How to Build Your Own Virtual Lab to Practice Penetration Testing

[Music] hey everybody and welcome back to another nilson networking video you know ever since I created this Channel and started posting content almost immediately I started receiving comments or requests from you the viewers about either you know how my Virtual Lab was set up how you could create your own virtual lab so you could do what we're doing in the videos or where can you go on the internet that's not going to cost you a monthly fee to practice these skills because you know being my viewers you're all aware and you're very righteous and virtuous

and you would never actually go out on the internet and illegally hack without permission you would you just wouldn't do that you know we we better than that so I thought long and hard how can I help my viewers that you know don't have a bank account like Elon Musk how can I help them create their own virtual labs for no money with very minimal hard W requirement and that my friends is what this video and this series is going to focus on all right now that you know the quote unquote focus of the video

let me give you some specifics because that's really what you care about and honestly my opinion of minimal is 32 terabytes of memory and most of you probably don't think that's enough so um here's what we're going to go with and here's the goal of this specific video um and I say that because in the future I plan to continue this series where we'll add new virtual um machines to this lab but for this video stay focused people we're going to set up a virtual Box Lab with a Cali Linux box in it a metasploitable

two box in it and a metasploitable three box in it so we're going to have three machines inside a virtual Network and when they're all turned on and this is key because virtual machines don't take up Ram or memory whatever you want to go with here when they're not turned on some people may not be aware of that so when they're all turned on you're going to need 4 gigs of memory technically you could proba get away with three but that would be pretty that'd be pretty minimal but if you needed to you could you

can fin tune it and I'll show you how to do that but that's kind of the deal you're going to need four gigs of memory when they're all turned on and you're going to need about 80 gigs of hard drive I think again you could get away with less but I'm trying to be I'm I'm giving you more that way you don't come back and be like dude you lied to me what's the deal so that's what we're going to do so with that said I am now on a clean windows machine here Windows 10

and we are going to start our journey right now all right and to start our journey we need to go out on the interwebs here so open up a web browser and what you're going to want to do is and you could do this in any order but let's just let's just start with what makes the most sense which is our hypervisor now I know you might get tempted to go down here and look at some of this don't do it just stick with virtual box here we need a hypervisor a hypervisor if you're not

aware it's kind of the it's a software that allows these virtual machines to run on um and there's different types of hypervisors but we're not going to go into that for right now but for free there is nothing better I believe than virtual box you know there's VM or hyperv you've probably heard the names um but virtual box is free and it's by Oracle and it's what we're going to go with so what we're going to want is whatever you're on we're on Windows for this so we're going to go with Windows but if you

want Mac or Linux you could go there we're going to start the download and then I think we'll head over to get our Cali box right this is going to be the machine where we're going to you know perform our um testing and all that good stuff so you're going to be presented with two options when you come over here and I will throw all these links in the description too so you don't need to write these down um but we want the ones over here on the right that say virtual machines we don't want

the installer installer is like an ISO that you actually have to install and go through the whole process these are pre-built and a lot quicker to install and they have everything you need um the only reason you'd really want to do with the iso is you needed to do some like custom kernel modules and things like that that we don't need so we're going to go over here we're going to want to select the top option here unless you're really like you know some Maverick and you want to go out and do the weekly weekly

is kind of like The Cutting Edge I'm going a little more stability here which I would suggest you do the same go ahead and click the download right there and now we need to get our Target machines which are going to be metas spoolable three and two so we're going to do is we're going to take this link that again I will put in the description head on over here and you're going to want to get the OVA file here so go ahead and hit that it will start your download in about 5 seconds and

while that's doing here let me get the other link and once that starts we're going to head over and get the second link or the second image I should say and it's going to automatically start again and we got a lot going on here and you can see okay we got a lot going on there uh and what we want to do now is we need to get seven zip right and the reason you need seven zip is because C's going to come down and it's going to be seven zipped uh they like to make

it difficult so what you need to do is you got to go down there and you're going to down load this and we're going to let those go these will honestly take a while here I'm not even sure how long they'll take so I will come back to the video when they are done and we will continue with the install process all right and it looks like they have all completed yippy okay so we can go ahead and get out of here for now we don't need that anymore uh we're going to go ahead and

