Penetration Testing mailing list archives
Re: Looking to set up an infosec lab
From: "Ned Kratzer" <NedK () fltg com>
Date: Tue, 31 Jul 2007 09:13:18 -0400
It depends on the type of environment in which you want to look for vulnerabilities...servers, business desktops/workstations or home computers? For servers, if you want your lab to mirror the "real world" as much as possible, I'd recommend a version of RedHat 7 or newer, RedHat Enterprise 2.1 or newer, Solaris 2.6 or newer, Win 2k and 2k3 Server (maybe even NT4 Server). For business desktop/workstations, 2000 and XP Pro are probably gonna be your best bets. Now for the "home computer" situation, Mac OSX 10.2 or newer, Win 9x, Me, XP Home and Vista are gonna be your biggest share, on the *nix side, I'd probably throw in Ubuntu and RedHat, maybe OpenSUSE and Fedora too. -- Ned
"John M. Martinelli" <john () martinelli com> 07/30/07 09:40PM >>>
Hi, list. A few of the previous e-mails going out on the mailing list got my attention - I'm interested in building a moderate hacklab to conduct mock attacks, intrusion detection, detection evasion, etcetera. My hardware situation allows me to deploy a VMware or Parallels lab - what kind of machines would you set up in my situation? I plan on having a few Windows machines - perhaps a '98 box, a 2000 box, and an XP box. As far as Linux, I'd like to set up a Zoot (RedHat 6.2) and BSD box, but beyond that I'm asking for advice. Which flavors would you put up for conducting general vulnerability testing? Thanks, John Martinelli RedLevel.org Security ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Re: Looking to set up an infosec lab Ned Kratzer (Jul 31)