PaulDotCom mailing list archives

Re: [GPWN-list] Pen Testing Lab Images/Systems setup


From: James Shewmaker <james () bluenotch com>
Date: Sat, 16 Nov 2013 17:15:11 -0800

On Sat, Nov 16, 2013 at 2:29 PM, Jamil Ben Alluch <jamil () autronix com>wrote:

Hello,

This may be a recurring question, but I still wanted to get some input.

What kind of systems do you normally use for your pen-testing labs; more
specifically, are there pre-set images that you use for testing
vulnerabilities and practice ("Ready-to-Hack" systems)?


Hi Jamil,

You can get started with vulnhub.com. They have some free (but hosted via
VPN) pre-configured scenarios, including some you can download. The
vuln-injector program they have is great for weakening a random Windows VM
so you can experiment with a closer-to-real-world target. There is also our
scenario engine, currently in closed beta, at bunker011.com (almost 800
different hosted VMs)--you could try registering and see if you get
invited. ;)

It would be interesting to see if you could use the free VPN hosted
projects, and use dd+netcat to steal them ... Interested, not endorsed!
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

Current thread: