Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 72 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
please shed some light
EH-Net
May 21, 2013, 01:11:27 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
please shed some light
Pages:
1
2
[
3
]
4
Go Down
« previous
next »
Print
Author
Topic: please shed some light (Read 12428 times)
0 Members and 1 Guest are viewing this topic.
3xban
Hero Member
Offline
Posts: 605
Re: please shed some light
«
Reply #30 on:
August 02, 2012, 05:51:20 PM »
hmmm, 1.101 may be referring to either your attacker IP or one of the targets. The De-Ice labs I have from the book are 1.100, 1.110, 2.100. Ok so each lab gives you the setup needed for the attacker system (BT) and the target (De-Ice ISO image). The De-Ice system is typically matched up to the number of the lab (192.168.1.100). You need to configure your attacking system accordingly. My 1.100 image has the following open:
Code:
20/tcp closed ftp-data
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp closed https
Enjoy!
Logged
Certs: GCWN
(@)Dewser
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #31 on:
August 02, 2012, 10:20:15 PM »
Yeha the ones that came with the book are 1.100 and 1.110 but in his videos he ays attack he 1.101 target as your individual pen test project. He has his back rack set to 1.10. Here are my open and closed ports. udp 53 is closed but book gives hint that it is actually open. haha. but netcat dont wanna connect to it using nc -u 192.168.1.100 53. any way, i assume the 1.101 is now 1.110
Code:
root@bt:~# nmap 192.168.1.100
Starting Nmap 5.61TEST4 ( http://nmap.org ) at 2012-08-02 23:14 EDT
Nmap scan report for 192.168.1.100
Host is up (0.00023s latency).
Not shown: 992 filtered ports
PORT STATE SERVICE
20/tcp closed ftp-data
21/tcp open ftp
22/tcp open ssh
25/tcp closed smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp closed https
MAC Address: 00:0C:29:9A:56:D7 (VMware)
Nmap done: 1 IP address (1 host up) scanned in 17.37 seconds
root@bt:~#
Logged
3xban
Hero Member
Offline
Posts: 605
Re: please shed some light
«
Reply #32 on:
August 03, 2012, 07:11:49 AM »
yeah the videos might be sligthly newer than the book or vice versa. The book goes along well with the labs and that's how I've been using them. I may fire that one up after I am done with my current read/lab combo.
Logged
Certs: GCWN
(@)Dewser
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #33 on:
August 03, 2012, 11:54:18 AM »
Quote from: 3xban on August 03, 2012, 07:11:49 AM
yeah the videos might be sligthly newer than the book or vice versa. The book goes along well with the labs and that's how I've been using them. I may fire that one up after I am done with my current read/lab combo.
so far i like it. I have found that i need to follow the videos first and the ISSAF before i read all of his book. Some of the concepts in the book are more advanced than what i am used to. I want to complete the de-ice lvl 1 first before i read the advanced material in his book. haha.
What read/lab combo you doing now?
thanks
Logged
Cyber.spirit
Sr. Member
Offline
Posts: 351
The World is sick, Save your mind...
Re: please shed some light
«
Reply #34 on:
August 03, 2012, 01:51:10 PM »
im really sorry i typed the ncrack command wrongly here is the correct one :
Ncrack -v --user <username> <target's ip><port>
Yeah can i use the dvd without the book? The book is so boring
Logged
ICS Academy Network Security Certified
3xban
Hero Member
Offline
Posts: 605
Re: please shed some light
«
Reply #35 on:
August 04, 2012, 06:58:26 AM »
Quote from: LT72884 on August 03, 2012, 11:54:18 AM
What read/lab combo you doing now?
thanks
Practical Malware Analysis. Static/Binary analysis and reverse engineering. Something I am much more interested in at the moment. Working with IDA Pro at the moment.
Logged
Certs: GCWN
(@)Dewser
Grendel
Full Member
Offline
Posts: 241
Re: please shed some light
«
Reply #36 on:
August 06, 2012, 11:22:08 AM »
Just found this thread, and wanted to try and fill in the gaps regarding my book and the videos present in it...
