Lab Setup - Redigeerimiste ajalugu

Kasak: /* Lab Setup For IT Systems Hacking Attacks and Defence */

2010-11-14T11:13:17Z

Lab Setup For IT Systems Hacking Attacks and Defence

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 13:13
1. rida:		1. rida:
	= Lab Setup For IT Systems Hacking Attacks and Defence =		= Lab Setup For IT Systems Hacking Attacks and Defence =
			== General Tasks ==
			# Get access to the lab network and to the BackTrack machine (1 for every student)
			# Create yourself an account on https://cma.ex
			# Accomplish the missions and tasks described in https://cma.ex

	== Access ==		== Access ==

Kasak: /* Accessing BackTrack VM */

2010-11-14T00:59:55Z

Accessing BackTrack VM

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:59
70. rida:		70. rida:
	#* Log into BackTrack VM over SSH and start vncserver: '''vncserver -geometry 1280x800'''		#* Log into BackTrack VM over SSH and start vncserver: '''vncserver -geometry 1280x800'''
	#* Obviously, the geometry specifies the screen size, adjust it according to your monitor		#* Obviously, the geometry specifies the screen size, adjust it according to your monitor
	#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of ~~you~~ machine. Choose password that you ~~prefere~~. The password is ~~located in~~ /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.		#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
	#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1.		#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1.
	#* On Student VM or you own computer use vncviewer to access the display: '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number.		#* On Student VM or you own computer use vncviewer to access the display: '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number.

Kasak: /* Access */

2010-11-14T00:58:12Z

Access

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:58
5. rida:		5. rida:
	* The target systems will be located in EDF lab, not in the classroom. The machine you will use for the exercises is also located in the lab. As it is based on [http://www.backtrack-linux.org\| BackTrack], we will call it BackTrack. You just need remote access to this host.		* The target systems will be located in EDF lab, not in the classroom. The machine you will use for the exercises is also located in the lab. As it is based on [http://www.backtrack-linux.org\| BackTrack], we will call it BackTrack. You just need remote access to this host.

	* There are 2 methods to access the lab:		* There are 2 methods to access the BackTrack machine and further all the targets in the lab:
	# use kubuntu 10.10 VM where the VPN configuration files are already existent. We call this machine Student VM		# use kubuntu 10.10 VM where the VPN configuration files are already existent. We call this machine Student VM
	# install OpenVPN on your own laptop or home computer		# install OpenVPN on your own laptop or home computer

Kasak: /* Use OpenVPN configuration on your own machine */

2010-11-14T00:57:24Z

Use OpenVPN configuration on your own machine

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:57
22. rida:		22. rida:
	# Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3		# Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3
	# Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz		# Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz
			# Install openvpn to you machine and run the configuration provided
			# The password for the key is the same as in Student VM - it has been provided in classroom and in the cybertallinn list

	== BackTrack in Lab==		== BackTrack in Lab==

Kasak: /* Student VM */

2010-11-14T00:52:43Z

Student VM

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:52
14. rida:		14. rida:
	# Run the image. It has been prepared with VirtualBox		# Run the image. It has been prepared with VirtualBox
	# There is user named "user" on that VM. The password is also "user".		# There is user named "user" on that VM. The password is also "user".
	# Start vpn connection: sudo openvpn /etc/openvpn/course-lab/course-lab.conf		# Start vpn connection: '''sudo openvpn /etc/openvpn/course-lab/course-lab.conf'''
	#* There has been also defined an alias "vpn" for that command		#* There has been also defined an alias "vpn" for that command
	#* The password for the VPN key has been provided in the classroom and in e-mail sent to cybertallinn list.		#* The password for the VPN key has been provided in the classroom and in e-mail sent to cybertallinn list.

Kasak: /* Accessing BackTrack VM */

2010-11-14T00:52:20Z

Accessing BackTrack VM

Kasak: /* Course Management Application */

2010-11-14T00:51:34Z

Course Management Application

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:51
76. rida:		76. rida:

	* Mission and task descriptions as well as scoreboard will be displayed over the web https://cma.ex/		* Mission and task descriptions as well as scoreboard will be displayed over the web https://cma.ex/
			** This site is accessible only from the BackTrack machine
	* Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous		* Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
	* First and Last Name will be used to track if you have participated in the lab - these have to be real.		* First and Last Name will be used to track if you have participated in the lab - these have to be real.
	* NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor.		* NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor.

