Embed Size (px)
Citation preview
1 | P a g e
VirtualBox Home Lab Setup Instructions
Virtual Machines
• Kali • Broken Web App • Windows • Security Onion (future)
Contents Download and Install Virtual Box ................................................................................................................ 1
Download and Install Virtual Box Guest Additions ..................................................................................... 2
Install Kali ..................................................................................................................................................... 2
Screen shots for Kali Install and Configuration ........................................................................................ 3
Install Broken Web App VM ...................................................................................................................... 10
Screen shots for Broken Web App VM Install and Configuration ......................................................... 11
Install Windows VM ................................................................................................................................... 16
Screen shots for Windows VM Install and Configuration ...................................................................... 18
Power up the Machines! .............................................................................................................................. 24
Windows ................................................................................................................................................. 24
Kali (Install process takes about an hour) ............................................................................................... 25
Broken Web App .................................................................................................................................... 26
Verify Connectivity .................................................................................................................................... 27
From the Broken Web App ..................................................................................................................... 27
From the Kali Machine ........................................................................................................................... 28
From the Windows Machine ................................................................................................................... 28
Troubleshooting .......................................................................................................................................... 29
Download and Install Virtual Box Website: https://www.virtualbox.org/wiki/Downloads
Click Windows Host if you are installing virtualbox on a windows machine or OS X if you’re installing on a MAC
2 | P a g e
Save and run the Virtualbox executable (Currently 6.1.22)
https://download.virtualbox.org/virtualbox/6.1.22/VirtualBox-6.1.22-144080-Win.exe
Download and Install Virtual Box Guest Additions Website: https://www.virtualbox.org/wiki/Downloads
https://download.virtualbox.org/virtualbox/6.1.22/Oracle_VM_VirtualBox_Extension_Pack-6.1.22.vbox-extpack
Install Kali Website: https://www.kali.org/downloads/
Select the Kali Linux Download Image for your operating system
Windows 64 bit installer (2021.1): https://cdimage.kali.org/kali-2021.1/kali-linux-2021.1-installer-amd64.iso
Windows 32 bit installer (2021.1) https://cdimage.kali.org/kali-2021.1/kali-linux-2021.1-installer-i386.iso
Click New
Name: Kali BGH HomeLab
Type: Linux
Version: Oracle (64 bit) (Or whatever your operating system is, mine is 64 bit)
Click Next
Click Next (Memory Size)
1024 MB is fine
Click Create (on the Hard Disk form)
Click Next (Hard Disk File Type, VDI should be the default)
Click Next (Storage on physical hard disk, Dynamically allocated is default)
Click Create (File Location and Size, 12GB is default)
3 | P a g e
Click Settings on the created VM
Click Network (Default is NAT)
Change Attached to from NAT to NatNetwork. If you do not have NatNetwork see below)
No NatNetwork Option
File> Preferences
Click Network
Click the green plus (Add New Network)
It will show the new network name in the list
Click OK
Go back to the Settings option, click Network, and Change network to NatNetwork)
Click OK
Screen shots for Kali Install and Configuration
4 | P a g e
5 | P a g e
6 | P a g e
7 | P a g e
8 | P a g e
9 | P a g e
10 | P a g e
Install Broken Web App VM Website: https://sourceforge.net/projects/owaspbwa/
https://sourceforge.net/projects/owaspbwa/files/latest/download
OWASP_Broken_Web_Apps_VM_1.2.7z
Download a 7zip program (free through windows)
Unzip the 7z file and it will leave you with a .ova file
File > Import Appliance
Select OWASP BWA ova file
11 | P a g e
Click Open
Click Name: BWA HomeLab
Guest OS Type (Ubuntu 32 bit is the default, all the rest of the defaults are file)
Click Import
Click Settings
Click Network
Change the Attached to NAT Network with the Name NatNetwork (It should be on the network as the Kali VM)
Screen shots for Broken Web App VM Install and Configuration
12 | P a g e
13 | P a g e
14 | P a g e
15 | P a g e
16 | P a g e
Install Windows VM
Website: https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/
Click VirtualBox Windows 10 Enterprise (This is 20GB big, it will take an hour to down load and a couple hours to import)
https://aka.ms/windev_VM_virtualbox
It downloads a WinDev2104Eval.VirtualBox.zip
Unzip the file
File
Import
Click Next
17 | P a g e
Name: Windows HomeLab (Defaults are Fine, Click Import) (This will take an hour or so)
Once it completed importing, click Settings
Click Network
Change from NAT to NAT Network (Select the same NatNetwork)
18 | P a g e
Screen shots for Windows VM Install and Configuration
19 | P a g e
20 | P a g e
21 | P a g e
22 | P a g e
23 | P a g e
24 | P a g e
Power up the Machines!
