Exploit for vulnerability-assessment-metasploitable2 CVE-2011-2523

## https://sploitus.com/exploit?id=01330BA9-9AFB-5AA8-A3E2-3AB2FE216993
# Vulnerability Assessment — Metasploitable 2

A end-to-end vulnerability assessment conducted against a controlled lab environment, documented in consulting-style deliverables. This project demonstrates a structured four-phase VA methodology including automated scanning, manual verification, controlled exploitation, and professional reporting.

---

## Project Overview

| Parameter | Detail |
|---|---|
| **Target** | Metasploitable 2 (192.168.121.130) |
| **Assessor Host** | Kali Linux (192.168.121.129) |
| **Environment** | Isolated VirtualBox lab — no production systems involved |
| **Assessment Type** | Vulnerability Assessment + Controlled Proof-of-Concept Exploitation |
| **Fictional Client** | TechCorp Solutions Ltd. |
| **Date** | June 2026 |

---

## Tools Used

| Tool | Purpose |
|---|---|
| Nessus Essentials | Automated vulnerability scanning |
| Nmap 7.98 | Port scanning, service enumeration, vuln scripts |
| Metasploit Framework | Controlled proof-of-concept exploitation |
| Firefox | Manual web application testing |

---

## Key Results

**72 vulnerabilities identified. 4 confirmed exploitable.**

| Severity | Count |
|---|---|
| Critical | 10 |
| High | 7 |
| Medium | 26 |
| Low | 9 |
| Informational | 140 |

### Confirmed Exploits

| CVE | Service | Tool | Result |
|---|---|---|---|
| CVE-2011-2523 | vsftpd 2.3.4 (FTP) | Metasploit | Root shell |
| CVE-2010-2075 | UnrealIRCd (IRC) | Metasploit | Root shell |
| N/A | VNC default credential | Metasploit | Login successful |
| N/A | Mutillidae SQL injection | Manual | Error-based injection + info disclosure |

---

## Repository Structure

```
vulnerability-assessment-metasploitable2/
│
├── report/
│   ├── executive-summary.md          # One-page business summary
│   ├── methodology.md                # Assessment approach and phases
│   ├── findings-register.md          # All 43 actionable findings with CVSS scores
│   ├── remediation-roadmap.md        # Prioritized remediation across 3 phases
│   └── rules-of-engagement.md        # Authorized scope and testing boundaries
│
├── scans/
│   └── nmap-vuln-scan.txt            # Full nmap NSE vulnerability script output
│
├── screenshots/
│   ├── 01-ping-confirmation.png
│   ├── 02-nessus-dashboard.png
│   ├── 03-scan-running.png
│   ├── 04-nmap-service-scan.png
│   ├── 05-nmap-vuln-scripts.png
│   ├── 06a-nessus-summary.png
│   ├── 06b-nessus-summary.png
│   ├── 06c-nessus-summary.png
│   ├── 06d-nessus-summary.png
│   ├── 07-msfconsole-launch.png
│   ├── 08-vsftpd-exploit.png
│   ├── 09-unrealircd-exploit.png
│   ├── 10-sqli-mutillidae.png
│   └── 11-vnc-default-credential.png
│
└── README.md
```

---

## Assessment Phases

**Phase 1 — Scoping and Authorization**
Defined scope, established Rules of Engagement, confirmed network connectivity.

**Phase 2 — Vulnerability Scanning**
Nmap service enumeration (23 open ports identified) followed by Nessus Basic Network Scan (72 findings returned in 17 minutes).

**Phase 3 — Manual Verification**
Nmap NSE vulnerability scripts used to independently confirm top findings and eliminate false positives before escalating to exploitation.

**Phase 4 — Controlled Exploitation**
Four pre-authorized targets exploited using Metasploit to confirm real-world exploitability. Exploitation limited to initial access confirmation — no post-exploitation, persistence, or lateral movement conducted.

---

## Learner Context

This project was conducted in a controlled lab environment using Metasploitable 2, an intentionally vulnerable virtual machine designed for security training. The target is not representative of a modern production environment — Ubuntu 8.04 reached end of life in 2013 and contains over a decade of unpatched vulnerabilities by design.

The value of this project is not the findings themselves but the methodology applied: structured scoping, multi-tool verification, controlled exploitation with documented evidence, and consulting-style reporting in business language.

All exploitation was conducted in an isolated VirtualBox network. No real systems were affected.

---

## Related Portfolio Projects

This project is part of a broader GRC and AI security portfolio:

- [AI GRC Risk Register](https://github.com/Dhanya93)
- [ISO 27001:2022 Gap Analysis](https://github.com/Dhanya93)
- [AI Vendor Risk Assessment](https://github.com/Dhanya93)
- [EU AI Act Compliance Gap Analysis](https://github.com/Dhanya93)
- [AI Governance Framework](https://github.com/Dhanya93)
- [AI Inventory Register](https://github.com/Dhanya93)

---

## Contact

**Dhanya M. Sam**
AI Analyst
- Email: dhanya.dms2025@gmail.com
- LinkedIn: [linkedin.com/in/dhanya-m-sam](https://linkedin.com/in/dhanya-m-sam)
- GitHub: [github.com/Dhanya93](https://github.com/Dhanya93)
- TryHackMe: Top 4% globally

*Certifications: CompTIA Security+, CEH v13, SC-200*