ITX8063 2012 Labs

Access

• The environment (Lab) used for the practical tasks is not running in classroom but in another private network accessible over the VPN.
• 
• Every student has a private BackTrack virtual machine which has to be used for accomplishing the tasks.
• The environment (Lab) used for the practical tasks is not running in TUT classroom but in another private network accessible over the VPN.
• There are 2 possible ways to access the BackTrack5 VM in Lab:
  • Classrooms IT-213A, IT-213B will be connected with Lab over site-to-site VPN.
  • Every student has to setup an OpenVPN connection to access the BackTrack VM running in Lab from his/her own computer.

Setup OpenVPN on your own machine to access the Lab

1. Download:
   • ITX8063_2012.tar.gz.bf.gz
2. Unzip the configuration (lambda.ee limits filetypes that could be uploaded so we had to zip after encryption...)
   • gunzip ITX8063_2012.tar.gz.bf.gz
3. Decrypt the configuration:
   • openssl enc -bf -d -in ITX8063_2012.tar.gz.bf -out ITX8063_2012.tar.gz
   • The password for the key has been provided in classroom and in ivcm11 e-mail list.
4. Install OpenVPN to your machine and run the configuration provided. E.g. when using ubuntu:
   • apt-get install openvpn
   • tar zxvf ITX8063_2012.tar.gz
   • cd ITX8063_2012
   • sudo openvpn itx8063.conf
   • The password for the key has been provided in classroom and in ITX8063 e-mail list.
5. In case openvpn is running correctly you should have received routes to networks 192.168.133.0/24 and 192.168.136.0/24

BackTrack5 VM in Lab

• Each student is provided a BackTrack machine in lab for accessing and attacking the target systems.
• Each student is allowed to access only the machine with the IP specified below.
• Default username is root and password is toor. You would probably like to change it after first login...
• This VM shall be used only for completing the course exercises. All student machines and targets are running on same server - therefore be sure that you do not leave unnecessary processes running.

Agnes: 192.168.133.1
Aleksandr: 192.168.133.2
Alexander: 192.168.133.3
Andrejs: 192.168.133.4
Artjom: 192.168.133.5
Christopher: 192.168.133.6
Davit Ag: 192.168.133.7
Davit Az: 192.168.133.8
Emre: 192.168.133.9
Erki: 192.168.133.10
Faris: 192.168.133.11
Fred: 192.168.133.12
Giorgi: 192.168.133.13
Giorgi: 192.168.133.14
Irakli: 192.168.133.15
Kristjan: 192.168.133.16
Levan: 192.168.133.17
Liivi: 192.168.133.18
Mai: 192.168.133.19
Manuel: 192.168.133.20
Marek: 192.168.133.21
Mina: 192.168.133.22
Märten: 192.168.133.23
Natalja: 192.168.133.24
Oleg: 192.168.133.25
Onur: 192.168.133.26
Pavel: 192.168.133.27
Ragnar: 192.168.133.28
Recai: 192.168.133.29
Rivo: 192.168.133.30
Sanjay: 192.168.133.31
Sarbar: 192.168.133.32
Sergei: 192.168.133.33
Sharath: 192.168.133.34
Sten: 192.168.133.35
Taavi: 192.168.133.36
Tanel: 192.168.133.37
Tiit: 192.168.133.38
Tiiu-Liisa: 192.168.133.39
Urmo: 192.168.133.40
Zhuoli: 192.168.133.41

Accessing BackTrack VM

• After the VPN has been correctly setup, the students can access BackTrack VMs over SSH or VNC

1. Command line access: ssh root@192.168.133.X
   • Obviously, X denotes the number that has been allocated for specific student.
   • Default password is toor.
2. X11 session redirected over SSH
   • ssh -X -C root@192.168.133.X
   • Now you can start programs with GUI e.g. firefox &. Note that it could be relatively slow.
3. VNC for graphical user interface
   • Log into BackTrack VM over SSH and start vncserver: vncserver -geometry 1280x800
   • Obviously, the geometry specifies the screen size, adjust it according to your monitor
   • When executing vncserver first time, you will be asked for a password. This password just protects access to the display of your machine. Choose password that you prefer. The password file is /root/.vnc/passwd. If you would like to change the password, just remove that file and start vncserver again.
   • If you need to kill any vncserver instances: vncserver -kill :1. This kills X desktop number 1.
   • To access the display use vncviewer on your machine (not on the BackTrack): vncviewer 192.168.133.X:1. Number 1 expresses the display number.

Course Management Application

• Presentation slides and other materials are available here (http!): http://cma.ex/files (http://192.168.136.5)
• Mission and task descriptions as well as scoreboard will be displayed over simple web application located here: https://cma.ex (https://192.168.136.5)
• Register a new user account. Username will be displayed on the scoreboard - this can be something anonymous
• First and Last Name will be used to track if you have participated in the lab - these have to be real.
• NB! Hacking the production version of scoreboard is prohibited.
  • We will clone the VM for testing purposes to those who are interested in breaking the scoring system.
  • If you find any vulnerabilities, report them to the instructor and you'll get bonus.