go to the downloads or wherever you put your downloads and I'm just going to go ahead and install seven zip real quick cuz it takes about 2 seconds to do just put it wherever you want go ahead and install it and you're done pretty easy right um so then let's go ahead and get virtual box installed shall we all right let's go ahead and head next here just going to want to go with the defaults you could change this if you like were putting this on an external drive or something and you wanted to put

it somewhere else you could um I'm not so I'm just going to go ahead and leave the defaults and then this a warning just saying that you're going to get disconnected if if you install this it will while it installs the like um interface adapters and all that fun stuff on virtual box it might disconnect you so I've never had it where I even notice it so just go ahead and hit next and hit install it do its thing it's really quick to get this installed and there you go and we going go ahead and

start it up apparently it's not going to start up so I'll double click that all right and when we first go in here we're going to want to do one thing and you could do this later on honestly but I'm just going to go ahead and do it now so I don't forget uh you're going to want to click right here and we're going to want to go to network and we're going to set up a n network which is network network add address translation this pretty much means whatever we set up in our lab

will be only in that little lab and then it will do the translation to allow us to get out to the internet but whatever we're doing in the lab the IPS we set there da d da da da I mean you could do 8.8.8.8 if you wanted to um like when you create here you could change this to be whatever you want it's private to you no one on the internet will ever see it um so for me I'm just going to go ahead and make it 1010 uh z0 again you could do whatever you

want leave DHC enabled unless for whatever reason you're going to set static IPS on all your um equipment in the lab I would just go ahead and leave it as it is unless you have a reason um then go ahead and hit apply you'll see it takes up there and at this point you're done with pretty much the uh config for the virtual box and now we need to do a little maintenance on these downloads here what we're going to want to do is we're going to want to extract both Cali and Metasploit so what

we're going to do is we'll start with Cali and you can see it has has a seven zip on it so what we're going to want to do is say extract files if you do here technically you could do it but then everything you import in Virtual box is going to live in the downloads folder and as soon as you happen to delete something from the download if you delete that image when it's not loaded by virtual box you'll delete the VM so I suggest you move it and that's what I'm going to do here

so I'm going to do seven zip and I'm going to say extract files and then I'm going to move it from where it is here I'm just going to go ahead and I'm going to do this uh and I'm just going to go to C users and an admin and then there's a little virtual box folder that was created when we did the install I'm going to go ahead and go in there and I'm going to make a new folder called VMS you can do whatever you want but this is where I'm going to put

it and this that way everything with the within virtual box is kind of living in the same folder I just to me it makes a little more sense U if you wanted to put this like on an external drive let's say you had and you wanted to put all your VMS on that go for it um go ahead and hit okay and you can see it's going to get extracted there so I'm going to go ahead and hit okay I'm going to let that extract while that's extracting we might as well start this one extracting

so I'll go ahead and do uh we'll do seven zip again we'll do extract files and bummer I thought it might keep where I was but it didn't so I'll just click click click go back here into VMS hit okay hit that and it's going to start extracting and those look like they're going pretty quick C's going a little slower uh and then I'm just going to go ahead and move the metas split I'm going to do a contr x and then I'm just going to go ahead and move it into that same folder as

well so when we're done and I can find it there we're going to end up with our three um virtual horiz is pretty much what these are going to be and they have the config settings and all that for the compute but um that's really what it's going to be so now that should be done once this thing's done here we can start bringing them in Virtual box all right so it's done and what we're going to do is we're going to start and you could do this in any order you want but for my

video I'm going to start with metas splitable 3 so what we're going to want to do is you're going to want and pay close attention because this is actually going to be a different procedure for all three of these machines we're going to import first one we're going to import so this actually lines up with the word I just used but you'll see in a minute we're not going to import all of them so but for metable three we are so what we're going to do here is browse to that folder where we just put

metasploitable 3 so you're going to want to go there users wherever yours is go in there and there you go so you're going to want to hit okay hit next now it's going to go over at this time all these virtual settings we are going to lower the ram but we're going to do that after it's imported you can always change it after it's imported leave everything else default oops I don't know what just happened I did not click that go ahead and hit finish and it will go go ahead and import now while it's

doing that we are also going to go to the home here which we're already on uh and we are going to actually add the Cali Linux box so we're going to hit the add button uh we're going to go here we're going to go to Virtual box BMS we're going to go into Cali we're going to go again and here's where you want to go so then you hit okay um now we actually have a c Linux box in here and at right now at this point this would turn on and run but I want