Windows Windows will just logon
If you’re asked if you want your PC to be discoverable say Yes
Type Firewall into the search bar
Click Domain network and cut off the Firewall
Click the back arrow
Click Private network
25 | P a g e
Turn firewall off
Click the back arrow
Click Public Network
Turn off the firewall
Click Back arrow
Verify that all of the firewalls are OFF
Type cmd into search bar
Type ipconfig into the cmd terminal
Write down your IP address, it should start with 10. something (Mine is 10.0.2.15)
Minimize Windows VM
Kali (Install process takes about an hour) Click Start
If it asks you to select a start-up disk select Kali-linux02021.1 iso file and click Start
Select Graphical Install
Click Continue on Language
Click Continue on Location
Click Continue on Keyboard selection
Click enter on the hostname (kali is the default)
Click enter on Configure the network (blank is fine)
Enter a name for the new user (I’m going to enter blackgirlshack, you can enter whatever you like)
Enter a password for the blackgirlshack username, write it down, if you forget you have to redo this VM
Click Continue on Configure the Clock
Click Guided – Use entire disk
Click Continue on Partition disks
26 | P a g e
Click Continue on Partition disks (Finish partitioning)
Select Yes on Write changes to disks and click Continue
Click Continue on Software Selection
Click Yes on the Install the GRUB boot loader
Select the /dev/sda and click Continue
Click Continue on the Installation complete
VM will boot up
Enter that username and password you created
Click Terminal
Type ifconfig in the terminal
Write down the IP address (again this should be 10.something) (Mine is 10.0.2.16)
If it gives you the same IP address as the Windows machine, its prob because you’re not on the NatNetwork
Click Settings in VirtualBox
Click Network
Change Attached to: NAT Network
Select NatNetwork under Name:
Click OK
Go back to terminal and type ifconfig
Write down new IP address
Minimize VM
Broken Web App
Click Start in Virtualbox
Login with username root and password owaspbwa
Type ifconfig
27 | P a g e
Write down IP address (mine is 10.0.2.17)
Verify Connectivity
From the Broken Web App Type the following in the terminal
ping 10.0.2.15 (Windows Machine) after a couple rows click CTRL C
ping 10.0.2.16 (Kali Machine) after a couple rows click CTRL C
ping 10.0.2.17 (BWA) (Yes, I know we are pinging ourselves here) after a couple rows click CTRL C
28 | P a g e
From the Kali Machine ping 10.0.2.15 (Windows Machine) after a couple rows click CTRL C
ping 10.0.2.16 (Kali Machine) after a couple rows click CTRL C (Yes, I know we are pinging ourselves here)
ping 10.0.2.17 (BWA) after a couple rows click CTRL C
From the Windows Machine ping 10.0.2.15 (Windows Machine) after a couple rows click CTRL C (Yes, I know we are pinging ourselves here)
ping 10.0.2.16 (Kali Machine) after a couple rows click CTRL C
ping 10.0.2.17 (BWA) after a couple rows click CTRL C
29 | P a g e
Troubleshooting 1. My ifconfig is not working on my kali machine. Kali deprecated ifconfig and then
brought it back so if you’re using an older version of kali you may have to say/sbin/ifconfig. If this works then you need to add your ifconfig to your $path so you don’t have to type sbin each time.
2. My ifconfig is not working on my windows machine – ifconfig is a linux command, the windows equivalent is ipconfig.
3. My ping says the host is unreachable -Check your settings on the virtual box, make sure they’re all on the same network
4. My connection is correct and my ping says the host is unreachable still -Reboot the machine that is saying it is unreachable. In the example above, for windows, it is saying that the reply is actually coming from 10.0.2.15 when it should be coming from 10.0.2.16. That means that 10.0.2.16 is not responding, or 10.0.2.15 is not reaching it. So in this case 10.0.2.16 is the kali machine. I’m going to reboot my windows machine first
30 | P a g e
and if that doesn’t work I’m going to reboot my kali machine. Keep in mind that it is possible that when it reboots the IP address will change. make sure you check the ifconfig (linux machines) or ipconfig (windows machines) to see if the IP address has changed.
5. I’m not getting an IP on my windows machine after I restart – Restart again, make sure your virtualbox is up to date. Repeat until that IP address comes up (it took me a few times to get it to come up) If that doesn’t work Type Network Connections into search bar Right click and select Properties Select IP version 4 and click Properties Click Use the following IP address Set the IP address to 10.0.2.27 (something not on your network now) Subnet mask changes to 255.0.0.0 (that’s fine) Default gateway is 10.0.2.1 Click OK ipconfig from the terminal and see if the 10.0.2.27 shows up Ping the machines and make sure they all can talk to each other
