Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 44 guests and 3 members online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Hardwarearrow Setting Up Lab
EH-Net
May 22, 2013, 06:56:13 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Setting Up Lab  (Read 9736 times)
0 Members and 1 Guest are viewing this topic.
mambo
Newbie
*
Offline Offline

Posts: 14


View Profile
« on: January 18, 2009, 02:56:56 PM »

Hello!

Just wondering if anyone had any input on setting up a lab. I now have 3 computers to play with and was thinking its about tiome i got some hands on experience. I currently have two laptops and a desktop.

Does anyone have any input on what possible configurations I could put on the systems so I can get some hands on network security experience, e.g pen testing. Im still in the stage of having done quite a bit of reading but having no experience, so if anyone knows of any tutorials for such lab testing I would greatly appreciate it.

Kind regards

Mambo
Logged
jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #1 on: January 18, 2009, 04:36:11 PM »

Backtrack would be a good distro to load to access quite a few different tools.

http://www.remote-exploit.org/backtrack.html
Logged
mambo
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #2 on: January 18, 2009, 05:22:11 PM »

i had a play with backtrack when i setup a smoothwall firewall, but didnt really get anywhere with it.

Has anyone had experience with damn vulnerable linux? I would like something easy to exploit so i can see some results =]
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #3 on: January 18, 2009, 05:43:27 PM »

Has anyone had experience with damn vulnerable linux? I would like something easy to exploit so i can see some results =]

No, but I'm definitely going to check it out. Thanks for bringing that up!
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #4 on: February 03, 2009, 10:24:29 AM »

Damn Vulnerable Linux is also offering certifications
hxxp://www.damnvulnerablelinux.org/index.php/eng/Certification

One more has been added to BackTrack competitors list .
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #5 on: February 03, 2009, 02:51:05 PM »

Mambo, you may want to look into a book called "Build Your Own Security Lab: A Field Guide for Network Testing". A friend of mine read it and he said it'd be a good start for people wanting to set up their own labs.
Logged

eCPPT, GCIH, OSCP, OSWP
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #6 on: February 14, 2009, 02:18:33 PM »

I highly recommend setting up one machine as a VMWare ESXi server. You can host all sorts of guest with different OSes, patch levels, and software. It also has the ability for snapshots which is very useful for testing and learning.
Logged

twitter.com/timmedin | http://blog.securitywhole.com
Jhaddix
Sr. Member
****
Offline Offline

Posts: 317



View Profile WWW
« Reply #7 on: February 14, 2009, 04:09:18 PM »

Alternatively you can check out NETinVM

NETinVM is a single VMware virtual machine image that contains, ready to run, a series of User-mode Linux (UML) virtual machines which, when started, conform a whole computer network inside the VMware virtual machine. Hence the name NETinVM, an acronym for NETwork in Virtual Machine. NETinVM has been conceived mainly as an educational tool for teaching and learning about operating systems, computer networks and system and network security, but other uses are certainly possible.
Logged

jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #8 on: February 14, 2009, 07:42:54 PM »

Mambo, you may want to look into a book called "Build Your Own Security Lab: A Field Guide for Network Testing".

It is a good book. I did run across a few dead links in it however...
Logged
charlottebandit
Newbie
*
Offline Offline

Posts: 49


View Profile
« Reply #9 on: February 25, 2009, 08:32:53 AM »

The thing with pentesting, is that you need SOMETHING to assess whether it's a service or network.  What I mean for service is whether it's a web server, database server, data center, web services, or even an IP voice solution.  By assessing the network, I mean attempting to assess targets through a real switch, real router, and multiple other security controls.

Hence my point is that you'll need to either team up with someone who knows how to configure servers, or a network guy unless you want to learn either one (or both!).  Not knowing how to do one at least leaves you at a major disadvantage I feel.

Logged

MS, CCSP, CCNP, CCDP, CEH, CHFI, CPTS
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #10 on: February 25, 2009, 08:44:47 AM »

The thing with pentesting, is that you need SOMETHING to assess whether it's a service or network.  What I mean for service is whether it's a web server, database server, data center, web services, or even an IP voice solution.  By assessing the network, I mean attempting to assess targets through a real switch, real router, and multiple other security controls.

Agreed, there are probably well known to most here (mentioned in the forums a lot) but check out De-ICE and DVL to get you start with targets.
Logged

timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #11 on: February 25, 2009, 11:48:04 AM »

The thing with pentesting, is that you need SOMETHING to assess whether it's a service or network.  What I mean for service is whether it's a web server, database server, data center, web services, or even an IP voice solution.  By assessing the network, I mean attempting to assess targets through a real switch, real router, and multiple other security controls.

Hence my point is that you'll need to either team up with someone who knows how to configure servers, or a network guy unless you want to learn either one (or both!).  Not knowing how to do one at least leaves you at a major disadvantage I feel.

Great idea. You could get additional experience and knowledge by setting up additional linux VMs as IPS, Firewall, or for routing. This would teach you how to configure them, and how to get past them. Again, I recommend VMWare's ESXi since it is free and based on the industry leading VM platform. Not a bad idea to learn VMWare while you are at it. ESXi will allow you to set up multiple networks for setting up the lab described above.
Logged

twitter.com/timmedin | http://blog.securitywhole.com
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.065 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.