HELP - CEH Lab setup

greenland888

I am going to prepare for CEH V7 exam. how to setup labs? Is there any lab manual recommended? Thanks.

jamesleecoleman

I would recommend using virtual machines for the labs so you don't accidentally mess up the host operating system. I suggest using metasploitable (Metasploitable - Metasploit Unleashed) and backtrack in a vm. Book backtrack comes with netcat, nmap, snort, and some other programs so you don't have to install them.

JDMurray

To back up what jamesleecoleman said, use the (free) VMware Player 4 to run the (free) Linux distro BackTrack 5 R2, which is downloadable as a ready-to-run VM. Using this set up, you can do Linux-to-Linux attacks on the same computer by running multiple instances of Players (big CPU and lots of RAM recommended). Also load an old (pre-SP3) Windows XP in another VM and you have a Window target to exploit.

If you are looking to learn pen testing, vulnerability analysis, security assessment, etc. any time you spend learning BT5 and VMware Player (or Workstation) will not be wasted effort.

the_hutch

On a more serious note...take the CEHv8 exam. Its the exact same content, but has ANSI accreditation.

Quantumstate

We can't. Until 2013.

the_hutch

Yeah, I just found that out too.

Quantumstate

To set up for my labs I used my existing VirtualBox install (over Debian) and created virtual machines for BackTrack and Fedora Security Spin. You can install directly from the .iso on your host machine.

I set Networking to Bridged, so they would reach over the host machine and connect directly to the outside-facing interface. (wlan0) The default setting in VBox is NAT, which means the VM is passing through the host and is protected by its firewall; but my firewall is very tight in and out, with only ports open that I absolutely need, so is not suited for a security scan. Anyway, if my target fights back I don't want them messing with my host, so bridging it is.

Still need a firewall for the guests, so I installed Shorewall and closed all incoming ports and opened all outgoing ports to facilitate scans. Here's a neat little trick in Linux: lsof -i -n -P

Needless to say, install Guest Additions in all guests.

For labs I'm just installing and testing the tools recommended in All-In-One. Should be all you need according to several guys here. (including Hutch) I'm 25% through All-In-One, and have applied for permission to self study.

P.S. - After ten years it turns out that Gnome is still limited and sucks. Staying with KDE.

Searchbox

for lack of a better thread, i thought id necromance this one. sorry

im trying to autodidact myself into the pen testing world, and got tons of books and stuff from various places. one of the items i got was a set of 4 disc's. supposedly some kind of CEH lab CD's.

Labeled "CEH v6 LAB DVD 1"- 4 (4 separate disc's)

i get nothing when i insert disc's in a windows machine. so a couple questions are, am i missing some other disc's like a some CEH Linux ISO or something. im not very failure with Linux stuff yet. i have a fedora 16 dedicated laptop and BT5 R2 USB/flash drive boot-able, but am like a kid in Disney land not knowing where to start. So i don't know if trying to load the DVD's on one of my currently available Linux distro's would make a difference.

ill be honest and say i got the Lab DVD's on EBAY and am assuming i got ripped off. Thank You for any response.

jamesleecoleman

Seachbox:

Did you check to see if there were files on the disk? I don't think that you need the CEH cds to learn about pen testing. There are a lot of videos on youtube and free tools for you to learn about from documentation. I suggest that you install metasploitable and BT5R3 in a VM and learn about metasploit, nmap and wireshark to start off.

Searchbox

no sir, i can not check/see files on disk(s) they don't register in anyway. no auto play, not file explorer accessible, doesn't even register that there's a disk in the drive, and i have verified the drive does work properly

maybe im thinking the CEH "lab" is something that it isnt going to be.
the company i work for has given me access to skillport which has alot of compTIA , security+ , A+ etc... am looking for something a little more interactive than skillport - you tube - 20 books all reiterating the same things

but since i've had no good clue where to start, i guess i will take your advice on a starting point of the things you mentioned

TY for your reply sir

jamesleecoleman

I don't know what to tell you about the disks.

I would suggest studying Security+ material too.

Your lab will be what you can make it be and it will take some time to build it. I'm still working on my lab and I started over a year ago.

Quantumstate

Well v6 labs wouldn't be very helpful for v7 anyway.

If you're self-study just use the All-In-One. If you're new to Linux, it will take a while to adjust to that alone.

gabypr

This is what i have at home to practice hacking stuff:

Virtual Box https://www.virtualbox.org/wiki/Downloads

Backtrack 5 R3 (new version) Downloads

Damm Vulnerable Linux (DVL) http://www.damnvulnerablelinux.org/

Windows XP SP2 and/or Windows 7

Metasploitable Metasploitable - Metasploit Unleashed

Damm Vulnerable Web App DVWA - Damn Vulnerable Web Application

With these machines you should be able to practice many tools and techniques. Good luck.

jamesleecoleman

I would also suggest getting a wireless router too.


Maybe I should share my lab too...

I have backtrack 5r2 in VMware

Metasploitable/Win7/WinXP (unpatched) in Vm

Cisco 2620XM router

Ubuntu with Snort in Vm (having troubles)

Nessus on both computeres

*Had DVWA but I had to reload my computer.


I try to run BTR2 from the laptop.

I2Secure

if u have purchased books in books and with cd the comlete material is been provided