to get them all three in here before we start messing with them because we do need to modify the memory and all that um and the last one we want to do we're going to bring in um Metasploit 3 and again this one's a little tricky and the reason It's Tricky is because we need to use the new Option that's not tricky too tricky right so you can name this whatever you want to I'm just going to say meta 2 because this is meta 2 uh and you're going to want to leave this blank but

down here you're going to want to change this to Linux and you're going to want to change this to other 64 which is all the way on the bottom sorry I scrolled pretty quick all the way down there on the bottom go ahead and hit next and you can leave this as is this is great and then what we're going to want to do here and this is the tricky part you need to say use an existing virtual hard disk file and then what you want to do is you want to add and we now

have to browse to it again so we're going to need to do is and again it's pre filling in the wrong area so what we want to do is we want to go up here go where you extracted them to and then admin virtual box VMS met splitable to and select this guy okay then you want to highlight it here pull this up so you can see it hit choose and then you want to go ahead and hit next and hit finish and there you go now we have all three machines right that's great mission

accomplished there technically as they are right now I believe we're taking up what 512 okay so we're over our allotment for memory so what we're going to do is we're going to fix that real quick so we're going to go in here we're going to go under settings and we're going to go to system and we're just going to turn this guy I'm going to give this one you know we're just going to do 512 too it's little uh brother can use 512 I guess that would be older technically um we'll leave this one at

512 as well and then we can go in here to Cali and now we're using 512 512 so we're at a gig two gigs and that allows us if we want to bump up C to three gigs and still stay under our allotment which I'm going to do you don't have to I'm just going to go that's close enough I don't the ex math is like what 76307 somewhere around there we're just going to go with this close enough um so we're giving this guy three 512 512 okay so one last thing we need to

do and I should have just done this while I was in there you want to go back to setting and remember that Nat we want to change this guy right here to the natat network and then we need to do the same for this guy natn Network and then we want to go over here settings n o n network and at this point we are good to fire them up all right but before we fire it up I wanted to show you how it looks from the perspective of the task manager um so if you

look right here you can see I set this up as what I kind of consider a standard laptop nowadays with 8 gigs of memory uh CPU doesn't really matter and I just say 100 gigs of hard drive you know we really probably only use what 40 but just say that's your Standard specs you have this right the the one thing that's the most important is going to be the memory because you know a lot of laptops if you're doing this on a laptop um they don't have the expandability or it's a pain in the butt

to install uh memory so you're hoping you have at least eight and that's what I would consider honestly the bare minum you could get away with six uh but it's probably going to be painful so I would say eight eight total and you're going to use four for your virtual appb if you have them all fired up as you can see right now we're only using about 1.7 so you can think the windows OS is using about 1.7 so now let's go head and fire up why don't we just start with metasploitable to it's on

the bottom we'll go ahead and double click it and it's going to fire up and as it's coming up you'll see the memory will pop up and you will get a couple pop-ups like this this is telling you that it's capturing your keyboard it will say it's capturing your mouse in a minute here no big deal we expect it to the reason it warns you for that and you may or may not get a prompt about this uh the reason it warns you is to get out of the capture meaning I'm captured in here you

see how my mouse disappeared I can't get my mouse out if I hit control on the right the right control it releases the mouse uh it should prompt you I'm not really sure why this didn't um but it should it should prompt you once you're in there if you need to get out hit control it should say that before it actually captures your mouse it makes you acknowledge it um maybe because I did this in a test it's it's not going to give it to me again um but it should you also may or may

not get a prompt the first time you Bo boot up um a virtual box VM saying that it's to switch the scaling size that's totally normal just hit okay and or switch I think is actually the button you hit and that just switches to make it um as appealing to your eyes as possible uh it's not going to hit you or hurt you or anything like that so uh okay as you can see we got our first server up we could actually log in here if we wanted but we'll do that in a minute it

does tell you the default login right here if you want uh but again we'll go over that see if I hit any other keyboard it won't let me out I have to hit the lower well depending where control is on your keyboard it's usually in the lower right corner of the standard keyboard uh the control there so you're going to go ahead and minimize that down and as you can see it took about 500 gigs or Megs right because we were at 1.7 and there we're there so let's go ahead and fire up number two

double click on it or you could once again hit the start button there same thing we're going to get we're going to get powering up you're going to get capturing keyboard and then we're going to get and again you can close these this will pop up for the mouse warning but then you can close it out if you want but for the most part honestly you should never even really have to deal with these VMS um because these are going to be the targets so we just turn them up minimize them down and then we

