Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Metasploit Revealed: Secrets of the Expert Pentester

You're reading from   Metasploit Revealed: Secrets of the Expert Pentester Build your defense against complex attacks

Arrow left icon
Product type Course
Published in Dec 2017
Publisher
ISBN-13 9781788624596
Length 860 pages
Edition 1st Edition
Arrow right icon
Authors (2):
Arrow left icon
Nipun Jaswal Nipun Jaswal
Author Profile Icon Nipun Jaswal
Nipun Jaswal
Sagar Rahalkar Sagar Rahalkar
Author Profile Icon Sagar Rahalkar
Sagar Rahalkar
Arrow right icon
View More author details
Toc

Table of Contents (35) Chapters Close

Title Page
Credits
Preface
1. Module 1 FREE CHAPTER 2. Introduction to Metasploit and Supporting Tools 3. Setting up Your Environment 4. Metasploit Components and Environment Configuration 5. Information Gathering with Metasploit 6. Vulnerability Hunting with Metasploit 7. Client-side Attacks with Metasploit 8. Web Application Scanning with Metasploit 9. Antivirus Evasion and Anti-Forensics 10. Cyber Attack Management with Armitage 11. Extending Metasploit and Exploit Development 12. Module 2 13. Approaching a Penetration Test Using Metasploit 14. Reinventing Metasploit 15. The Exploit Formulation Process 16. Porting Exploits 17. Testing Services with Metasploit 18. Virtual Test Grounds and Staging 19. Client-side Exploitation 20. Metasploit Extended 21. Speeding up Penetration Testing 22. Visualizing with Armitage 23. Module 3 24. Getting Started with Metasploit 25. Identifying and Scanning Targets 26. Exploitation and Gaining Access 27. Post-Exploitation with Metasploit 28. Testing Services with Metasploit 29. Fast-Paced Exploitation with Metasploit 30. Exploiting Real-World Challenges with Metasploit 31. Bibliography
32. Thanks page

Working with FTP servers using Metasploit


The module we will be using for this demonstration is ftp_version.rb from scanners in the auxiliary section.

Scanning FTP services

Let us select the module using the use command and check what different options are required by the module for it to work:

We can see we have a number of modules to work with. However, for now, let us use the ftp_version module, as shown in the following screenshot:

To scan the entire network, let's set RHOSTS to 192.168.10.0/24 (0-255) and also increase the number of threads for a speedy operation:

Let's run the module and analyze the output:

We can see we have scanned the entire network and found two hosts running FTP services, which are TP-LINK FTP server and FTP Utility FTP server. So now that we know what services are running on the target, it will be easy for us to find any matching exploit if the version of these FTP services is vulnerable.

We can also see that some lines are displaying the progress of the scan and generating...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image