Metasploitable 2 Exploitation - Root Access with Metasploit (vsftpd Backdoor)
In this video, I demonstrate a complete penetration test against Metasploitable 2 - a deliberately vulnerable Linux machine used for security training and practice.
I'll show you how to exploit the vsftpd 2.3.4 backdoor vulnerability using Metasploit to gain root access, dump password hashes and crack the hash, and establish 'persistence' on the target system.
🎯 WHAT YOU'LL LEARN:
Network reconnaissance with Nmap
Exploiting vsftpd 2.3.4 backdoor with Metasploit Framework (https://nvd.nist.gov/vuln/detail/CVE-...)
Gaining instant root shell access
Post-exploitation techniques on Linux
Dumping password hashes from /etc/shadow
Establishing persistence with cron jobs
Cracking password hash with John The Ripper
🔗 RESOURCES:
Metasploitable 2 Download: https://sourceforge.net/projects/meta...
Metasploit Framework: https://www.metasploit.com/
My Lab Setup: Host-Only Network (10.0.1.0/24)
💻 MY SETUP:
Attack Machine: Kali Linux (10.0.1.128)
Target Machine: Metasploitable 2 (10.0.1.129)
Exploit Used: exploit/unix/ftp/vsftpd_234_backdoor
Meterpreter: post/multi/manage/shell_to_meterpreter
⚠️ LEGAL DISCLAIMER:
This tutorial is for EDUCATIONAL PURPOSES ONLY.
⚠️ OPERATIONAL SECURITY NOTE:
The persistence technique demonstrated in this video (cron-based reverse shell executing every minute) is intentionally simplified for educational clarity and demonstration purposes.
In real-world professional penetration testing engagements, this method has several limitations:
High detectability due to frequent connection attempts (1440/day)
Easily visible in logs and network monitoring
Requires constant listener availability
Lacks obfuscation and error handling
More sophisticated and stealthier persistence methods used in actual assessments include:
SSH key injection into authorized_keys (most reliable and legitimate-looking)
Systemd service creation with proper naming conventions
Binary modification or backdooring
User profile modifications (.bashrc, .profile)
Kernel module persistence (rootkits)
Web shell deployment on services
The method shown is effective for controlled lab environments and CTF competitions, but professional engagements require techniques that prioritize operational security, stealth, and client system stability.
✅ Only use these techniques on:
Systems you own
Authorized penetration testing engagements with signed contracts
Lab environments like Metasploitable
CTF competitions
❌ Unauthorized access to computer systems is ILLEGAL worldwide under laws such as:
Computer Fraud and Abuse Act (USA)
Computer Misuse Act (UK)
Similar legislation in all jurisdictions
I am NOT responsible for any misuse of this information. Always obtain explicit written authorization before conducting security assessments.
🔔 SUBSCRIBE for more penetration testing tutorials, CTF walkthroughs, and cybersecurity content!
💬 Questions? Drop them in the comments below!
👍 If you found this helpful, please like and share!
#Metasploit #Pentesting #EthicalHacking #Cybersecurity #MetasploitFramework #KaliLinux #RootAccess #InfoSec #SecurityTesting #Metasploitable #vsftpd #Linux #Exploitation #Tutorial #CyberSecurity