Linux安装Metasploit与简单介绍

1 CentOS安装metasploit

切换到root命令
依次执行以下两句

1. [root@localhost ~]# cd /opt
2. [root@localhost opt]# curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall

复制代码

执行命令的结果

1. [root@localhost ~]# cd /opt
2. [root@localhost opt]# curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/me tasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall
3. % Total % Received % Xferd Average Speed Time Time Time Current
4. Dload Upload Total Spent Left Speed
5. 100 6034 100 6034 0 0 1428 0 0:00:04 0:00:04 --:--:-- 1429
6. Checking for and installing update..
7. Adding metasploit-framework to your repository list..Loaded plugins: fastestmirror, langpacks
8. base | 3.6 kB 00:00:00
9. extras | 2.9 kB 00:00:00
10. metasploit | 3.0 kB 00:00:00
11. updates | 2.9 kB 00:00:00
12. (1/2): metasploit/primary_db | 12 kB 00:00:01
13. (2/2): updates/7/x86_64/primary_db | 16 MB 00:00:03
14. Loading mirror speeds from cached hostfile
15. * base: mirrors.aliyun.com
16. * extras: mirrors.aliyun.com
17. * updates: mirrors.aliyun.com
18. Resolving Dependencies
19. --> Running transaction check
20. ---> Package metasploit-framework.x86_64 0:6.2.9+20220728102816~1rapid7-1.el6 will be installed
21. --> Finished Dependency Resolution
23. Dependencies Resolved
25. =================================================================================================================
26. Package Arch Version Repository Size
27. =================================================================================================================
28. Installing:
29. metasploit-framework x86_64 6.2.9+20220728102816~1rapid7-1.el6 metasploit 269 M
31. Transaction Summary
32. =================================================================================================================
33. Install 1 Package
35. Total download size: 269 M
36. Installed size: 635 M
37. Downloading packages:
38. warning: /var/cache/yum/x86_64/7/metasploit/packages/metasploit-framework-6.2.9+20220728102816~1rapid7-1.el6.x86_ 64.rpm: Header V4 RSA/SHA256 Signature, key ID 2007b954: NOKEY
39. Public key for metasploit-framework-6.2.9+20220728102816~1rapid7-1.el6.x86_64.rpm is not installed
40. metasploit-framework-6.2.9+20220728102816~1rapid7-1.el6.x86_64.rpm | 269 MB 00:00:19
41. Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Metasploit
42. Importing GPG key 0x2007B954:
43. Userid : "Metasploit <metasploit@rapid7.com>"
44. Fingerprint: 09e5 5faf 4f78 62cd 6d55 8997 cdfb 5fa5 2007 b954
45. From : /etc/pki/rpm-gpg/RPM-GPG-KEY-Metasploit
46. Running transaction check
47. Running transaction test
48. Transaction test succeeded
49. Running transaction
50. Installing : metasploit-framework-6.2.9+20220728102816~1rapid7-1.el6.x86_64 1/1
51. Run msfconsole to get started
52. Verifying : metasploit-framework-6.2.9+20220728102816~1rapid7-1.el6.x86_64 1/1
54. Installed:
55. metasploit-framework.x86_64 0:6.2.9+20220728102816~1rapid7-1.el6
57. Complete!

复制代码

安装完成
用ls命令查看目录结构

1. [root@localhost opt]# ls
2. metasploit-framework msfinstall rh
3. [root@localhost opt]# ls ./metasploit-framework
4. bin embedded LICENSE LICENSES version-manifest.json version-manifest.txt
5. [root@localhost opt]# ls metasploit-framework
6. bin embedded LICENSE LICENSES version-manifest.json version-manifest.txt

复制代码

启动控制台

1. [root@localhost opt]# msfconsole
4. ______________________________________________________________________________
5. | |
6. | METASPLOIT CYBER MISSILE COMMAND V5 |
7. |______________________________________________________________________________|
8. \ / /
9. \ . / / x
10. \ / /
11. \ / + /
12. \ + / /
13. * / /
14. / . /
15. X / / X
16. / ###
17. / # % #
18. / ###
19. . /
20. . / . * .
21. /
22. *
23. + *
25. ^
26. #### __ __ __ ####### __ __ __ ####
27. #### / \ / \ / \ ########### / \ / \ / \ ####
28. ################################################################################
29. ################################################################################
30. # WAVE 5 ######## SCORE 31337 ################################## HIGH FFFFFFFF #
31. ################################################################################
32. https://metasploit.com
35. =[ metasploit v6.2.9-dev- ]
36. + -- --=[ 2230 exploits - 1177 auxiliary - 398 post ]
37. + -- --=[ 864 payloads - 45 encoders - 11 nops ]
38. + -- --=[ 9 evasion ]
40. Metasploit tip: View a module's description using
41. info, or the enhanced version in your browser with
42. info -d
44. msf6 > Interrupt: use the 'exit' command to quit
45. msf6 >

