EH-Net

hi

we have downloaded windows xp sp3 from

http://nvd.nist.gov/fdcc/download_fdcc.cfm

and installed and configured hacme bank aspx vulnerable web application with SQL server express 2005

here is Lab requirements

VMware Workstation / Player
Computer with a Minimum 2 GB Ram
Backtrack – Attacking Machine


Download The Lab from Ninja-sec.com (Full Pack)

http://dc121.4shared.com/download/wwPhUxMQ/hackme_bank_vm_Ninja-Sec.zip



Setup For Workstation - ( NATED HOST ) - MSSQL TCP-IP Configuration On 192.168.3.133

The DHCP By Default Will Ask for IP !92.168.3.133 - so Make Sure you Setup the VMnet8 on subnet IP 192.168.3.2

or you can change it like this

(http://upload.7bna.com/uploads/f82e723ec0.png)


(http://upload.7bna.com/uploads/1d6b0b4cc8.png)


so the bottom line is you need to download vmware image and extract it , then open it with vmware workstation or vmware player , then log in with :

user name : Renamed_Admin
password   : Ninja@Security-12

and configure Sql server express 2005 like above , then type the ip address in your web browser to start hacking :)

enjoy

best regards
Ninja-Sec.com

Hi,

I tried this VM on Mac using Virtual box, everything went fine till i boot on Virtualbox, had error msg:  Error in newdev.dll , Missing entry : ClientSideInstall. checked Device manager and found network adapter is missing... Is there anyway to update this driver?

Any help appreciated.

Cheers

hi

you can try

http://www.vmware.com/products/fusion/overview.html

and it will works

we didn't try it on virtualbox

thx

Great work ninja-sec!!

when i downloaded the archive the outer one opened just fine but with the individual inner  archives they seem corrupted or am i supposed to open them with vmware workstation? i tried with linux archive manager,archive mounter ark and Xarchiver

the first archive opens the others do not has anyone else had this issue?

Can't wait :)

I had trouble in opening the archive for the file I have downloaded from FDCC XP Pro version.......After opening first zip file, it extracted as archive file, double click on archive file extracts another archive file....Kind of keep going in round.....Not sure if its same trouble you had....! ( I haven't found any solution for it, puzzled myself)
V

Looks like you guys may want to consider re-releasing this as a pre-built ISO or as a vm image.

FWIW, I downloaded the image and extracted the zip file.  This creates multiple .7z files (a multi-part 7-zip file).  Use 7-zip (free) to put them back together.  The whole process took maybe 5 minutes and was far from rocket science.  No offense, but if you can't reassemble a multi-part archive, even hackme bank is probably a little too advanced for you.

and you can download 7zip from this website

http://www.7-zip.org/download.html

and install and extract all files and after that open vmware and open the image file

*.vmx

after that login with user and pass

and configure sql server to work with the new ip

if nothing works , i will make a detailed video

best regards

i use linux as a base and the linux 7zip client could not open it and the ability to open a archive does not mean you can hack a web app or a windows 2003 box both of which i can do