IP address:
The De-ICE disks were designed to simply give a challenge of attacking a system. Because of the IP address and number of protocols available on the target systems, you can look at them theoretically as internal systems. However, I wanted those people using them to worry less about the network configuration, and more about the process of information gathering, vulnerability identification, etc. I also wanted to make them based on misconfiguration instead of exploitable applications, so that people would quit thinking pentesting was simply launching autopwn and rooting.
Videos:
The videos came first, the book second. Although the videos in the book are still valid and useful, they come from the Heorot.net training program, which has now migrated over the HackingDojo.com. To keep things in perspective, the videos in the book could be considered v1, while the Dojo material has evolved to about v4. Currently, for the same level of training in the book, there is about 10 hours of video training at the Hacking Dojo. In addition, there is a lot more hands-on activity at the Dojo as well, plus we have live sessions at the Dojo... much more evolved than what's in the book.
De-ICE 1.101:
This image has not been released to the public, and is accessible only for students of HackingDojo.com (and heorot.net beforehand). It is used as a method of testing a student (along with a written exam) to see if they have absorbed and can demonstrate the appropriate knowledge to move onto the 2D Nidan level of training. Consequently, there is a De-ICE 2.101 disk as well that again has not been released to the public, and is used by students to test out of the 2D class onto the 3D.
Hopefully that helps answer some of your questions. Now that I know that this thread is here, I will monitor it in case anyone else has questions about my book or the videos.
Logged
- Thomas Wilhelm, MSCS MSM
ISSMP CISSP SCSECA SCNA IEM
Web Site:
http://HackingDojo.com
Author:
Professional Penetration Testing
Ninja Hacking
Penetration Tester's Open Source Toolkit
Metasploit Toolkit for Penetration Testing
Netcat Power Tools
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #37 on:
August 06, 2012, 04:42:05 PM »
Awesome. that makes sense now. Ok so i was not just hearing things then. There is actually a 1.101 but it is only for student use. ok cool. So sine i do not have access to that, will 1.110 suffice for 1.101?
I am trying to follow the dvd videos first then read the book. I plan on writing my technical report so i can turn it into my english professor as a grade. haha.
Thomas? do you give a little demo or tour of the new online lab you have besides whats on the youtube video?
it looks pretty cool what you are doing though. i wish when i was doing my ccna and ccnp, we had something like this to help us out. haha.
thanks for all the help. i like the book, but i need to read the issaf and follow the videos fist before i understnad the book. haha
thanks
«
Last Edit: August 06, 2012, 04:49:34 PM by LT72884
»
Logged
Grendel
Full Member
Offline
Posts: 241
Re: please shed some light
«
Reply #38 on:
August 06, 2012, 07:05:58 PM »
Yeah, feel free to use the 1.110 as a target. It doesn't track the same, but the concepts of the methodology are identical.
I don't have any additional videos of the online lab, since it can fluctuate in its design. On an unrelated note,I have to admit it's fun watching what people do in the lab - as an example, I mention to students they should try to be like surgeons, and conduct surgical strikes... but they come in carpet bombing the targets.
But that comes with time.
Feel free to hit me up with any other questions you might have. Enjoy!
Logged
- Thomas Wilhelm, MSCS MSM
ISSMP CISSP SCSECA SCNA IEM
Web Site:
http://HackingDojo.com
Author:
Professional Penetration Testing
Ninja Hacking
Penetration Tester's Open Source Toolkit
Metasploit Toolkit for Penetration Testing
Netcat Power Tools
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #39 on:
August 07, 2012, 03:26:28 AM »
Quote from: Grendel on August 06, 2012, 07:05:58 PM
I mention to students they should try to be like surgeons, and conduct surgical strikes... but they come in carpet bombing the targets.
But that comes with time.
Feel free to hit me up with any other questions you might have. Enjoy!
I can appreciate that since i am a pre med student. Thopugh i am not studying to be a surgeon, but rather the possibility to make surgical tools or biomenitic legs and arms for those who need them. OR posibly power generation. But my degree requires pre med. haha.
