Resources
Metasploitable 2 Cheat Sheet
The condensed version of this entire site: one screen, no scrolling through explanations. See the linked guides for the reasoning behind each item.
Default Credentials
| Account | Credentials |
|---|---|
| System login | msfadmin / msfadmin |
| MySQL root | root / (blank) |
| PostgreSQL | postgres / postgres |
| DVWA | admin / password |
Full list: default credentials.
Key Ports
| Port | Service |
|---|---|
| 21 | FTP (vsftpd 2.3.4, backdoored) |
| 22 | SSH |
| 23 | Telnet |
| 80 | HTTP (DVWA, Mutillidae) |
| 111 | RPCbind |
| 139, 445 | Samba / SMB |
| 3306 | MySQL |
| 5432 | PostgreSQL |
| 5900 | VNC |
Full breakdown: vulnerabilities overview.
Essential Commands
ping -c 4 <ip>
nmap -sV <ip>
nmap -p- <ip>
ifconfig
Full explanations: command reference.
Use only inside your own isolated Metasploitable 2 lab.