Now, one of the biggest things we like to pride ourselves on here is the fact
that we can actually train in a safe environment to where we don't actually r
attle the cages of people to call the cops on us.
Ha ha!
But that's why in this particular skill and moving forward, we actually have a
playground for us to be able to go through and start doing exploits and
vulnerability assessments in the safe haven of our virtual labs here.
And I've created for you a way to do that inside of the lab that's associated
with this skill and also in the playground labs of the course overall to where
you ain't got to worry about cops coming and banging on your door because you
were messing with somebody's sight.
And I'm using a tool called B-WAP.
Now, I have the link for this particular playground below, but there are some
things I want you to know before you get into this.
And first and foremost is that B-WAP is primarily for either a virtual box or
VMware.
It's not really friendly with the Hyper-V environment.
That being said, I had to make a lot of behind the scenes changes in order to
get this to work inside of our virtual lab environment that we have for ADEPT
and CBT Nuggets.
I'm not saying you can't do it.
I'm just saying that there are some things to think about.
If you decide to do this on your own at home and make your own environment,
there are some things I want you to know that you got to download.
First of all, MySQL, MySQL Workbench, PHP 7.4.08 because B-WAP won't work with
newer versions of PHP.
In addition to that, after you do all that and get B-WAP installed, you're
going to need to disable the firewall on the actual virtual machine that you're
utilizing this on.
The reason for that is because we have two different things that we're studying
for at this particular point in our course.
Right now, we're looking at Web exploits and vulnerabilities against servers
and applications.
Later on, we'll start getting into the actual firewall and networking of the
actual systems and overall organization itself.
But I wanted to separate the two right now and make it a little bit easier for
us to be able to use programs in upcoming skills like ARP Suite and also
whatever other fuzzers that we decide to use.
So keeping that in mind, I do want to hop on over and show you real quick that
this is the Windows 10 box inside of our ADEP lab and I have it labeled as
Windows 10 B-WAP.
Now, this runs behind the scenes on top of IIS and you may remember seeing that
earlier in the skill when we started doing our examination of scouting the
network out and seeing that we had B-WAP.test on the actual FQDN listing.
That's because on the actual Hyper-V inside of this and overall lab itself, I
've added DNS to the actual host and I've added a specific record and to point
to this particular Windows 10 system as B-WAP.test as its FQDN inside of a top
level A record.
The reason I did that is to make it a little bit easier on yourself and inside
of the actual Hyper-V environment, we're going to open up edge real quick.
And while we wait for this to open up, B-WAP allows us to, and as I said, I
have the link for this below, allows us to go in and play with different
vulnerabilities that we choose ourselves to go in and see if we can catch that
vulnerability as it happens.
Now, on any of these systems inside of our virtual environment, Cali included,
you will be able to go to B-WAP.test.
It's HTTP as we're not getting into SSL or TLS yet.
And you can see here that we are at the actual log-in for the site itself.
The log-in and password information is inside the VM information text document
on the actual desktop of this Hyper-V.
But it's pretty simple. B is in the bumpy and the password is bug.
It says it right above there where it says enter your credentials.
Now when you do this, you'll go straight to a page here that says portal.
And that'll allow you to go through and select which bug do you want to hack
today.
What happens is you select a particular bug and click hack.
And depending on the type of bug, you can use the appropriate tools and
measures to be able to go through and hack this particular B-WAP.test site
inside of this virtual environment.
Now for those familiar with places like Hack Me and other sites along that
nature, this is kind of the same thing, but in an isolated environment where it
doesn't reverse the actual internet itself.
But do keep in mind that this Hyper-V and lab simulation environment still has
connection to the overall internet.
So when you're doing these exercises and you want to expand, think about it for
a moment before you actually go out and go to those different systems and make
sure that you have proper permissions from the owner of that system or network.
But this will be the environment that we use and I would highly encourage you
to go through and take a look at this and get familiar with it.
And as we reuse this skill, I'll have it in this set that you find it in.
So it won't be like previous skills where we did a little bit, saved, moved on,
had a different lab.
We'll be starting at this base point moving forward because we know that most
of our tools are in Cali already and we're going to be sticking to Cali.
Seeing as how this is kind of a Cali driven course for understanding in the pen
testing world.