Lab Setup

Lab Setup For IT Systems Hacking Attacks and Defence

Access

• The target systems will be located in EDF lab, not in the classroom. The machine you will use for the exercises is also located in the lab. As it is based on BackTrack, we will call it BackTrack. You just need remote access to this host.

• There are 2 methods to access the lab:

1. use kubuntu 10.10 VM where the VPN configuration files are already existent
2. install OpenVPN on your own laptop

Student VM

1. Download Student VM image from http://cs.tud.ttu.ee/itx8063/
2. Run the image. It has been prepared with VirtualBox
3. There is user named "user" on that VM. The password is also "user".
4. Start vpn connection: sudo openvpn /etc/openvpn/course-lab/course-lab.conf
   • There has been also defined an alias "vpn"
   • The password for the VPN key has been provided in the classroom and in e-mail sent to cybertallinn list.
5. Connect to you own BackTrack machine 192.168.133.x. See below which IP is meant for you.

Use OpenVPN configuration on your own machine

1. Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3
2. Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz

Accessing BackTrack VM

Some ways how you can access the BackTrack machine in the lab from where you have to do the actual work.

1. Command line access: ssh user@192.168.133.X
   • Default password is "user"

1. X11 session redirected over SSH
   • ssh -X -C user@ 192.168.133.X
   • No you can start programs with GUI e.g. firefox. Note that it could be relatively slow.

1. VNC for graphical user interface
   • Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
   • Obviously, geometry specifies the screen size, adjust it according to your monitor
   • When executing vncserver first time, password file is created /home/user/.vnc/passwd
   • On Student VM or you own computer use vncviewer to access the display: vncviewer 192.168.133.X:5901
   • To kill vnc

• All passwords and keys will be provided in the classroom

Student-VM correspondence

Urmas - student1.ex - 192.168.133.1
Hannes - student2.ex - 192.168.133.2
Siim - student3.ex - 192.168.133.3
Anis - student4.ex - 192.168.133.4
Joao - student5.ex - 192.168.133.5
Mario-Markus - student6.ex - 192.168.133.6
Andres - student7.ex - 192.168.133.7
Cüneyt - student8.ex - 192.168.133.8
Roshan - student9.ex - 192.168.133.9
Igor - student10.ex - 192.168.133.10
José - student11.ex - 192.168.133.11
Rasmus - student12.ex - 192.168.133.12
Borislav - student13.ex - 192.168.133.13
Kaspar - student14.ex - 192.168.133.14
Margus - student15.ex - 192.168.133.15
Lauri - student16.ex - 192.168.133.16
Arnis - student17.ex - 192.168.133.17
Aleksandr - student18.ex - 192.168.133.18
Martti - student19.ex - 192.168.133.19
Andrea - student20.ex - 192.168.133.20
Veiko - student21.ex - 192.168.133.21
Uko - student22.ex - 192.168.133.22
Roland - student23.ex - 192.168.133.23
Märt - student24.ex - 192.168.133.24

Course Management Application

• Mission and task descriptions as well as scoreboard will be displayed over the web https://cma.ex/
• Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
• First and Last Name will be used to track if you have participated in the lab - these have to be real.
• NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor.