ProxMox - How to Create a Metasploitable 2 VM On ProxMox Servers

These instructions will guide you through setting up a Metasploitable 2 virtual machine on ProxMox server.

Issues Resolved by this Article

• Unable to create a Metasploitable 2 virtual machine in Proxmox

• Confusion about importing a VMDK disk instead of using an ISO

• VM does not boot after creation

• Network or IP address issues after first boot

Background

Metasploitable 2 is an intentionally vulnerable Linux virtual machine used for cybersecurity training and penetration testing. In Proxmox, Metasploitable 2 is deployed by importing an existing VMDK disk image rather than installing from an ISO.

Because this process is different from a standard VM installation, users may encounter issues related to disk import, boot order, or network configuration. Following these steps in order ensures a successful deployment.

Prerequisites

• A running Proxmox VE server

• Sufficient disk space to store the VM image

• Network connectivity on the Proxmox server

Downloads

• Metasploitable 2 image
  Website: https://vulnhub.com/entry/metasploitable-2,29/
  Direct download: https://download.vulnhub.com/metasploitable/metasploitable-linux-2.0.zip

Solution

Step 1: Download and Extract the Metasploitable 2 Image

1. Open a shell on your Proxmox server (via the web console or SSH).

     2. Download the Metasploitable 2 ZIP archive:

wget https://download.vulnhub.com/metasploitable/metasploitable-linux-2.0.0.zip 

3. Install the unzip utility (if it's not already installed): 

apt-get -y install unzip 

4. Extract the VMDK image from the archive: 

unzip metasploitable-linux-2.0.0.zip 

       5. Move the VMDK file to a convenient location:

mv Metasploitable2-Linux/Metasploitable.vmdk . 

6. Remove the ZIP archive and the now-empty directory: 

rm -rf metasploitable-linux-2.0.0.zip 

 

Step 2: Create a New Virtual Machine in Proxmox

1. Open the Proxmox web interface.

2. Click Create VM in the top-right corner.

3. General:

• Enter a VM name (example: Metasploitable2).

• Click Next.

4. OS:

• Select Do not use any media.

• Click Next.

5. System:

• Keep default settings.

• Click Next.

6. Disks:

• Select the default scsi0 disk and click Delete.

• Click Next.

7. CPU:

• Set Type to host.

• Configure CPU settings as needed.

• Click Next.

8. Memory:

• Set memory to 4096 MB.

• Click Next.

9. Network:

• Keep default settings.

• Click Next.

10. Confirm:

• Review settings.

• Click Finish.

• Do NOT start the VM yet.

 

Step 3: Import the VMDK Disk Image

1. Open a shell on the Proxmox server (if closed).

2. Import the disk using the following command:
   qm importdisk <VMID> Metasploitable.vmdk <storage_name> --format raw

Example:
           qm importdisk 100 Metasploitable.vmdk local-lvm --format raw

 

Step 4: Configure the VM and Start 

1. Go back to the ProxMox web interface. 

2. Select the VM you created (e.g., Metasploitable2). 

3. Hardware: 

• You should now see an "Unused Disk" entry. Double-click on it. 

• Select "SATA" for the "Bus/Device" option. 

• Click "Add". 

 

Step 4: Configure Hardware and Boot Order

        1. Select the VM in Proxmox.

        2. Go to Hardware.

        3. Locate the Unused Disk, double-click it.

4. Set Bus/Device to SATA and click Add.

Go to Options → Boot Order.

• Ensure the SATA disk is enabled and has highest priority.

• Click OK.

 

Step 5: Start the Virtual Machine

1. Click Start on the VM.

2. Open Console to view the boot process.

[Image: Metasploitable 2 booting in console]

Default credentials:

• Username: msfadmin

• Password: msfadmin

 

Step 6: (Optional) Set a Static IP Address

1. Check the current IP address:
   ip a

2. Edit the network configuration file:
   nano /etc/network/interfaces

3. Example static IP configuration:

   auto eth0

   iface eth0 inet static

   address 192.168.232.13 netmask 255.255.248.0

   gateway 192.168.232.5

   dns-nameservers 192.168.232.5

4. Save and restart networking:
   service networking restart

5. Verify the IP address:
   ip a

 

Troubleshooting

• VM does not boot: Ensure no ISO is attached, the disk was imported correctly, and SATA is first in boot order.

• No network access: Confirm Proxmox provides DHCP or configure a static IP.

• No console output: Restart the VM and check Proxmox logs.

Conclusion

By importing the Metasploitable 2 disk image and carefully configuring storage and boot order, you can deploy a fully functional vulnerable testing VM in Proxmox. This setup is ideal for hands-on security labs and penetration testing practice.