🔐 Penetration Testing Lab – Metasploitable2

📌 Overview

This project demonstrates a complete penetration testing process using a controlled lab environment.

🛠️ Lab Setup

• Kali Linux (Attacker)
• Metasploitable2 (Target)
• VirtualBox NAT Network

🔍 Methodology

• Reconnaissance
• Vulnerability Scanning
• Exploitation
• Post Exploitation
• Reporting

⚙️ Tools Used

• Nmap
• Nikto
• Dirb
• Metasploit Framework
• MySQL Client

🚨 Key Findings

• vsftpd 2.3.4 Backdoor (CVE-2011-2523) → Root Access
• Samba Usermap Script (CVE-2007-2447)
• MySQL with no authentication

📂 Project Structure

• /screenshots → Proof of exploitation
• /report → Full penetration testing report

🎯 Key Learnings

• Real-world vulnerability exploitation
• Importance of secure configurations
• How small misconfigurations lead to major breaches

⚠️ Disclaimer

This project was performed in a controlled lab environment for educational purposes only.