动手指南：托尼·罗宾森的虚拟机实验室构建实践

需积分: 10 146 浏览量更新于2024-07-18 收藏 33.11MB PDF 举报

"《构建虚拟机实验室：动手指南》是由Tony Robinson撰写的一本实践性极强的技术书籍。该书专注于介绍如何在实际操作中构建、管理和维护虚拟机实验室。作者以其丰富的经验，为读者提供了一套系统的构建方法，涵盖了虚拟化技术的基础知识和高级应用。书中详细探讨了虚拟机的概念，包括虚拟机（VM）的定义、类型（如全虚拟化、半虚拟化和硬件辅助虚拟化）以及它们在企业、教育和开发环境中的角色。读者可以了解到如何选择合适的虚拟化平台，如常见的VMware、Microsoft Hyper-V或Kubernetes等，并学习如何设置和配置这些平台以创建高效的虚拟环境。在构建过程中，本书会一步步指导如何设计实验室架构，包括网络配置、存储管理、安全性考虑，以及如何部署和管理操作系统实例。此外，它还会涉及实验场景的规划，如开发测试环境、灾难恢复演练或教育培训环境的构建。作者强调了实践经验的重要性，提供了大量的实战案例和脚本示例，使读者能够亲手实践并提升技能。书中还涵盖了虚拟机的生命周期管理，包括备份、恢复、性能监控和问题排查，确保实验室的稳定运行。《构建虚拟机实验室》一书不仅适合IT专业人士使用，作为培训教材也十分适宜。它强调了知识产权保护，明确指出在复制或传播内容时必须获得版权所有者许可。同时，读者可以放心，这本书的信息是基于“原样提供，无保证”的原则，尽管经过了细致的准备，但作者不承担因使用本书内容导致的任何损失或损害的责任。这本书是一本实用的工具书，旨在帮助读者掌握虚拟化技术的核心技能，并在实际工作中有效地运用这些知识来构建和管理自己的虚拟机实验室。"

18.18 I Can Still Access the pfSense webConfigurator with my Management
Workstation
............................................................................................................... 493
18.19 I Have Lost Access to the pfSense webConfigurator UI
.................................. 495
18.20 TCP Forwarding and You
....................................................................................... 499
18.21 Windows SSH Tunnels
....................................................................................... 500
18.22 Linux/BSD/OS X SSH Tunnels
........................................................................... 507
18.23 Testing your Dynamic Tunnels with FoxyProxy
...................................................... 510
18.24 Troubleshooting Dynamic
Tunnels...................................................................... 516
18.25 Testing Your Forward Tunnels
............................................................................... 520
18.26 Windows
............................................................................................................. 520
18.27 Linux/OS X/BSD
................................................................................................. 524
18.28 Understanding SSH
Tunnels.................................................................................. 527
18.29 Closing Notes on Jump Boxing
.............................................................................. 528
18.30 Key-Based Authentication: Managing SSH Keys for Tunneled
Connections ....... 528
19 IPS Installation
Guide......................................................................................................... 530
19.1 Installing and configuring Snort (via Autosnort)
............................................................ 530
19.2 Installing and configuring Suricata (via Autosuricata)
................................................... 536
19.3 Testing your IPS
Bridge............................................................................................... 541
20 Splunk Installation Guide
||||||||||||||||||||
||||||||||||||||||||

.................................................................................................... 544
20.1 Initial Setup (Server Installation)
.................................................................................. 545
20.2 (Optional) Requesting and Implementing a Splunk Dev License
.............................. 556
20.3 Universal Forwarder Setup
.......................................................................................... 560
20.4 Splunk TA for Suricata
............................................................................................. 563
20.5 Hurricane Labs Add-On for
Unified2......................................................................... 568
20.6 Starting The Forwarder +
Persistence...................................................................... 572
20.7 Testing Splunk and the Universal Forwarder
............................................................... 575
20.8 Generating The Test Battery
.................................................................................... 576
20.9 Verifying Results with Snort
..................................................................................... 584
20.10 Verifying Results with Suricata
............................................................................... 587
21 In Your Own Image
............................................................................................................ 590
21.1 Visions of What Might
Be............................................................................................. 590
21.2 Malware Analysis Lab
.............................................................................................. 591
21.3 Penetration Testing Lab
........................................................................................... 594
21.4 IT/OPs
Lab...............................................................................................................596
22 Summary
...........................................................................................................................
598
22.1 What Have We Learned
Today?.................................................................................. 598
23 Epilogue: We Need You (Now More than Ever)
||||||||||||||||||||
||||||||||||||||||||

................................................................. 600

1 Purpose of this Book

This guide is designed to teach you about virtualization and how to build out

the virtual machine lab environment that is easy to maintain, portable,

relatively well secured, and flexible enough to accommodate IT and security

students that need an environment to practice their trade. The goal is to teach

you how to build the baseline network and get familiar with using a hypervisor

of your choice. The initial network and VM (Virtual Machine) design we will

be working on together can easily be expanded upon, or swapped out to

support various roles, such as:

● Testing and/or developing new systems administration tools

● Learning the ropes for offensive security tools for red team

● Practicing with detection and response tools for blue team

● Providing a safe, secure environment to perform reverse engineering,

malware analysis

and/or exploit development with reasonably good security protections in place

This guide is not meant to be read from front to back. If you do this, you

are going to get really bored, and notice a lot of repetition. Think of this

book as a “Choose your own adventure” novel; this book covers how to

produce a robust virtual machine lab environment across five different

hypervisors. Unless you’re crazy, a VM enthusiast, or a researcher (or some

combination), the likelihood that you will want or need to read all five

hypervisor setup guides is going to be pretty low. Keeping that in mind, here

are my recommendations:

Read all the chapters up to, and including the Hypervisor Guides chapter in

order to develop a better understanding of the skills you’ll want and need to

create your own lab, better understand how virtualization works in general,

hardware recommendations, and finally, understand what you are building,

before you pick a hypervisor and actually start building your lab environment.

