Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 26 guests and 2 members online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow how do you create a home hack lab?
EH-Net
May 25, 2013, 05:32:07 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: how do you create a home hack lab?  (Read 18652 times)
0 Members and 1 Guest are viewing this topic.
info_genius
Newbie
*
Offline Offline

Posts: 4


View Profile
« on: November 01, 2009, 08:05:23 AM »

hello everyone.
just joined. this looks like a GREAT site to learn network security and hacking!
i am trying to find out how to setup my own hack lab to practice hacking and security here at home. can anyone give me some pointers on this please? where do i start? what is the best hack lab software to use? are there any online network security/hacking schools with hack labs already set up that you would advice i look into? i have checked out www.sequrit.org but they have not emailed me back in a several days or sent me any addtional info..
has anyone experienced working with Sequrit.org Huh

thanks everyone!
« Last Edit: November 01, 2009, 08:17:01 AM by info_genius » Logged
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #1 on: November 01, 2009, 08:24:46 AM »

Hi and welcome to the site.

Check out Wilhelm's book on creating a pentest lab, I reviewed the book for this site here which also includes a sample chapter, which could actually be the best place to start for what you are attempting.

I've spent the last year+ building up a working environment and am starting to get to a point I feel the first version of my lab is 'complete'. I've documented a lot of my working on my blog, relevant posts are tagged with lab.

Hope this helps point you in the right direction, happy hacking

--Andrew Waite

P.S. Just taken a look at securit.org as I hadn't come across the site, and that is some coinage they asking in membership fees. I'll mirror info_genius' question; Anyone have any experience with securite.org?
« Last Edit: November 01, 2009, 08:37:12 AM by Andrew Waite » Logged

info_genius
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #2 on: November 01, 2009, 09:23:18 AM »

hi and thanks Andrew. do you know of any other online sites with more inexpensive fees than sequrity.org please  Huh

thanks
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #3 on: November 01, 2009, 09:32:41 AM »

If you want to setup a virtual lab there's an excellent tutorial by Jhaddix and Laz3r here. Besides, you could also use this link.
Logged
KamiCrazy
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #4 on: November 01, 2009, 05:58:37 PM »

Personally my lab at home consists mainly of two things.

I run all my OS's on VMware fusion on my MBP. With 4 gigs of ram I can do most things quite well. I also run backtrack as a fusion image.
For wireless testing, I simply plug in a USB WiFi card into Fusion and it bridges it over to Backtrack.

For cisco related stuff I run dynagen on my home desktop, which is an opteron 175 with 4 gigs.

Honestly fusion has made testing and labwork a breeze for me.

If you don't want to run a mac my suggestion would be to use a linux host and run something like KVM, or virtualbox etc. I personally don't recommend using windows as a host OS.
Logged
sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #5 on: November 02, 2009, 06:59:50 AM »

I'm lucky with my lab setup.  I have a lab at the office that we can use to practice with as well as at home.  My home lab has a couple of physical boxes.  One box is my game rig so I don't do too much with it, but my other box is my test bed system.  I use it to play with.  I have run every thing form Solaris 10 to Ubuntu to Server 08.  I have VMWare Server (Free) on my game rig since it has the most RAM and I can beef it up.  I use VMs for OSes that I don't want to rebuild or reinstall.  Unfortuneately, I don't have anything good for Cisco at the house.

My office lab has every thing in it or darn near.  I have three servers to hos VMs.  I have several SPARC platforms for various versions of Solaris.  I also have ISO files for various LiveCDs that can be run in a VM that have known vulnerabilities in them. 

Your lab is only limited by your imagination.  Have fun with it.  There are plenty of free tools out there like Sun Vitual box, Microsoft Virtual PC, and VMWare Server.  You can download pre-built VMs form the VMWare site.  Most Linux distros are free or there is a free version.  Good luck.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #6 on: November 02, 2009, 08:34:00 PM »

I'd go with ESXi if I had compatible hardware, but Workstation has worked very well for me so far. On the Microsoft side, I've got everything from Windows 3.1 (just for fun) to Windows 7 (Technet Download subscriptions are your friend), and various versions of CentOS, BSD, Solaris, etc.

A decent multicore processor, a load of memory (DDR2 is cheap), and several faster HDs is all you need. I actually found the HDs to be my bottleneck, so I just bought a bunch of cheap 160GB 7200RPM drives. Your VMs will usually range from 1-20GB, so you're more concerned with spindles than total storage.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
Basil1977
Guest
« Reply #7 on: November 03, 2009, 12:56:44 AM »

hi info_genius

If you are new to EH/PT world I would suggest downloading Backtrack 3 or Backtrack 4 Prerelease and try to play with it.

It has most of the free tools .
Logged
Laz3r
Guest
« Reply #8 on: November 06, 2009, 03:06:37 AM »

As Equix3n- already said, Jhaddix and I did a couple tutorials. Network Pentesting Lab and Web Testing Lab.  We tried our best to keep costs at $0.  But to be completely legal, you need a legitimate copy of windows.  Though there is a legal way around this.  I haven't tried it personally, but based on where it's found, I'm sure it should work.  Check out Metasploit Unleashed (required files).  This should give you the links to a legal VM download of XP SP2.  Follow some of the steps they have to give you the control over the OS that you need.

From there you should be able to install everything we've got in the videos (that require windows) all free of charge.
Logged
sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #9 on: November 09, 2009, 11:28:40 AM »

Thanks Laz3r for the links.  I may follow your web test lab setup.  We don't do a lot of web app pentesting, but it is an integral part of a pentest. Thanks.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #10 on: November 12, 2009, 06:14:36 AM »

I recommend the tutorials by Lar3r and Jhaddix as well, they did a great job. Wink You might also try to get a copy of Grendel's bookProfessional Penetration Testing: Creating and Operating a Formal Hacking Lab which should show you some more points to consider.
Logged
info_genius
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #11 on: November 20, 2009, 08:29:54 AM »

thanks guys!
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.075 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.