Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 45 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Test Labs
EH-Net
May 25, 2013, 12:39:49 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Test Labs  (Read 5390 times)
0 Members and 1 Guest are viewing this topic.
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« on: May 27, 2010, 01:41:55 PM »

I'm sure everyone here has set up a test lab in one way or another.  If someone were to have access to a multitude of OS's via TechNet or another legitimate means, how would you recommend configuring a test lab?

For example, do you even have a working test lab?  Do you configure one quickly to test a newly disclosed vulnerability?  How often do you test new vulnerabilities?
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #1 on: May 27, 2010, 02:06:01 PM »

As far as the lab goes, there are numerous threads on EH-net about lab setups, etc.  One such, recent one:

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5479.msg28878/topicseen,1/#new

As far as setting up, the reason I, personally, have tons of VM's preconfigured, is to easily restore a clean machine from a VM backup, install software / configurations to test, and wipe clean, easily.  I rarely keep any given VM setup long.  Just save your barebones VM's (xp, xpsp2, xpsp3, RH, SLES, Ubuntu or whatever) and you can always reset pretty quickly.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #2 on: May 27, 2010, 02:33:28 PM »

I highly recommend getting a Technet subscription. I use that extensively.

After I perform a clean install, I typically take a snapshot. I may make one more after significant configuration changes (i.e. setting up a new domain, installing DNS, DHCP, etc.). That way I can always have a semi-usable network, but I still have a great deal of flexibility where I can test things quickly. I can always copy one of the clean installs, test whatever I need to, and then blow it away when I'm done with it.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #3 on: May 27, 2010, 03:01:51 PM »

As far as the lab goes, there are numerous threads on EH-net about lab setups, etc. 
Wow, don't know how I missed that one.  That's what I was looking to find out.

Thanks!
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #4 on: May 28, 2010, 05:06:30 AM »

VMWARE is the way to go .

If you want to test a wide range of OS simultaneously I would recommend ESx 
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #5 on: May 28, 2010, 08:21:50 AM »

VMWARE is the way to go .

If you want to test a wide range of OS simultaneously I would recommend ESx 

Yeah, I keep getting torn between trying to convince the powers that be to let me beef up a server and use it for this purpose or avoid that altogether and just confiscate a few engineering workstations and put a couple VMs each.  Or just have static VMs powered down and boot them on my laptop when needed.

Actually I had an HP 350? G5 server about a year ago and put ESXi on it, but mistakenly used static sized hard disks for the VMs and ran out of space.  The VMs were being used as a test environment for an active project so I couldn't delete them and I wasn't given approval to get more disks.  After the project was finished the server got used for something else and I couldn't keep it.
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #6 on: May 28, 2010, 08:32:15 AM »

Honestly speaking its all about money . The more you have the more you can invest on heavy servers and its maintenance including electricity charges  Smiley . People like me never had a chance to get heavy servers as other do . But still I divide my whole lab using my existing laptop and pc .

3.2GHz dual core , 1gb ram - PC
1.7GHz , 2 GB ram - Laptop .
Wireless Network .

Once you know how to tweak and tune things properly everything is set to go .
And I am pretty much happy with that .
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #7 on: May 28, 2010, 08:48:20 AM »

Well, depending on 'needs and wants', you can acquire a pretty decent server for VMWare ESXi, to run on, off of eBay.  I picked up an HP DL380G3 (dual Xeon), with 16 Gb of RAM and 300 GB of storage installed, for under $500, and with ESXi being free (and supported on that hardware,) it was an easy decision to get it.  Sad thing is, and I'll let the seller and the company he acquired them from remain anonymous, the server arrived with administrative credentials (for their LDAP tree) still stored in the ILO configs and such, and those were easy to 'extract.'  Server was from a company whom, I'm certain, wouldn't have wanted those credentials to get out.  When I contacted them, they were very appreciative, and said they'd obviously be more careful about letting those things slip, in the future, as well as changing their passwords, ASAP.

Long story short, you can always find 'affordable' hardware, and sometimes, you'll even get a mini-adventure along with it!   Tongue
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #8 on: May 28, 2010, 09:16:19 AM »

Once you know how to tweak and tune things properly everything is set to go .
And I am pretty much happy with that .

What do you have running?  Do you push all your VMs to like 128MB RAM or something?


...the server arrived with administrative credentials (for their LDAP tree) still stored in the ILO configs and such, and those were easy to 'extract.' 

Wow, that is a story I'll be sharing with my colleagues.  I just watched the HNN broadcast for May and they had a story about copy machines that customers didn't know had hard drives that kept a copy of everything scanned.  SCARY!
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #9 on: May 28, 2010, 09:53:45 AM »

Well I dont do that way . By tweaking I meant that I not only play with VM images for emulation , also I do Cisco emulation using GNS3 and other devices . They include idlepc values and other stuff . However my 1GB PC machine is not that good for all that , I have been putting off my plan to install Windows 7 because of this hopefully I will be installing 1 GB more ram to make it 2 .

As far as this copier thing is concerned I heard that there is a hard disk attached to a copier and each time anything is printed it saves a copy

hxxp://www.codejacked.com/security-tip-photocopier-hard-disk-caches/
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #10 on: May 28, 2010, 10:03:38 AM »

Wow, that is a story I'll be sharing with my colleagues.  I just watched the HNN broadcast for May and they had a story about copy machines that customers didn't know had hard drives that kept a copy of everything scanned.  SCARY!

Yeah, the copy machine story is a whole other ball of wax...  Folks just don't realize all of the places that information is stored, and think of 'data security' solely in the sense of pc's, networks and servers.  Can be a grave mistake, especially for folks that have stringent compliance standards and federal regulations they need to meet.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #11 on: May 28, 2010, 10:07:35 AM »

... I have been putting off my plan to install Windows 7 because of this hopefully I will be installing 1 GB more ram to make it 2 .

Are you planning to run Windows 7 on 2 GB?  Huh  If so, from my experiences, I'd expect some less-than-acceptable performance, if you're doing much more than general web surfing or text editing...
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.07 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.