get them Cali where we're going to do all the work so as this is booting up you can always hit ex well I booted too quick but if that window's ever there too long you can always hit escape and kind of see what it's doing so all right again got to hit control to get out of there minimize that down and as you can see our memory has now jumped up to 2.9 so we're right about where we should be now for the final one we're going to want to start up our Cali box right

so let's go ahead and start that up and we'll let it boot up and we'll see where the memory gets to on the Cali box and you can see down here you're going to have both your windows you're going to have metable three and two over there um so again you can just leave those guys down minimized I didn't want you there oh no this is C okay thought that said metable so you can see our memories popping up here we're just going to go obviously with the default C's going to be the same C

are used to um if you've never used it it will you know this is C uh so we're going to go ahead and let it boot up here and and like I was saying on met exploitable as C or any of Unix is Linux is booting if you hit Escape it actually shows you what's going on in the background I don't know some of you may know that but that's kind of old school we used to hit that just to see what it was doing uh and there we are we are now at our C

Linux login and let's just check where our memory is running at you can see we're only using 4.2 um gigabytes of memory so we still have almost half our memory and we have all three of our machines online right now so there you go um um so now what I'd like to do actually I'll just minimize that we'll come back and look after we get working a little bit in C see if it pops up so I'm going to go ahead and minimize here and we're going to go ahead and get logged into Cali before

I do that I'm going to make it bigger um we'll fix the resolution when we get once we get in there uh for default login for C Linux is going to be c c c CI pretty secure right there right uh so we're going to go ahead and boot in and it should adjust the resolution automatically once it gets booted um apparently it's not going to cooperate so let's see if we can trick it into doing it all right so that's what you would want to do you'd want to just like not reduce down uh

and then click it again and you can now that we're in Cali um well we'll go into that in a minute but let's focus on first things first all right so we're in here we should change our password right um because C isn't the most secure password so that's the first thing I want to show you how to do and how we're going to do that is you're just going to go ahead and password and hit enter and now this is going to be your password for C so set this to whatever you want to

have it be um trying to think of one I'll remember oh my bad uh I should read what that says so this is going to be C it's asking for your current password and then pick a new password you don't have to honestly you're in a Virtual Lab do whatever you want whatever flots your boat but uh it's good practice to and then you're also going to want to change your root password because that is also Cali so what you're going to want to do is suit pad here and you'd want to put in root

uh and then it's asking you for your password for Cali which is going to be the one you just set and then the new password for root and then you're good and you can test this by going Su root and putting in your new password and there you go you get root we don't need root right now but that's it so that's the first kind of thing I would and that's actually something you should get in the habit of um in case you're ever out there um you know and not in the lab so second

thing I want to do is I want to make sure I have connectivity so what I'm going to do is just run a simple ping you can ping against whatever you want and okay so I have internet access now let's check name resolution making sure we have some DNS servers out there so let's do the same thing but let's ping google.com and you can see we're getting that back so we can get out on the internet um which is important because the next thing I would say I say we should do is we should update

R OS and you're going to want to do that first update the repository which is actually going to be the location that checks for Cali updates and you'd want to do uh pseudo a update and it's going to go ahead and do its little thing here I'll pause all right and it should almost be done here um and even though we literally just downloaded this package you're going to want to do this anyway just so you make sure you get the best experience because what will happen is you'll forget to do this and then you'll

go out and something is not going to work and then you're going to get mad um so what you would want to do at this point and I'm not going to do it but I'll show you the command you would actually want to run the install you know we'll start it and then I'll just kill it um because I don't have time to sit here for 76 packages but what you'd want to do is run this command pseudo a full upgrade um just like that and You' need to do a-y at the end I don't

know why I forgot that and you would hit enter and then it would start to do it and again I'm not going to let it go because it will take a while to install that stuff and at the very end the last thing you want to do is you want to do auto remove and what this is going to do is at the end it's going to update any packages that are no longer dependent uh meaning like let's say you updated a um Nano it was you updated that and then one of the libraries was

no longer needed it would just remove it keeps it clean um so with that said let me show you something else I like to do which is install a terminal that is not annoying like this so what I like to do and I'm going to copy and paste this command because it is quite a long command there's actually three of them you're going to need I'm going to install a terminal know in as tilx which is actually I get asked a lot in my comments on my videos how do you use the terminal where you