Kasak: /* Accessing BackTrack VM */

2010-11-14T00:50:16Z

Accessing BackTrack VM

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:50
68. rida:		68. rida:
	# VNC for graphical user interface		# VNC for graphical user interface
	#* Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800		#* Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
	#* Obviously, geometry specifies the screen size, adjust it according to your monitor		#* Obviously, the geometry specifies the screen size, adjust it according to your monitor
	#* When executing vncserver first time, you will be asked for password. This password just protects access to the display of you machine. Choose password that you prefere. The password is located in /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.		#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of you machine. Choose password that you prefere. The password is located in /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
	#* If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.		#* If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
	#* On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:1. Number 1 expresses the display number.		#* On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:1. Number 1 expresses the display number.

Kasak: /* Accessing BackTrack VM */

2010-11-14T00:49:28Z

Accessing BackTrack VM

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:49
64. rida:		64. rida:
	# X11 session redirected over SSH		# X11 session redirected over SSH
	#* ssh -X -C user@ 192.168.133.X		#* ssh -X -C user@ 192.168.133.X
	#* No you can start programs with GUI e.g. firefox. Note that it could be relatively slow.		#* Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.

	# VNC for graphical user interface		# VNC for graphical user interface
	#* Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800		#* Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
	#* Obviously, geometry specifies the screen size, adjust it according to your monitor		#* Obviously, geometry specifies the screen size, adjust it according to your monitor
	#* When executing vncserver first time, password ~~file~~ is ~~created~~ /home/user/.vnc/passwd		#* When executing vncserver first time, you will be asked for password. This password just protects access to the display of you machine. Choose password that you prefere. The password is located in /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
	#* On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:~~5901~~		#* If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
	~~#* To kill vnc~~		#* On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:1. Number 1 expresses the display number.


	== Course Management Application ==		== Course Management Application ==

Kasak: /* Student VM */

2010-11-14T00:42:19Z

Student VM

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:42
15. rida:		15. rida:
	# There is user named "user" on that VM. The password is also "user".		# There is user named "user" on that VM. The password is also "user".
	# Start vpn connection: sudo openvpn /etc/openvpn/course-lab/course-lab.conf		# Start vpn connection: sudo openvpn /etc/openvpn/course-lab/course-lab.conf
	#* There has been also defined an alias "vpn"		#* There has been also defined an alias "vpn" for that command
	#* The password for the VPN key has been provided in the classroom and in e-mail sent to cybertallinn list.		#* The password for the VPN key has been provided in the classroom and in e-mail sent to cybertallinn list.
	# Connect to you own BackTrack machine 192.168.133.x. See below which IP is meant for you.		# Connect to you own BackTrack machine 192.168.133.x. See below which IP is meant for you.

←Vanem redaktsioon		Redaktsioon: 14. november 2010, kell 02:52
59. rida:		59. rida:
	=== Accessing BackTrack VM ===		=== Accessing BackTrack VM ===
	Some ways how you can access the BackTrack machine in the lab from where you have to do the actual work.		Some ways how you can access the BackTrack machine in the lab from where you have to do the actual work.
	# Command line access: ssh user@192.168.133.X		# Command line access: '''ssh user@192.168.133.X'''
	#* Default password is "user"		#* Default password is "user"

	# X11 session redirected over SSH		# X11 session redirected over SSH
	#* ssh -X -C user@ 192.168.133.X		#* '''ssh -X -C user@ 192.168.133.X'''
	#* Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.		#* Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.

	# VNC for graphical user interface		# VNC for graphical user interface
	#* Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800		#* Log into BackTrack VM over SSH and start vncserver: '''vncserver -geometry 1280x800'''
	#* Obviously, the geometry specifies the screen size, adjust it according to your monitor		#* Obviously, the geometry specifies the screen size, adjust it according to your monitor
	#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of you machine. Choose password that you prefere. The password is located in /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.		#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of you machine. Choose password that you prefere. The password is located in /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
	#* If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.		#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1.
	#* On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:1. Number 1 expresses the display number.		#* On Student VM or you own computer use vncviewer to access the display: '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number.

	== Course Management Application ==		== Course Management Application ==