<h1>Metasploitable 3 Ubuntu Walkthrough: Part IV</h1>

Exploiting Port 80 – Apache Server

Let’s start by getting as much information as possible about the remote website. Let’s try getting some additional information with Metasploit:

There is something interesting here; the /cgi-bin/ directory. Is there any exploit for this?

There is a Metasploit module to exploit his vulnerability:

Another failed attempt. This was supposed to work, but it didn’t…

Exploiting Port 80 – WebDAV

Let’s get more information about the target using Directory Buster:

The uploads directory appears to be promising. But is it writable? Let’s check it out. You can do WebDav Enumeration using Metasploit.

As you can see, the uploads directory is writable and a number of different file formats can be uploaded over there.

From here you need to create a payload, deploy it, set up a listener, execute the payload and you will have a shell…!

For detailed step-by-step instructions using multiple tools and options, please check my other Metasploitable 3 tutorial.