Kioptrix Level 2
Kioptrix Level 2 is a little more complicated than Level 1, as you might have guessed.
$ netdiscover -i eth1
4 Captured ARP Req/Rep packets, from 4 hosts. Total size: 240
_____________________________________________________________________________
IP At MAC Address Count Len MAC Vendor / Hostname
-----------------------------------------------------------------------------
10.0.2.1 0a:00:27:00:00:00 1 60 Unknown vendor
10.0.2.2 08:00:27:35:b3:5d 1 60 PCS Systemtechnik GmbH
10.0.2.3 0a:00:27:00:00:00 1 60 Unknown vendor
10.0.2.7 08:00:27:54:d2:b2 1 60 PCS Systemtechnik GmbH
Run nmap as usual, but on port 80 there is a login form that loaded into Firefox so it might be worth it to check on that first. Use Burpsuite and Firefox with the Foxyproxy extension set up for Burp.
With Foxyproxy ready and Intercept on in Burp, go to Firefox, type something like “admin” for the username and “test” for the password, hit Enter. In Burp we will see this:
...