can split them or you can put them horizontally let me show you you're going to install this terminal right here so I'm going to go ahead and do that and then I'm going to go ahead and do this these three are what you're going to need need here and we're going to do this and then we're going to actually install it so we've downloaded we've done that and now we're going to run the installer so we're going to go ahead and paste that and I promise you I'm not downloading malware when you do this uh

you're going to go through this it's going to do its thing here and we're going to give it some time to do its thing it doesn't take too terribly WR long and we're almost done and there you go you got TX installed and we can close out of this this one cuz I don't want to see it anymore now that this is installed let me show you why I like it okay so we can full screen this up here and what's cool about taxes I can go boom now I got a terminal there oh I

want one on the bottom I want two on the bottom you can take them move them it's just awesome uh and it lets you copy and paste without having to right click and do all that you can just do control V control C it's it's much quality of life improvement over the standard terminal you're going to get there which I think is no maybe I'm not 100% sure but anyway this is what I like and if you want to be cool this is what you should be using too uh just kidding um kind of so

what we want to do now is we want to make this our default and how we're going to do that we're going to go up to the application window and you're going to go to settings if I can remember how to do this and we're going to go to default applications and then you're going to go to utilities here and down here at Terminal we're going to want to hit other and we're just going to search for a light we're going to click here and then we're just going to search for once it pop populates

we're just going to hit uh t i l okay apparently you got to type the whole thing um hit open and hit okay and hit close now when you go over here and you do uh new terminal here you're going to get a tail X terminal awesome right let's get rid of this thing we don't want this guy up here uh that guy so let's remove it we don't want that one usually you can just add it right there so okay we'll we'll do a different way uh sometimes things don't work out that great so

we'll go till right here and let's try doing this let's add it to the panel we didn't want to add it over there okay I am failing right now let's remove it let's try that again uh tix and let's go right here and let's try let's do this let's add it to the desktop we're going to hack this is what you do when you don't know what's going wrong and then we'll just drag it up there and let's go ahead and create launcher which I was trying to do a minute ago I don't know why

it wasn't cooperating a minute ago but anyway we got the result it was just a little painful but you know sometimes things don't always work out uh so we're cool there right so let me show you a couple things real quick about C in case you're not aware I just think it's kind of important to know um over here actually these okay so this is where I was going to put those launchers I see what I did I blew it I admit the fe uh but this going to be your shutdown button over here shutdown

log out switch user all that stuff so some people may or may not know where that is and they're looking for it um and then you also can when you're in Virtual box right here if you wanted to make it full screen you can do that and again this is going to warn you that to get out of this you're going to need to hit the host key which is going to be your lower right control and F that's fine I know this you know this now right and then you get full screen which is

kind of nice right um and then from here what else what I want to show you I'm just trying to think of some things if you're new to Cali and virtual box you might not know oh here's a cool one um so let's just go ahead you can actually go right here and you can take a snapshot and now what this does is this allows you to always recover think if you ever used the mac and use time machine this will take a snapshot of the configuration of this computer or this virtual machine right now

as it is so if I were to go out and then you know get malware or just install something that hos the whole system I could then go back restore to the snapshot I took and get back right where I was I actually have a whole video on this on the channel if you wanted to check it out I don't want to go into it in too many details right now but that's that um and I think that's pretty much enough to show you right there I'm going to go ahead and change this back out

of full screen um yeah I think that covers it for cie so let me show you how to get into the meta spoolable boxes and then from there we can do a little uh testing all right so we'll just pull up uh we'll do a metable three first and where's my login I'm going to go ahead and try to find you and for whatever reason it blows it up and it makes the fonts giant I don't know why I did that maybe it's actually better for you to watch the video in but you're going to

want to log in and the login for this is V Grant like that unless I spelled it wrong pretty sure that's it okay so we are now logged into metas splitable 3 and really again you really unless you just wanted to like you know ping something out to or you wanted to Ping the other apparently the host is unreachable which that doesn't make sense why would it be unreachable um it does look like like none of these are on the nated network so let's check something I guess this is why you'd want to log in

there actually let's get rid of you for right now and let's go over here to metable 3 and let's check the network settings because that's the only reason I could think that um we would not be on oh that's not what we told it to be on we told it to be right here did we not okay so let's try it again let give it a second here wonder if we have to reboot the D thing yeah probably which you know what that's actually okay because I did want to show you how to shut these