复制代码

启动成功！ metasploit v6.2.9-dev-

2 扩展——虚拟机安装Kali操作系统

Kali操作系统内置metasploit

2.1 Kali OS安装

下载64bit稳定版iso（https://www.kali.org/get-kali/#kali-bare-metal）

文件比较大，下载太慢，在阿里云镜像开源（https://mirrors.aliyun.com/kali-images/current/）中下载

下载之后，利用vm虚拟机安装iso文件即可（https://blog.csdn.net/Python_caoboqiao/article/details/124284383）。

这里还有虚拟机资源kali-virtual

安装完成，启动msfconsole

2.2 kali更新msf

2.3Kali安装MSF图形化界面Viper

首先需要安装docker

1. apt-get update
2. # 使用apt安装docker
3. apt-get install -y docker.io
4. # 设置开机自启动
5. systemctl start docker
6. # 检测docker状态
7. docker version

复制代码

安装docker-compose

1. # 拉脚本
2. curl -L https://get.daocloud.io/docker/compose/releases/download/1.25.5/docker-compose-`uname -s`-`uname -m` > /usr/bin/docker-compose
3. #赋可执行权限
4. chmod +x /usr/bin/docker-compose

复制代码

安装启动Viper

1. # 设置Viper安装目录
2. export VIPER_DIR=/root/VIPER
3. # 生成安装目录 并进入目录
4. mkdir -p $VIPER_DIR && cd $VIPER_DIR
5. # 执行如下命令生成docker-compose.yml
6. tee docker-compose.yml <<-'EOF'
7. version: "3"
8. services:
9. viper:
10. image: registry.cn-shenzhen.aliyuncs.com/toys/viper:latest
11. container_name: viper-c
12. network_mode: "host"
13. restart: always
14. volumes:
15. - ${PWD}/loot:/root/.msf4/loot
16. - ${PWD}/db:/root/viper/Docker/db
17. - ${PWD}/module:/root/viper/Docker/module
18. - ${PWD}/log:/root/viper/Docker/log
19. - ${PWD}/nginxconfig:/root/viper/Docker/nginxconfig
20. command: ["VIPER_PASSWORD"]
21. EOF

复制代码

设置登录密码
Viper不允许使用默认密码,diypassword替换为自定义密码密码且大于8位

1. export VIPER_PASSWORD=123456

复制代码

写入密码到docker-compose.yml

1. sed -i "s/VIPER_PASSWORD/$VIPER_PASSWORD/g" docker-compose.yml

复制代码

使用命令查看配置(目录如下：/root/VIPER/docker-compose.yml)

1. cat docker-compose.yml

复制代码

启动Viper

1. # 进入viper的目录($VIPER_DIR=/root/VIPER)，第一次访问比较慢，需要下载一个G的文件
2. cd $VIPER_DIR
3. docker-compose up -d
4. # 启动viper
5. docker-compose start

复制代码

所有的docker-compose命令必须在安装目录执行才会有效果
等待15s系统启动,访问 https://你的ip地址:60000 登录. 用户名:root 密码:刚才写入的密码
使用：ip a 命令查询自己的ip

输入用户名密码，登录
进入如下界面（右侧切换中文）

至此，安装成功！

参考

Linux centos 安装metasploit(就两步)：https://blog.csdn.net/FY10033/article/details/118439981
详细安装 kali 教程：https://blog.csdn.net/Python_caoboqiao/article/details/124284383
Metasploit图形界面Viper安装:https://blog.csdn.net/qq_45455136/article/details/123913044
MSF图形化界面Viper(炫彩蛇)下载与使用：https://blog.csdn.net/weixin_42489549/article/details/117514558?spm=1001.2101.3001.6650.2&utm_medium=distribute.pc_relevant.none-task-blog-2%7Edefault%7ECTRLIST%7Edefault-2-117514558-blog-123913044.pc_relevant_aa_2&depth_1-utm_source=distribute.pc_relevant.none-task-blog-2%7Edefault%7ECTRLIST%7Edefault-2-117514558-blog-123913044.pc_relevant_aa_2&utm_relevant_index=5