I feel somewhat dumb in a way. i cant believe i struggle on levle one. haha. there is no way i could have figured it out by myself with out the movies. haha.
I do have to say that the ISSAF is a funny ol thing. it gives you ideas of what to do without telling you how, not all the time though. haha.
After this course i am doing. I will FINALLY get to my linuxcbt course i purchased 4 years ago. i got the security edition and the RHCT course as well. I took it in school and had to purchase the CBT. I completed the first course but not the other 2. so that is next. just need to build a lab for it though. thats the hard part. They sent me a picture of whathe VM environment should look like... holy crap its complicated. hahaha
thanks for the info.
Logged
shadowzero
Full Member
Offline
Posts: 120
It's a UNIX system, I know this!
Re: please shed some light
«
Reply #40 on:
August 07, 2012, 08:10:44 AM »
Quote from: LT72884 on August 07, 2012, 03:26:28 AM
I feel somewhat dumb in a way. i cant believe i struggle on levle one. haha. there is no way i could have figured it out by myself with out the movies. haha.
If you're new to this, you should expect to struggle for the first few attempts. As you progress you'll start to learn what to look for and things will become a little easier. There will always be some degree of trial and error, especially when you get to more challenging machines, but there's no substitute for experience and lots of practice.
Logged
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #41 on:
August 07, 2012, 10:12:59 AM »
Quote from: shadowzero on August 07, 2012, 08:10:44 AM
If you're new to this, you should expect to struggle for the first few attempts. As you progress you'll start to learn what to look for and things will become a little easier. There will always be some degree of trial and error, especially when you get to more challenging machines, but there's no substitute for experience and lots of practice.
True. it is completely new to . I went back and looked at my ccna and ccnp security and it was all packet filtering and port forwarding stuff. nothing on how to attack a system. haha.
I want to learn to use nmap in an environment with routers and firewalls, but im not sure how to run those apps in a vmplayer, nor do i know what config settngs should be configured on the firewall a well. IE, how secure should i configure it or how open. Wish there was a router/firewall challenge disk ISO.
Logged
Jamie.R
Sr. Member
Offline
Posts: 429
Re: please shed some light
«
Reply #42 on:
August 07, 2012, 10:30:59 AM »
You do have a few options you can get some cheap kit on ebay and setup a router. or you coudl take a look at
http://www.gns3.net/
Logged
OSWP | Hackingdojo Nidan | eCPPT
LT72884
Jr. Member
Offline
Posts: 95
Re: please shed some light
«
Reply #43 on:
August 07, 2012, 11:28:27 AM »
Quote from: Jamie.R on August 07, 2012, 10:30:59 AM
You do have a few options you can get some cheap kit on ebay and setup a router. or you coudl take a look at
http://www.gns3.net/
i forgot to mention that i have real equip but no room. so i must go virtual. GNS3 was like packet tracer in its day. haha. it looks like you can run virtual box with it but not vmplayer. dang it.
thanks
«
Last Edit: August 07, 2012, 11:32:10 AM by LT72884
»
Logged
shadowzero
Full Member
Offline
Posts: 120
It's a UNIX system, I know this!
Re: please shed some light
«
Reply #44 on:
August 07, 2012, 11:53:53 AM »
Quote from: LT72884 on August 07, 2012, 10:12:59 AM
True. it is completely new to . I went back and looked at my ccna and ccnp security and it was all packet filtering and port forwarding stuff. nothing on how to attack a system. haha.
That will come in handy. Some attacks require you to analyze network traffic (fuzzing, man-in-the-middle, etc), and having a solid understanding of networks will help you when it comes time to pivot through internal networks.
Logged
Pages:
1
2
[
3
]
4
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Programming
: Finished Python Course in Codecademy now what?
(11) by
securitian
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
Tutorials
: Need guidance
(8) by
r0ckm4n
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
General Certification
: CPT Practical Submission
(0) by
z28power4u
Web Applications
: Nessus and Nikto
(4) by
Seen
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
Other
: BSides Boston
(0) by
3xban
Career Central
: InfoSec in Central, FL
(2) by
tturner
Web Applications
: Web vulnerability scanner
(4) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.