Go ahead and open up your terminal and start PostgreSQL.
Well.
And because you need database operations, start MSF, DB and MSF console.
And then before starting the exploitation, let's list the host again.
And I'm going to start with the Linux machine.
So let's list the services.
Although this is kind of artificial because it's in a course, I'm not going to give you an exploit
name and say exploit this, I don't want to do something like that.
I want you to search and create relations between what the results are.
And that's how you're going to sort of get a taste of real penetration testing.
So you can try to exploit all the services on metastable to.
Because there are lots of services with vulnerabilities.
So I'm going to do two of them.
And then let's have a look at the services on metter, spoiled two again.
And here is the Ruby Derby RMI service.
And you can see his version number also.
So I'm going to copy this and.
I have a search to find an exploit or look at the result of a Nessa's scan.
Also going to type XPoint.
Now, when you search, of course, you'll immediately see Rapid Seven's website, and that has the
XPoint module name.
But below, there are some topics about the vulnerability.
So let's go back to MSF console and search.
Be.
So here are the module names.
All right, so I'm going to use Darbee remote code execution.
So the options.
Set the R host value.
Set payload to command Eunuch's Reavers.
And the reverse connection requires L host and L port.
Set down host to 10 that tend to one one and set Allport.
To 878.
So only the options again.
Then XPoint.
So MSF warns us that a session is open.
Now, you can type the Linux commands here, type ID and who am I see who you are.
And if config to see a network configuration.