ITX8063:2011:Labs: erinevus redaktsioonide vahel

Allikas: Lambda
Mine navigeerimisribale Mine otsikasti
← Vanem muudatusUuem muudatus →
Kasak (arutelu | kaastöö)
636 muudatust
Resümee puudub
Kasak (arutelu | kaastöö)
636 muudatust
3. rida: 3. rida:
= Access =
= Access =
* The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
* The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
* Every student has access to [http://www.backtrack-linux.org| BackTrack5] virtual machine which has to be used for accomplishing the tasks.
* Every student has a private [http://www.backtrack-linux.org| BackTrack5] virtual machine which has to be used for accomplishing the tasks.
* There are 2 possible ways to access the BackTrack5 VM in lab.
* There are 2 possible ways to access the BackTrack5 VM in Lab.
** Classroom is connected with Lab over site-to-site VPN.
** Classroom is connected with Lab over site-to-site VPN.
** Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.
** Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.


== Use OpenVPN configuration on your own machine ==
== Setup OpenVPN on your own machine to access the Lab ==
# Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3
# Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3
# Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz
# Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz
# Install openvpn to you machine and run the configuration provided
# Install openvpn to you machine and run the configuration provided
# The password for the key is the same as in Student VM - it has been provided in classroom and in the cybertallinn list
#* On Linux:...
# The password for the key has been provided in classroom and in ivcm11 e-mail list.


== BackTrack in Lab==
== BackTrack5 VM in Lab ==


Each Student is provided a BackTrack machine in lab for accessing and attacking the target systems.
* Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
* Each student is allowed to access only the machine with the IP specified below.
* Default username is '''root''' and password is '''toor'''. You would probably like to change it after first login...  


== Student-BackTrack VM correspondence ==
<pre>
<pre>
1. Maksim: 192.168.133.1
1. Maksim: 192.168.133.1
90. rida: 92. rida:




=== Accessing BackTrack VM ===
== Accessing BackTrack VM ==
Some ways how you can access the BackTrack machine in the lab from where you have to do the actual work.
* After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC
# Command line access: '''ssh user@192.168.133.X'''
 
#* Default username is ""
# Command line access: '''ssh root@192.168.133.X'''
#* Obviously, X denotes the number that has been allocated for specific student.
#* Default password is '''toor'''.


# X11 session redirected over SSH
# X11 session redirected over SSH
#* '''ssh -X -C user@ 192.168.133.X'''
#* '''ssh -X -C root@192.168.133.X'''
#* Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.
#* Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.


104. rida: 108. rida:
#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
#* When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1.
#* If you need to kill any vncserver instances: '''vncserver -kill :1'''. This kills X desktop number 1.
#* On Student VM or you own computer use vncviewer to access the display: '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number.
#* To access the display use vncviewer: '''vncviewer 192.168.133.X:1'''. Number 1 expresses the display number.


== Course Management Application ==
== Course Management Application ==


* Mission and task descriptions as well as scoreboard will be displayed over the web https://cma.ex/
* Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex/ (https://192.168.136.5)
** This site is accessible only from the BackTrack machine
* Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
* Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
* First and Last Name will be used to track if you have participated in the lab - these have to be real.
* First and Last Name will be used to track if you have participated in the lab - these have to be real.
* NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor.
* NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor and you'll get bonus.

Redaktsioon: 30. oktoober 2011, kell 23:39

Lab Setup For ITX8063 2011/2012

Access

  • The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
  • Every student has a private BackTrack5 virtual machine which has to be used for accomplishing the tasks.
  • There are 2 possible ways to access the BackTrack5 VM in Lab.
    • Classroom is connected with Lab over site-to-site VPN.
    • Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.

Setup OpenVPN on your own machine to access the Lab

  1. Download: http://cs.tud.ttu.ee/itx8063/course-lab.tar.gz.des3
  2. Encrypt the configuration: openssl des3 -d -in course-lab.tar.gz.des3 -out course-lab.tar.gz
  3. Install openvpn to you machine and run the configuration provided
    • On Linux:...
  4. The password for the key has been provided in classroom and in ivcm11 e-mail list.

BackTrack5 VM in Lab

  • Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
  • Each student is allowed to access only the machine with the IP specified below.
  • Default username is root and password is toor. You would probably like to change it after first login...
1. Maksim: 192.168.133.1

2. Mikheil: 192.168.133.2

3. Dmitri: 192.168.133.3

4. Stanislav: 192.168.133.4

5. Heliand: 192.168.133.5

6. Karl: 192.168.133.6

7. Tiit: 192.168.133.7

8. Margus: 192.168.133.8

9. Franck: 192.168.133.9

10. Zülfikar: 192.168.133.10

11. Sebstian: 192.168.133.11

12. Piret: 192.168.133.12

13. Kaarel: 192.168.133.13

14. Alexandre: 192.168.133.14

15. Martin: 192.168.133.15

16. Aleksandra: 192.168.133.16

17. Elar: 192.168.133.17

18. Aleksandr: 192.168.133.18

19. Maike: 192.168.133.19

20. Rossella: 192.168.133.20

21. Sandra: 192.168.133.21

22. Robert: 192.168.133.22

23. Dyan: 192.168.133.23

24. Mauno: 192.168.133.24

25. Kuuno: 192.168.133.25

26. Ronny: 192.168.133.26

27. Truls: 192.168.133.27

28. Anis: 192.168.133.28

29. Roman: 192.168.133.29

30. Predrag: 192.168.133.30

31. Tamara: 192.168.133.31

32. Rait: 192.168.133.32

33. Eerik: 192.168.133.33

34. Allan: 192.168.133.34


Accessing BackTrack VM

  • After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC
  1. Command line access: ssh root@192.168.133.X
    • Obviously, X denotes the number that has been allocated for specific student.
    • Default password is toor.
  1. X11 session redirected over SSH
    • ssh -X -C root@192.168.133.X
    • Now you can start programs with GUI e.g. konqueror &, firefox &. Note that it could be relatively slow.
  1. VNC for graphical user interface
    • Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
    • Obviously, the geometry specifies the screen size, adjust it according to your monitor
    • When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /home/user/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
    • If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
    • To access the display use vncviewer: vncviewer 192.168.133.X:1. Number 1 expresses the display number.

Course Management Application

  • Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex/ (https://192.168.136.5)
  • Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
  • First and Last Name will be used to track if you have participated in the lab - these have to be real.
  • NB! Please, do not hack the scoreboard! If you find any vulnerabilities, report them to the instructor and you'll get bonus.
Pärit leheküljelt "http://www.lambda.ee/w/index.php?title=ITX8063:2011:Labs&oldid=6365"