So now that we have all the machines installed, I just want to show you a final configurations of the
lab and I want to show you how the lab is going to look like and how we're going to use the computers
in the future videos.
Now, like I said before, we're going to be using the machine to launch our attack.
So this is going to be our attacker machine and we're going to use the Metasploit table as our victim
or as our target.
Now the Metasploit table comes in with a number of websites, so it's a computer, but it has a number
of websites installed on it.
And this is usually the way Web servers work.
Usually you'd have more than one website installed on the same web server and this is very useful to
us.
We'll talk about that later.
We'll see why it's very useful for now.
Let's see how we can access the websites on Metasploit table.
So I'm just going to log in.
Like I said, the username is MSF admin and the password is MSF admin and to see the IP address of this
computer, all you have to do is just type in if config.
And the IP address here is ten 2014 to 14.
So if I go to the Carli machine here and if I open my browser.
And if I navigate to ten 2014 to 14.
You can see that I can access my Metasploit table machine and it says Metasploit table two.
So this is the web server installed on the Metasploit table machine.
Now, throughout the course, this IP might be changing, so I might be going to a different IP because
sometimes the IP of the NAT network changes every time you run it for you.
If you access that IP and nothing works for you, all you have to do is just go back to the Metasploit
table machine, run if config and see what IP you get.
Then if you navigate to it here, you'll see that you can access the web server.
Now as you can see, there is a number of websites installed in Metasploit tables.
So if we click on Mitel today, you'll have a website.
If we go back, if you click on TBWA, you have another website and we'll talk about these websites
and we'll talk about how to hack them in future videos.
One more thing that I want to point is the configuration of one of the websites is misconfigured with
Metasploit.
So I'm just going to show you how to fix it now so that in the future you won't have any errors.
Once we start running the attacks.
The website that's misconfigured is Matilda, so we're just going to modify its configuration using
Nano, which is a text editor.
So we're going to type in Nano and then we're going to type in the path for the config file which is
stored in var w w w matilda config.
Dot Inc.
So Nano is the program that we're going to use to modify the configuration and var w w matilda config
done.
It inc is where the config file is stored and to run this as admin as root, you have to type in pseudo
in front of it.
So I'm going to do sudo.
I'm going to put the password which is MSFT admin.
And now what you need to modify is the last line.
So if we you can navigate down using the arrows in the keyboard and you can see that the DB name is
set to Metasploit here.
You want to modify that, you want to remove that and type in OWASP ten.
So all W.A.S.P. ten.
Now this is all done.
It's perfect.
Now all you have to do is just press control X to exit.
For us.
Why?
To save it.
And hit enter.
And that's it.
Now it's saved and we're ready to start penetration testing and learn how to hack into websites.