Building a Home Lab for Offensive Security and Security Research

https://systemoverlord.com/2017/10/24/building-a-home-lab-for-offensive-security-basics.html

by kungfudoi • 9 years ago

93 21 9 years ago

systemoverlord.com

Cieplak• 9 years ago

Depending on the threat model, might also want to install RF insulation to mitigate Van Eck phreaking [1].

[1] https://en.wikipedia.org/wiki/Van_Eck_phreaking

tehsurf• 9 years ago

There is a whole reddit on homelabs [1]. Always good to get new ideas.

[1] https://www.reddit.com/r/homelab/

systemoverlord2• 9 years ago

Yeah, some of those setups are serious. At a certain point, you're living in a datacenter instead of having a lab in your home. :) I've seen a couple that got new 20 amp circuits dropped for their labs.

matt4077• 9 years ago

I find the self-importance of these self-anointed "security professionals" quite annoying.

Case in point: this isn't a "lab". It's a computer running some software. You could replace this article with "buy a Macbook and install metasploit and VirtualBox".

(Or the sibling comment recommending tinfoil wallpaper)

bendews• 9 years ago

The author works as a Security Engineer for google, not saying credentials are the be-all-end-all but I think they are able to claim themselves as a security professional without too much worry.

arkades• 9 years ago

I know computational biologists whose setup is pretty much the same. But their computer is in a closet on-campus instead of a garage, so I guess that counts as a lab...?

Raphmedia• 9 years ago

Isn't any room dedicated to work (and research) on computers a de-facto computer lab?

throwaway2016a2• 9 years ago

I'm curious why in "pre-made VMs" there is no mention of Kali Linux[1]. I was under the impression it was by far the most robust / mature implementation.

Plus Mr. Robot uses it so that means it's good :p

[1] https://www.kali.org/

mi100hael• 9 years ago

Looks like that section focuses on how to get some vulnerable services running in the lab to test against, which is why Kali isn't on the list as it's an offensive distro for your workstation.

Kali is very convenient and well-maintained, but at the end of the day it's really just Debian with a bunch of common security tools pre-installed. I usually default to using it since it's easy to install and I know it pretty well, but it's perfectly reasonable for someone to run vanilla Debian or Fedora or whatever they prefer and customize the tooling themselves instead.

ygjb• 9 years ago

Going to second this, I keep a relatively up to date kali vm on hand, and it saves me the trouble of configuring and maintaining $randomtool I need when I stumble across the need for it, but I have my usual toolkit of security tools that I use on a daily basis deployed on my host OS as well.

graystevens• 9 years ago

It definitely is the most popular OS for security peeps, however those VMs mentioned in the article are purpose built to be vulnerable. They allow someone to spin them up and attempt to hack the boxes (likely using Kali) as a way of honing their offensive security skills.

throwaway2016a2• 9 years ago

Wow, thanks, I completely misread that part.

fosco• 9 years ago

another way is to increase defensive skills by starting with Damn Vulnerable Linus (DVL) and trying to close all holes and having someone try to crack it.

for fun of course :-)

iraklism• 9 years ago

“There’s a couple of good options (and this is not an exhaustive list) for pre-made tool VMs. Obviously you have Kali Linux for offensive tools and penetration testing, but you can also use Security Onion for the defensive side – intrusion detection and network security monitoring.”

Seems like it’s there.

bluedino• 9 years ago

> Hardware Option C: Dedicated Hardware

This is the way I went. You can get a lot of used machine for $300 these days. A pair of ThinkPads for Windows and Linux, a MacBook for OS X, and a dual quad Xeon Dell server is plenty and barely cost over $1,000 US.

insanebits• 9 years ago

Why would you really need physical machines for linux and windows, you can always virtualize clients and run dual boot mac/windows or single thinkpad with win/linux dual boot.

If budget is tight used servers are great value, for example del R710 is cheap with plenty of horsepower. Downside being space and sound.

jeffmcjunkin3• 9 years ago

I prefer getting a really powerful workstation and doing virtualization from there. Example: http://natex.us/enthoo-128kit

(No affiliation with Natex, but I've bought that kit and I enjoy the overkill of 16 cores and 128gb of RAM)

jeffmcjunkin3• 9 years ago

I'll admit I'm a little biased here (I made the preso), but here are a few more resources for those interested in building a home lab:

"Building Your Own Kickass Home Lab" -- bit.ly/kickasslab (or https://docs.google.com/presentation/d/1V-mWiyaJ3I6HhXRxH1M5...)

Recorded webcast version -- https://youtu.be/uzqwoufhwyk

I talk about hardware, software (choose your own host OS, consider VMware Workstation), operating systems, vulnerable builds, example labs, and some ideas of what to test.

systemoverlord2• 9 years ago

Hi Jeff! I actually hadn't seen your presentation before I wrote the post, I'm going to take a look at it today and might update some sections based on it. Thanks for the resource!

jeffmcjunkin3• 9 years ago

No problem! Thanks for writing that blog post, there's lots of great stuff there :)

Building a Home Lab for Offensive Security and Security Research

Related Stories