ITX8063 2012 Labs: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
Resümee puudub |
Resümee puudub |
||
| 24. rida: | 24. rida: | ||
#* The password for the key has been provided in classroom and in ITX8063 e-mail list. | #* The password for the key has been provided in classroom and in ITX8063 e-mail list. | ||
# In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24 | # In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24 | ||
== BackTrack5 VM in Lab == | == BackTrack5 VM in Lab == | ||
| 85. rida: | 74. rida: | ||
Urmo: 192.168.133.40 | Urmo: 192.168.133.40 | ||
Zhuoli: 192.168.133.41 | Zhuoli: 192.168.133.41 | ||
</pre> | |||
== Accessing BackTrack VM == | |||
* After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC | |||
# Command line access: '''ssh root@192.168.133.X''' | |||
#* Obviously, X denotes the number that has been allocated for specific student. | |||
#* Default password is '''toor'''. | |||
# X11 session redirected over SSH | |||
#* '''ssh -X -C root@192.168.133.X''' | |||
#* Now you can start programs with GUI e.g. firefox &. Note that it could be relatively slow. | |||
# VNC for graphical user interface | |||
#* Log into BackTrack VM over SSH and start vncserver: '''vncserver -geometry 1280x800''' | |||
#* Obviously, the geometry specifies the screen size, adjust it according to your monitor | |||
#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /root/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again. | |||
#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1. | |||
#* To access the display use vncviewer on your machine ('''not''' on the BackTrack): '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number. | |||
== Course Management Application == | |||
== | * Presentation slides and other materials are available here ('''http!'''): http://cma.ex/files (http://192.168.136.5) | ||
* | * Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex (https://192.168.136.5) | ||
* Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous | |||
* First and Last Name will be used to track if you have participated in the lab - these have to be real. | |||
* NB! Hacking the production version of scoreboard is prohibited. | |||
** We will clone the VM for testing purposes to those who are interested in breaking the scoring system. | |||
** If you find any vulnerabilities, report them to the instructor and you'll get bonus. | |||
Redaktsioon: 13. november 2012, kell 01:32
Access
- The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
- Every student has a private BackTrack virtual machine which has to be used for accomplishing the tasks.
- The environment (Lab) used for the practical tasks is not running in TUT classroom but in another private network accessible over the VPN.
- There are 2 possible ways to access the BackTrack5 VM in Lab:
- Classrooms IT-213A, IT-213B will be connected with Lab over site-to-site VPN.
- Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.
Setup OpenVPN on your own machine to access the Lab
- Download:
- Unzip the configuration (lambda.ee limits filetypes that could be uploaded so we had to zip after encryption...)
- gunzip ITX8063_2012.tar.gz.bf.gz
- Decrypt the configuration:
- openssl enc -bf -d -in ITX8063_2012.tar.gz.bf -out ITX8063_2012.tar.gz
- The password for the key has been provided in classroom and in ivcm11 e-mail list.
- Install OpenVPN to your machine and run the configuration provided. E.g. when using ubuntu:
- apt-get install openvpn
- tar zxvf ITX8063_2012.tar.gz
- cd ITX8063_2012
- sudo openvpn itx8063.conf
- The password for the key has been provided in classroom and in ITX8063 e-mail list.
- In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24
BackTrack5 VM in Lab
- Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
- Each student is allowed to access only the machine with the IP specified below.
- Default username is root and password is toor. You would probably like to change it after first login...
- This VM shall be used only for completing the course exercises. All student machines and targets are running on same server - therefore be sure that you do not leave unnecessary processes running.
Agnes: 192.168.133.1 Aleksandr: 192.168.133.2 Alexander: 192.168.133.3 Andrejs: 192.168.133.4 Artjom: 192.168.133.5 Christopher: 192.168.133.6 Davit A'''g''': 192.168.133.7 Davit A'''z''': 192.168.133.8 Emre: 192.168.133.9 Erki: 192.168.133.10 Faris: 192.168.133.11 Fred: 192.168.133.12 Giorgi: 192.168.133.13 Giorgi: 192.168.133.14 Irakli: 192.168.133.15 Kristjan: 192.168.133.16 Levan: 192.168.133.17 Liivi: 192.168.133.18 Mai: 192.168.133.19 Manuel: 192.168.133.20 Marek: 192.168.133.21 Mina: 192.168.133.22 Märten: 192.168.133.23 Natalja: 192.168.133.24 Oleg: 192.168.133.25 Onur: 192.168.133.26 Pavel: 192.168.133.27 Ragnar: 192.168.133.28 Recai: 192.168.133.29 Rivo: 192.168.133.30 Sanjay: 192.168.133.31 Sarbar: 192.168.133.32 Sergei: 192.168.133.33 Sharath: 192.168.133.34 Sten: 192.168.133.35 Taavi: 192.168.133.36 Tanel: 192.168.133.37 Tiit: 192.168.133.38 Tiiu-Liisa: 192.168.133.39 Urmo: 192.168.133.40 Zhuoli: 192.168.133.41
Accessing BackTrack VM
- After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC
- Command line access: ssh root@192.168.133.X
- Obviously, X denotes the number that has been allocated for specific student.
- Default password is toor.
- X11 session redirected over SSH
- ssh -X -C root@192.168.133.X
- Now you can start programs with GUI e.g. firefox &. Note that it could be relatively slow.
- VNC for graphical user interface
- Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
- Obviously, the geometry specifies the screen size, adjust it according to your monitor
- When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /root/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
- If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
- To access the display use vncviewer on your machine (not on the BackTrack): vncviewer 192.168.133.X:1. Number 1 expresses the display number.
Course Management Application
- Presentation slides and other materials are available here (http!): http://cma.ex/files (http://192.168.136.5)
- Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex (https://192.168.136.5)
- Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
- First and Last Name will be used to track if you have participated in the lab - these have to be real.
- NB! Hacking the production version of scoreboard is prohibited.
- We will clone the VM for testing purposes to those who are interested in breaking the scoring system.
- If you find any vulnerabilities, report them to the instructor and you'll get bonus.