things down um because if you go let me get out of here control you minimize it there's really no easy way to shut down you do it this and you you save the machine say it's going to like pause it you don't want to do that you power off the machine it's going to be like like pull in the plug you don't necessarily want to do that either right because then you're going to get a bunch of disc errors on the way uh back up so what you're going to want to do is we're going

to actually have to use a shutdown command uh and what we're going to do is we're going to do pseudo because you have to do pseudo to do this and we're just going to do shut down and we're going to do H and we're going to type now and that's going to let us shut this down which hopefully by the time it comes up it will get a new lease um and again you can hit Escape well every time I do that it just okay to show what it's doing so okay it's down now and

if we go back to Virtual box let's just double check that that network setting is sticking because I know we did this uh and then under Network Oh see it's not sticking that's very interesting here so let's go back here let's go back to Nat Network and let's hit okay let's see why do I keep going there let's go back here one more time Network okay so it is sticky now maybe it doesn't let you do it while it's online let's Che this one while we're here okay Callie were you all of them looked like

they were good except for this silly little one that we're looking at right at the moment but now you know how to shut it down which is actually what I wanted to show you so let's go ahead and start it up well that's starting up um we can go actually you probably don't need to see you're going to do well actually let me show you anyway because you're going to want to know how to log in here right so you go over here and it does tell you right in front like I said how to

get in msf admin msf admin and you're in and to shut this one down again you would do the same pseudo shut down H um now you could also do instead of H you could do R which would reboot it H is for halt um which means shut down so for this one I'm just going to leave it and I'm just actually going to log out and let's see this one looks like it's up let's verify it's up it's not up yet okay it is uh and so we're going to go back to C here

and then we'll do some testing and that will probably be it for part one of this video but let's get to the testing the fun part all right so let's go ahead and open up DX here uh and one thing you can actually and this we're going to need to do this so you can see what we're doing you can go uh click these three dots right here and go to preferences and this is where you can customize the terminal you're going to want to go to default and to make the font bigger which is

what we're going to do you have to check the little box right here and then you would just pick um whatever size you want I don't know what size would be good for you watching the video Let's do 20 um that looks pretty reasonable right uh and here you could go through and you could change um certain things like you've probably seen in some of my videos I put silly things up there like like And subscribe if you're enjoying this video please do that um you can change the color you can you can do anything

you want to the terminals here um so that's where you would do that if you wanted to change the desktop you could do that that right here uh they have different different versions of Kelly have different um wallpaper you can do that one or you can do kind of the standard or that crazy one right there I don't know what that's about we're going to go ahead and leave it you know I kind of like yeah I kind of like that so we'll just leave that not that it's going to matter because we're going to

be at a terminal anyway right um okay so for some testing what I thought made sense since uh I want to show you what these virtual boxes uh not virtual metas splitable boxes all the vulnerabilities they have that you can practice your skills against let's start with none other than my favorite tool end map right so what we're going to want to do is let's first verify that we have an IP that is on the U nated Network which we do you can see ours is right here and I did that with an IP a

uh so let's then go ahead and do a um a scan and we're going to do it but we're not going to um probe the port we're just going to go out there and look to see what's on our network uh so we're not going to do R we're going to do n map if I can spell and we're going to do just an S and lowercase we're going to hit enter and it's going to tell me that you need pseudo right hit that you're going to hit that new password you changed and what did

this say there oh it's saying you fool you forgot your network so you're going to need to put your network here and then you can just do a-24 and that will search the whole ENT entire network this should be pretty quick cuz it's just a host discovery which it did return really quick actually so and we know we were six right I think that's what we were yeah we're six so that means there's other machines out here I can tell you one's going to be the default gateway for virtual box itself that's not going to

be the one we want two I believe is part of the bridge I want to say three as well so I'm guessing since there's a skip right here because there's like a Virtual Router um and and devices are usually 1 two and three it actually it tells you right here um so we know it's not going to be these we know it's going to be one of these three and We Know by process of elimination that we are six so it's going to be seven and five so now what we can do and this green

is a little hard in the eye so you might want to change that um we can then do another end map scan and we'll just go we'll just go here this is not how you want to run a pentest but since you're in a lab you don't care if you're noisy right so we're going to do a Das a which is g to kind of give us everything uh and we're going to then do the range we want and this would be your range I'm going to do the lazy way and I'm going to say