There are then five chapters detailing how to perform initial setup and

configuration of five unique hypervisors:

||||||||||||||||||||

● Oracle VirtualBox

● Microsoft Client Hyper-V ● VMware Workstation Pro ● VMware Fusion

Pro

● VMware ESXi

These chapters instruct you on how to acquire and install the hypervisor of

your choosing, configure the hypervisor and VMs to support the virtual

machine lab environment I will teach you how to build, and perform initial

installation and setup of those virtual machines. Choose a hypervisor that suits

your budget and your goals, and follow the setup instructions.

After performing the setup and configuration tasks for the hypervisor of your

choice, you are then meant to finish configuring the virtual machines in the lab

environment, as well as the hypervisor host or management workstation you

will be using to access your virtual machines. Each of the hypervisor setup

guides has a section entitled Next Steps that will guide you on

recommendations on what tasks need to be done to finish making the lab

functional (e.g. the IDS and Splunk installation chapters), as well as what

supplemental chapters to consider reading (e.g. enabling remote access for the

lab VMs, hardening hosted hypervisors on Windows, network design factors

for bare-metal hypervisors, etc.) for a much better experience when utilizing

your newly built lab environment.

1.1 A Note About Software Versions

Writing books for security and/or most IT disciplines is a daunting task. The

moment you put ink to paper, the information contained in the book deprecates.

You see this a lot with textbooks where there are multiple revisions that need

to be written to discuss updates in the material.

I’ll make mention of what software version for both hypervisors and operating

installation ISOs I used throughout the guides, but don’t obsess over using the

exact same version I used when I made these guides. These are merely the

software versions I had available to me while writing this book. As a security

practitioner, I always recommend updating your software when updates are

available, and using the most current software version available. This includes

hypervisors and OS distributions.

||||||||||||||||||||

If you’re from the future and using future versions of hypervisors, and future

ver sions of operating systems, you may notice that some configuration settings

may or may not be in the exact place a screen capture I made said it was going

to be in. Button colors and styles may have changed, radio buttons may now be

checkboxes, etc. This is because UI (User Interface) developers may or may

not have changed exactly where a given configuration setting is. This is just a

fact of life when it comes to new software releases. Sometimes they do it

because they can’t leave well enough alone, or sometimes they just want to

make the user experience (UX) for their product better.

So if you’re panicking because a given configuration setting has moved, or a

checkbox isn’t in the location indicated by my screen captures or instructions

indicated they should be, don’t panic. This is the first rule of any IT related

discipline. The second rule is that software changes. Sometimes arbitrarily,

sometimes for the better. The third rule is to consult the documentation.

Maybe the configuration option has migrated to a new menu location, or maybe

it was integrated as part of another, related setting. Consult the product patch

notes, documentation included with the software, and/or online

knowledgebase/forums for the product to find out where the configuration

setting lives now. The goal of this book isn’t to mindlessly instruct you to click

here, open this menu, and check these boxes, it is also for you to understand

WHAT the configuration settings that you are modifying do, and WHY I am

telling you to modify them so that if and when you want to experiment, make

changes, and add or remove features to your lab, you have the knowledge and

proper understanding what the settings do as opposed to what buttons you need

to press.

2 Prerequisite Knowledge

Here are some things you should have a basic to intermediate grasp of in order

to get the most out of this guide:

● TCP/IP Networking

○ Understand what an IP address is as well as how to configure an IP address,

default gateway and/or DNS servers in Windows as well as Linux/Unix-based

operating systems. (e.g. network adapter properties in Windows, ifconfig, ip

link, ip route, route, /etc/resolv.conf, etc.)

||||||||||||||||||||

剩余542页未读，继续阅读

macintoshy

粉丝: 0
资源: 6

动手指南：托尼·罗宾森的虚拟机实验室构建实践

OpenStack Virtual Machine Image Guide

Building Virtual Pentesting Labs for Advanced Penetration Testing(PACKT,2014)

Hands-on labs Workflow Service

java汽车租赁源码-DevopsWithGithub-Hands-on-Labs:GithubActions动手实验

azure-hands-on-labs：有关各种主题的Azure实验室的集合

Azure-oss-hands-on-labs:带有开源软件的Azure动手实验室资料-Source material

DBS-hands-on

Microsoft Hands-on Labs for Windows Workflow Foundation Beta 2.msi

Fast Sort on CPUs, GPUs and Intel MIC Architectures - Technical Report - Intel Labs (intel-labs-radix-sort-mic-report)-计算机科学

Hands-On GUI Application Development in Go

最新资源