Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 12 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Vmware, or Practicing Pentesting
Ethical Hacker Community Forums
January 07, 2009, 08:52:55 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Vmware, or Practicing Pentesting  (Read 2030 times)
0 Members and 1 Guest are viewing this topic.
brianW85428
Newbie
*
Offline Offline

Posts: 8


View Profile
« on: September 15, 2008, 09:11:41 PM »

Hello everyone!
First i want to say thank everyone that helps me out!

Second i wanna say that i have a very basic knowledge in hacking, I know most hacking terms, Your not talking to a noob here   Smiley

Okay so here is my question,
I wanna know what everyone setup is,
I suppose that everyone is running Vmware or something,
But what do you use to hack with, and what do you use to practice the pentesting on?

Like Windows --> Windows or
Linux --> Windows

And if your hacking Windows, what type of windows and what service pack?
Thank you for your replies in advance  Grin

<xHack^Wright>
Logged
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1048


View Profile WWW
« Reply #1 on: September 15, 2008, 10:22:25 PM »

both...all...whatever

linux to linux, linux to windows, windows to linux, windows to windos...etc
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #2 on: September 16, 2008, 08:22:04 AM »

Your enthusiasm is really great, but your question is very much like asking: "Hi all - I want to learn how to drive, what does everyone use?  SUV's or hybrids, and what type of fuel?"

And the answer that has already been given is akin to: "What you drive and the type of fuel you use is entirely irrelevant to the task of getting somewhere in a vehicle"

What operating system you use is particularly irrelevant when you're trying to find or exploit a vulnerability in a remote system (which most of the time is what you would try to do), because it only matters what is running on that system and so long as the tool that you're using to do it works, then it doesn't matter what operating system you're running. And besides, due to VM tools you can essentially pick whatever you prefer anyway.

Take this article on writing windows buffer overflows in this particular case, the author used a windows box running VMware, but it could just have easily been done from a linux box running VMware or a separate physical machine could have been used just as easily. 

Another analogy would be: "Hi, I'm trying to learn how to make wooden things, does everyone use hammers or screwdrivers?"  you use the tool that is best suited for the job.

In addition to this, there are a number of Live CD linux distributions that come preconfigured with a number of useful tools.  So this makes it even more irrelevant what operating system you're running.  Some tools run equally well on windows and linux and so it doesn't matter which you have. 

Sorry if this post sounded like a rant.  You'll find that if you want a more specific answer, you'll need to ask more specific questions. 

Keep reading!
« Last Edit: September 16, 2008, 08:25:37 AM by NickFnord » Logged
sgt_mjc
Full Member
***
Offline Offline

Posts: 166


View Profile
« Reply #3 on: September 16, 2008, 08:31:24 AM »

We use various flavors of both Linux/Unix and Windows in the Lab to practice on. We attack form any and all as well. I am a little different than most though in that I like working out of Windows.
Logged

Mike Conway
CompTia Security +
C|EH
dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #4 on: September 16, 2008, 09:32:06 AM »

Welcome to the forum.
My lab I have a couple of laptops running vista and XP sp3. One laptop also have Ubuntu on it. I have my netbook with Linpus and BT3. Then I have a desktop machine that has unpatched or limited versions of patching for XP, 2000, 2k Server, 2003, Mandrake, Ubuntu and Fedora.
Also a switch, couple of routers, AP's and bluetooth carkits etc.

I also have a few live cds that people mentioned on here for giving pen testing environments, like the DE-ICE series etc.
Logged

toggmeister
Newbie
*
Offline Offline

Posts: 22


View Profile
« Reply #5 on: September 18, 2008, 02:46:58 PM »

Hi,

I use Windows XP SP3 base with fc8 and fc9 for my guest os.  Most of my stuff is on the windows side, duplicated onto linux for quickness as most of the tools I use are quicker on that OS  Cheesy.

Duplication is for a reason, some networks I have come across only allow one mac so cannot use VM's.  I use windows as base as I have found that a lot of commercial scanners have to be on windows.

For testing you can practice on all sorts of platforms in vmware but that said each test that you perform will be different from the lab, you may have a solaris 10 build in the lab and testing solaris 10 but did that build in the lab have a really old Oracle install on it (for legacy reasons)? You can't basically test for all eventualities, you can get a semblance for each os but each network you will find is different, each sysadmin has a different way of implementing security (or circumventing it) to get the job done so no matter what you have got set up you will always find something out of the norm.

Its a keen mind that can adjust to curve balls that are thrown in of every single test.

Togg
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.047 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.