ITX8063 2012 Labs

Access

• The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
• 
• Every student has a private BackTrack virtual machine which has to be used for accomplishing the tasks.
• The environment (Lab) used for the practical tasks is not running in TUT classroom but in another private network accessible over the VPN.
• There are 2 possible ways to access the BackTrack5 VM in Lab:
  • Classrooms IT-213A, IT-213B will be connected with Lab over site-to-site VPN.
  • Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.

Setup OpenVPN on your own machine to access the Lab

1. Download:
   • ITX8063_2012.tar.gz.bf.gz
2. Unzip the configuration (lambda.ee limits filetypes that could be uploaded so we had to zip after encryption...)
   • gunzip ITX8063_2012.tar.gz.bf.gz
3. Decrypt the configuration:
   • openssl enc -bf -d -in ITX8063_2012.tar.gz.bf -out ITX8063_2012.tar.gz
   • The password for the key has been provided in classroom and in ivcm11 e-mail list.
4. Install OpenVPN to your machine and run the configuration provided. E.g. when using ubuntu:
   • apt-get install openvpn
   • tar zxvf ITX8063_2012.tar.gz
   • cd ITX8063_2012
   • sudo openvpn itx8063.conf
   • The password for the key has been provided in classroom and in ITX8063 e-mail list.
5. In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24

BackTrack5 VM in Lab

• Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
• Each student is allowed to access only the machine with the IP specified below.
• Default username is root and password is toor. You would probably like to change it after first login...
• This VM shall be used only for completing the course exercises. All student machines and targets are running on same server - therefore be sure that you do not leave unnecessary processes running.

Agnes: 192.168.133.1

Aleksandr: 192.168.133.2

Alexander: 192.168.133.3

Andrejs: 192.168.133.4

Artjom: 192.168.133.5

Christopher: 192.168.133.6

Davit Ag: 192.168.133.7

Davit Az: 192.168.133.8

Emre: 192.168.133.9

Erki: 192.168.133.10

Faris: 192.168.133.11

Fred: 192.168.133.12

Giorgi: 192.168.133.13

Giorgi: 192.168.133.14

Irakli: 192.168.133.15

Kristjan: 192.168.133.16

Levan: 192.168.133.17

Liivi: 192.168.133.18

Mai: 192.168.133.19

Manuel: 192.168.133.20

Marek: 192.168.133.21

Mina: 192.168.133.22

Märten: 192.168.133.23

Natalja: 192.168.133.24

Oleg: 192.168.133.25

Onur: 192.168.133.26

Pavel: 192.168.133.27

Ragnar: 192.168.133.28

Recai: 192.168.133.29

Rivo: 192.168.133.30

Sanjay: 192.168.133.31

Sarbar: 192.168.133.32

Sergei: 192.168.133.33

Sharath: 192.168.133.34

Sten: 192.168.133.35

Taavi: 192.168.133.36

Tanel: 192.168.133.37

Tiit: 192.168.133.38

Tiiu-Liisa: 192.168.133.39

Urmo: 192.168.133.40

Zhuoli: 192.168.133.41

Kuuno: 192.168.133.43

Dmitri: 192.168.133.44

Accessing BackTrack VM

• After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC

1. Command line access: ssh root@192.168.133.X
   • Obviously, X denotes the number that has been allocated for specific student.
   • Default password is toor.
2. X11 session redirected over SSH
   • ssh -X -C root@192.168.133.X
   • Now you can start programs with GUI e.g. firefox &. Note that it could be relatively slow.
3. VNC for graphical user interface
   • Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
   • Obviously, the geometry specifies the screen size, adjust it according to your monitor
   • When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /root/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
   • If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
   • To access the display use vncviewer on your machine (not on the BackTrack): vncviewer 192.168.133.X:1. Number 1 expresses the display number.

Course Management Application

• Presentation slides and other materials are available here (http!): http://cma.ex/files (http://192.168.136.5)
• Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex (https://192.168.136.5)
• Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
• First and Last Name will be used to track if you have participated in the lab - these have to be real.
• NB! Hacking the production version of scoreboard is prohibited.
  • We will clone the VM for testing purposes to those who are interested in breaking the scoring system.
  • If you find any vulnerabilities, report them to the instructor and you'll get bonus.