I want to do five through 7 that way it doesn't take waste time I know we don't need to do six I could do five and what whatever we're doing it this way um but this is not going to skip one two or any other device and it's just going to focus on five six and seven so go to hit enter and let this run and this will take a little amount of time because it's going to scan these devices for everything which you'll see you in a minute all right and the scan finished here

so let's go ahead and go up and as you can see there is a lot of junk there right all right so let me show you what we get and this is going to be the best way for you to start in a lab again I have a whole nmat video on the proper way if you were doing an actual pen test of how you should go in and which scans are not going to like trip up IDs or IPS systems and things like that but for in your un Virtual Lab especially when you're learning

a is going to or SL a is going to be great because it gives you everything which I'll show you so as you can see right here it's telling you it's starting the scan and it's doing it on five so it's going to start off and it's going to tell you right here we scan Port 21 which is FTP and it's telling you it is open and it's telling you that it's allowing Anonymous login that's a no no um and you can just kind of go through there and this you can see this is our

machine actually connected to it so we were able to get in um during the map scam because that's what a does it does all that then you can see SSH is open right here telenet's open um this looks like SMTP and I'm not going to go through each one of these but you can kind of come down and see all of these are things you would want to try to Target you'd want to go into Metasploit and see if there's vulnerabilities for any of these and so on and so forth but you can go down

here and you can see all these are things you can now test your skills against these um ports vulnerability Services all that good stuff um and you can keep going through here and there's just a lot and that's just the one machine so you can keep going through here and in the future I plan to actually once we get these Labs up go through with you together and we'll we'll Target some of these and we'll go through how the vulnerabilities are exploited um but then you can see right now then we have Cali which is

our box and look how good it is we have nothing showing and then we're going to be on to the next um server and this looks like it's running umuntu so I'm thinking this is actually ex uh exploit this is actually metasploitable three I think the other one would have been two can't verify that 100% I need to look but uh I'm guessing based on the version of Linux or the drro I should say all right so this one also has FTP open uh it doesn't look like it has Anonymous access enabled but it has

SSH 4 80 nothing crazy there right 445 is going to be Samba or SMB if you're on Windows um and then there's cups and you can keep going through here I mean this obviously looks interesting why would this be open right um and you can just kind of again go through and see in all that stuff and that my friends is kind of where you are now with your Virtual Lab so that is where again You' want to take and you'd want to go and say okay what tools do I want to practice with and

you know you've already kind of done the information gathering right um so maybe you'd want to look at web applications and you'd want to open up berite you know or you'd want to try Jack the Ripper um or John the Ripper I should say um or you wanted to do Hydra um John the Ripper um all those things you you could now try because now you know what is open on these two devices and these are yours you don't need permission for these cuz these are yours um so at this point you have a virtual

lab with plenty of stuff to keep you busy for many many moons uh and again in the future in other videos I'm going to show you how to bring in a Windows box in here uh some different Linux boxes U maybe we'll go crazy and even bring in an old Unix box who knows um so with that I want to show you real quick as we shut down these machines again and just to give you an idea where we're at with memory now after we've been actually doing some things here uh we are using 5.1

so we still have three gigs of memory left so you technically could have done this with almost six right and still had a little bit left of overhead I would have suggest that but you could get away with it so I did deliver on my promise here uh and kept this under the 4 gigs so with that said I am going to go ahead and shut this down here and just show you real quick as we shut these down how it Returns the memory you don't need to do anything just shut them down you'll see

it will trickle off there it goes boom instantly drops back so if you're doing other things you know you're gaming you're looking at other things on the internet whatever and you're worried that I can't install this because it's going to take all my memory it only takes the memory while it's on so that is how you would do that and I hope with that you've enjoyed this video I have given you a lot of toys to go play with in those two machines please do you can't hurt anything take a snapshot of the the the

Cali box take a snapshot of all of them again you can take a snapshot of any of them you can go in here and just go to snapshots take a snapshot let's just do it for fun real quick take a snapshot here and then we'll go ahead and do it and once it's done once it's done you then would have a restore point so now you have this you could go in do what ever you wanted and if you blew it up you could always come back here but then you'd be able to restore it

anyways that said I hope you enjoyed it please like And subscribe for future videos you don't want to miss the next one in the series when we probably add on a Windows machine because you need to be able to Target Windows as well um so other than that have a great day take care of yourself bye