Assessment Prep 7.1 - AinsleyPlayer/SEC-350 GitHub Wiki
Deliverable 1
For future reference -
- traveler. A WAN based road warrior user running Windows 10. (this replaces the linux rw01)
- edge01. A vyOS Firewall with three interfaces (WAN, DMZ, LAN). You will need to add an interface using vCenter. (this replaces fw01)
- nginx01. A DMZ based nginx web server running Ubuntu (this replaces web01 and apache)
- dhcp01. A LAN based dhcp server running Ubuntu
Requirements:
All systems should have an accurate hostname. All Linux systems should have a named sudo or administrator user. The two new ubuntu systems do not have a host firewall enabled, this is ok (for now) wks1, mgmt01 should be able to surf the internet. wks1, mgmt01 should be able to navigate to nginx01 mgmt01 should be able to ssh to nginx01 nginx01 and dhcp01 should have wazuh agents installed and be able to connect to wazuh nginx01 should have a custom web page (practice this on jump) traveler should be able to get to nginx01's custom test page by navigating to edge01's WAN IP address. traveler should be able to perform ssh keybased authentication with jump. Traveler is a Windows box, but ssh on powershell is nearly exactly the same as linux to include key generation. You will need to add a new public key to authorized_keys. dhcp01 should serve a pool of dhcp addresses to the LAN from .100 to .150. WKS1 should use dhcp addressing
Setups of Boxes:
Edge01 -
Network Adapters:
Configure:
(take a snapshot)
Travler -
Network Adapters:
IP:
New User:
Admin:
Rename PC:
Then restart your PC and log in with your named user. (take a snapshot)
Nginx
Network Adapters:
Configure:
Run the command cd /etc/netplan
then sudo nano 00-installer-config.yaml
to edit the file we need to configure.
Change the file from this
To this
Then Ctrl+S and Ctrl+X
Then run the command sudo netplan apply
Change hostname and make user:
Let all the defults be used for user information
Also run the command sudo passed ainsley
and change your password
Log in with named user:
Install Nginx:
Web Server:
Then Ctrl+S and Ctrl+X, followed by running the command sudo systemctl restart nginx
DHCP
Network Adapters:
Configure:
Run the command cd /etc/netplan
then sudo nano 00-installer-config.yaml
to edit the file we need to configure.
Change the file to this
Then run the command sudo netplan apply
Users and Names:
DHCP Instillation: