing an interactive command-line interface to access various modules and tools.</p>
<h3 dir="ltr">2. use [module]:</h3>
<p dir="ltr">Selects a specific module for use, such as an exploit, auxiliary, or post-exploitation module.</p>
<h3 dir="ltr">3. search [keyword]:</h3>
<p dir="ltr">Searches for available modules based on a specified keyword or criteria, making it easy to discover exploits, payloads, and auxiliary modules.</p>
<h3 dir="ltr">4. show options:</h3>
<p dir="ltr">Displays the configurable options for the currently selected module, allowing you to set parameters for the module.</p>
<h3 dir="ltr">5.set [option] [value]:</h3>
<p dir="ltr">Sets a specific option to a given value for the currently selected module.</p>
<h3 dir="ltr">6. exploit:</h3>
<p dir="ltr">Executes the selected exploit module against the target system, attempting to compromise it.</p>
<h3 dir="ltr">7. auxiliary:</h3>
<p dir="ltr">Executes auxiliary modules for various purposes, such as <a href="https://www.tutorialsfreak.com/ethical-hacking-tutorial/what-is-network-scanning-and-its-types" target="_blank" rel="noopener">network scanning</a>, fingerprinting, or information gathering.</p>
<h3 dir="ltr">8. sessions:</h3>
<p dir="ltr">Lists and manages active sessions with compromised hosts after successful exploitation.</p>
<h3 dir="ltr">9. background:</h3>
<p dir="ltr">Moves an active session to the background, allowing you to continue using the Metasploit console.</p>
<h3 dir="ltr">10. sessions -i [session_id]:</h3>
<p dir="ltr">Interacts with a specific session, providing a shell or Meterpreter session for post-exploitation activities.</p>
<h3 dir="ltr">11. use post/[module]:</h3>
<p dir="ltr">Selects a post-exploitation module for activities like privilege escalation, data exfiltration, and lateral movement.</p>
<h3 dir="ltr">12. show payloads:</h3>
<p dir="ltr">Lists available payloads for use with exploits, providing various options for maintaining control over compromised systems.</p>
<h3 dir="ltr">13. set payload [payload]:</h3>
<p dir="ltr">Sets the payload to be used with an exploit module.</p>
<h3 dir="ltr">14. show targets:</h3>
<p dir="ltr">Displays available targets for the selected exploit module, helping you choose the appropriate target system.</p>
<h3 dir="ltr">15. check:</h3>
<p dir="ltr">Checks if a target is vulnerable to the selected exploit, without actually launching the attack.</p>
<h3 dir="ltr">16. db_import:</h3>
<p dir="ltr">Imports external scan results or vulnerability data into the Metasploit database for further analysis.</p>
<h3 dir="ltr">17. db_nmap:</h3>
<p dir="ltr">Performs an Nmap scan and imports the results into the Metasploit database.</p>
<h3 dir="ltr">18. creds:</h3>
<p dir="ltr">Manages and lists stored credentials for post-exploitation activities.</p>
<h3 dir="ltr">19. route:</h3>
<p dir="ltr">Manages and adds routes for pivoting and routing traffic through compromised hosts.</p>
<h3 dir="ltr">20. exit:</h3>
<p dir="ltr">Exits the Metasploit console.</p>
<p dir="ltr"><em><strong>Disclaimer: Legal and Ethical Responsibilities</strong></em></p>
<p dir="ltr"><em>This tutorial is intended for educational and ethical purposes only. Users of Metasploitable or similar tools must adhere to legal and ethical standards. Obtain explicit authorization from the owner before conducting penetration tests, even in controlled lab environments. Comply with local laws and regulations related to cybersecurity. Maintain detailed records, respect privacy, and prioritize safety. Unauthorized testing, unethical behavior, and data misuse are prohibited. The authors do not endorse illegal or unethical activities. Users are solely responsible for ensuring legal and ethical compliance when using Metasploitable and related tools.</em></p>

Learn how to install and use Metasploit, a powerful penetration testing framework, on Kali Linux. This step-by-step tutorial will help you to get started quickly.

Popular Courses

Popular Courses

Popular Courses

Popular Courses

Popular Courses

How to Install Metasploit on Kali Linux? (Download & Use)

Table of Contents

Related Tutorials

Ethical Hacking Tutorial

Android Penetration Testing Tutorial

Web App Penetration Testing Tutorial