ITX8063:2011:Labs

Access

• The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
• 
• Every student has a private BackTrack5 virtual machine which has to be used for accomplishing the tasks.
• There are 2 possible ways to access the BackTrack5 VM in Lab:
  • Classroom is connected with Lab over site-to-site VPN.
  • Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.

Setup OpenVPN on your own machine to access the Lab

1. Download: http://cs.tud.ttu.ee/itx8063/course-lab-2011.tar.gz.bf
2. Decrypt the configuration:
   • openssl enc -bf -d -in course-lab-2011.tar.gz.bf -out course-lab-2011.tar.gz
   • The password for the key has been provided in classroom and in ivcm11 e-mail list.
3. Install OpenVPN to your machine and run the configuration provided. E.g. when using ubuntu:
   • apt-get install openvpn
   • tar zxvf course-lab-2011.tar.gz
   • cd course-lab-2011/
   • sudo openvpn course-lab-2011.conf
   • The password for the key has been provided in classroom and in ivcm11 e-mail list.
4. In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24

BackTrack5 VM in Lab

• Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
• Each student is allowed to access only the machine with the IP specified below.
• Default username is root and password is toor. You would probably like to change it after first login...

1. Maksim: 192.168.133.1

2. Mikheil: 192.168.133.2

3. Dmitri: 192.168.133.3

4. Stanislav: 192.168.133.4

5. Heliand: 192.168.133.5

6. Karl: 192.168.133.6

7. Tiit: 192.168.133.7

8. Margus: 192.168.133.8

9. Franck: 192.168.133.9

10. Zülfikar: 192.168.133.10

11. Sebstian: 192.168.133.11

12. Piret: 192.168.133.12

13. Kaarel: 192.168.133.13

14. Alexandre: 192.168.133.14

15. Martin: 192.168.133.15

16. Aleksandra: 192.168.133.16

17. Elar: 192.168.133.17

18. Aleksandr: 192.168.133.18

19. Maike: 192.168.133.19

20. Rossella: 192.168.133.20

21. Sandra: 192.168.133.21

22. Robert: 192.168.133.22

23. Dyan: 192.168.133.23

24. Mauno: 192.168.133.24

25. Kuuno: 192.168.133.25

26. Ronny: 192.168.133.26

27. Truls: 192.168.133.27

28. Anis: 192.168.133.28

29. Roman: 192.168.133.29

30. Predrag: 192.168.133.30

31. Tamara: 192.168.133.31

32. Rait: 192.168.133.32

33. Eerik: 192.168.133.33

34. Allan: 192.168.133.34

Accessing BackTrack VM

• After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC

1. Command line access: ssh root@192.168.133.X
   • Obviously, X denotes the number that has been allocated for specific student.
   • Default password is toor.
2. X11 session redirected over SSH
   • ssh -X -C root@192.168.133.X
   • Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.
3. VNC for graphical user interface
   • Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
   • Obviously, the geometry specifies the screen size, adjust it according to your monitor
   • When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
   • If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
   • To access the display use vncviewer on your machine (not on the BackTrack): vncviewer 192.168.133.X:1. Number 1 expresses the display number.

Course Management Application

• Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex/ (https://192.168.136.5)
• Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
• First and Last Name will be used to track if you have participated in the lab - these have to be real.
• NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor and you'll get bonus.