Setting Up Metasploitable 2 and Network Configuration

Metasploitable 2 is a deliberately vulnerable virtual machine, commonly used for testing security tools and practicing penetration testing in a controlled environment. This guide will take you through deploying Metasploitable 2 in VirtualBox and configuring its network settings. By the end, you’ll have a functional testing environment to safely simulate attacks and explore security techniques using tools like Metasploit.

Mahran Al-Zyoud
|
26 steps

Sourceforge

- **Virtualization Software:** Oracle VirtualBox 7.1.4 - **Host Operating System:** Windows 11 - **Guest Operating System:** Metasploitable 2 - **Last Updated:** October 2024 - **Created by**: Mahran Al-Zyoud. For any improvements, corrections, or suggestions, please feel free to contact me at [mahran.alzyoud@gmail.com](mailto:mahran.alzyoud@gmail.com). Your feedback is appreciated!

Navigate to <https://sourceforge.net/projects/metasploitable/files/Metasploitable2/>

Click "**Download Latest Version**"

Wait for the download to begin.

Navigate to the directory that contains the Metasploitable 2 compressed file and right click it.

Select "**Extract All**"

Click "**Extract**"

Wait until the file is fully extracted.

Open "**Oracle VirtualBox**"

Click "**New**"

Make the necessary modifications as described below, and then click "**Hard Disk**"

Click "**Use an Existing Virtual Hard Disk File**"

Click "**Choose a Virtual Hard Fisk File**"

Click "**Add**"

Navigate to the directory that contains the extracted files and select "**Metasploitable.vmdk**"

Click "**Choose**"

Click "**Finish**"

Make sure that Metasploitable 2 is selected , then click "**Settings**"

Make the necessary modifications as described below, and then click "**OK**"

Click "**Start**"

To make the virtual machine fill the whole window, go to "**View**" and then "**Scaled Mode**".

Click "**Switch**"

Click "**Maximize**"

The credentials required to login are clearly shown. Username: **[[msfadmin]]** Password: **[[msfadmin]]**

Run [[ip address]] to make sure that the machine has received an IP address from the **172.17.2.0/24** network (the **PentestNet** Internal Network).

Run [[sudo halt]] to shut down the machine.