Differences

This shows you the differences between two versions of the page.

--- session:infrastructure:vm [2017/07/20 14:53]
Octavian GRIGORESCU (6369)
+++ session:infrastructure:vm [2020/07/19 12:49] (current)
@@ Line 8: / Line 8: @@
 Kali Linux is a Debian-based distribution the comes with a handful of helpful security tools used for Penetration Testing, Forensics and/or Reverse Engineering.
-The VM can be downloaded in OVA format from https://repository.grid.pub.ro/cs/hexcellents/sss/. Use your curs.pub.ro LDAP credentials to authenticate.
+The VM can be downloaded in OVA via {{:session:infrastructure:sss-kali-amd64.ova.torrent|Bittorrent}}.
+<note important>
+The machine's allocated resources are pretty conservative. If your physical host can handle it, you can give it more memory or CPU cores.
+</note>
 ==== Login ====
@@ Line 14: / Line 18: @@
 The credentials used to login on the Kali Linux virtual machine are:
-* username: ''root''
+  * username: ''root''
-* password: ''toor''
+  * password: ''toor''
 ==== Specifications ====
-* 64-bit OS
+  * 64-bit OS
-* 2 GB RAM
+  * 2 GB RAM
-* 30 GB HDD space
+  * 30 GB HDD space
+==== Networking & SSH ====
-===== Debian 32bit =====
+Currently the VM's networking is achieved through a host NAT. A TCP port forwarding rule connects the host's port 2222 to the VM's port 22 and the SSH daemon is configured to start automatically, so you can login to the machine using:
-It is Virtual Box vm using Debian 32 bit (at this point Jessie 8.1).
+<code>
+$ ssh -p 2222 root@localhost
+</code>
-Download using HTTP from https://repository.grid.pub.ro/cs/hexcellents/sss/
+However, you might get better network speeds if you change the networking method to bridge, so that the VM will communicate directly with the same gateway as the host. In VirtualBox, go to the machine settings:
-==== Login ====
+{{ :session:infrastructure:bridged_adapter.png?600 |}}
-* username: ''student''
+This means the VM and the host will live in the same LAN, so you need to figure out its local IP; for example:
-* password: ''student''
-The ''student'' user may issue ''sudo su'' to get a root prompt, no password required.
+{{ :session:infrastructure:ip.png?600 |}}
-==== Specifications ====
+Then connect to it using:
-* 512 MB RAM
+<code>
-* 16 GB HDD space
+$ ssh root@192.168.0.115
-* interface eth0 for Internet access (NAT)
+</code>
-* interface eth1 for local access through SSH (host-only)
-==== Base Software =====
-* Debian GNU/Linux 8.1 "Jessie"
+==== Headless VM ====
-* Xfce
-* Linux kernel 3.16
-==== Packages ====
+If your physical machine is low on resources (or you simply don't want to live inside the Kali VM, e.g. login in its browser), one thing that might help is running the VM  in the background with no graphical interface and simply connect to it via SSH.
-Install and configure packages
+To get rid of the graphical interface, configure the machine to boot in runlevel 3, by making the following change in ''/etc/default/grub'':
 <code>
-apt-get install sudo
+# GRUB_CMDLINE_LINUX_DEFAULT="quiet"
-apt-get install vim
+GRUB_CMDLINE_LINUX_DEFAULT="quiet 3"
-cp /usr/share/vim/vim*/vimrc_example.vim /etc/vim/vimrc
-update-alternatives --config editor
-visudo
-sudo apt-get install tcpdump gawk git gitk git-gui wget curl htop netcat nmap wireshark openssh-server gzip bzip2 zip unzip unrar-free p7zip lzma xz-utils subversion mercurial sed less bless hexedit elfutils vim strace finger tree pciutils usbutils lsof bash-completion pwgen host gdb valgrind ctags expect python emacs iotop ltrace
-sudo apt-get install iotop nasm apt-file lynx ncftp ldap-utils mailutils net-tools ethtool screen tmux dtach filezilla
-sudo apt-get install radare2 radare2-plugins
-sudo dpkg-reconfigure wireshark-common && sudo usermod -a -G wireshark $USER
 </code>
-Configure Git
+Then run:
 <code>
-git config --global user.name 'SSS Student'
+# update-grub
-git config --global user.email 'sss@security.cs.pub.ro'
-git config --global color.ui aut
 </code>
-Create Desktop shortcut for Sublime Text 2
+Finally, reboot the machine (or run ''telinit 3'' to switch to runlevel 3).
-Install and configure metasploit: http://www.pkdavies.co.uk/156-debian-7-metasploit-setup.html
+=== Virtual Box Instruction ===
+To start the machine headless (i.e. no graphical window showing the VM) in Virtual Box, you can either use the "Start" options from the virtualbox graphical application, or:
 <code>
-sudo apt-get install build-essential libreadline-dev libssl-dev libpq5 libpq-dev libreadline5 libsqlite3-dev libpcap-dev openjdk-7-jre subversion git-core autoconf postgresql pgadmin3 curl zlib1g-dev libxml2-dev libxslt1-dev libyaml-dev ruby ruby-dev
+$ VBoxManage startvm <vm-name> --type headless
+</code>
-sudo chmod o+r /var/lib/gems/2.1.0/gems/robots-0.10.1/lib/robots.rb
+Where ''<vm-name>'' is the actual name of the VM which you can determine by running:
-add MSF path to PATH
-</code>
-Install and configure IDA
 <code>
-wget https://out7.hex-rays.com/files/idademo68_linux.tgz
+$ VBoxManage list vms
 </code>
-Create Desktop shortcut for IDA
-==== Configurations ====
-* PEDA: https://github.com/longld/peda
-===== Windows 7 =====
-The Windows 7 virtual machine comes with a handful of helpful security tools used for binary inspection, forensics and reverse engineering.
-The VM can be downloaded in OVA format from https://repository.grid.pub.ro/cs/hexcellents/sss/; the file is ''SSS - Windows 7 32 bit.ova''. Use your curs.pub.ro LDAP credentials to authenticate.
-==== Login ====
-  * username: ''student''
-  * password: ''student''
-==== Specifications ====
-  * 32-bit OS
-  * 2GB RAM
-  * 20 GB HDD space
-===== Ubuntu 14.04 64bit =====
-It is Virtual Box vm using Ubuntu 64 bit.
-The VM can be downloaded in OVA format from https://repository.grid.pub.ro/cs/hexcellents/sss/. Use your curs.pub.ro LDAP credentials to authenticate.
-==== Login ====
-The credentials used to login on the Ubuntu virtual machine are:
-* username: ''virtual''
-* password: ''virtual''
-==== Specifications ====
-* 64-bit OS
-* 2 GB RAM
-* 30 GB HDD space

Security Summer School

User Tools

Site Tools

Differences

Page Tools