Hack Forums
[BHCPU] Brotherhood academy lesson 1: Setting up a malware test box - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [BHCPU] Brotherhood academy lesson 1: Setting up a malware test box (/showthread.php?tid=4260010)

Pages: Pages 1 2 3


* - ▁▂▃▄▅▆M1kep▆▅▄▃▂▁ - Jun 15, 2014

Awesome tutorial! I always love these types of tutorials! So, can you explain how we would set up a safe bridge connection and what the dmz thing is, and fiddler... O.o


* - ▁▂▃▄▅▆M1kep▆▅▄▃▂▁ - Jun 17, 2014

So I guess not? Ok :/

Also when can we expect part two?


* - Aura - Jun 17, 2014

(Jun 17, 2014 12:25 AM)▁▂▃▄▅▆M1kep▆▅▄▃▂▁ Wrote:  So I guess not? Ok :/

Also when can we expect part two?

-Hyperion is a bit busy right now, Part II was supposed to be a week ago but his job (he owns his company) keeps him really busy. I'll link it that thread so he doesn't forget it alright ? 🙂


* - -Hyperion - Jun 17, 2014

Also moving this week so I have a shit ton of boxes to move.


* - Alex© - Jun 17, 2014

Really nice guide, looking forward to other parts.


* - tusharthehottie - Dec 2, 2014

I followed Aura's tutorial on installing a VM.There he had posted screenshots about installation of a windows 7 OS.What changes should I make in the settings if I want to do the testing on a windows 7 OS?Or should I use XP only?


* - Aura - Dec 2, 2014

(Dec 2, 2014 11:04 AM)tusharthehottie Wrote:  I followed Aura's tutorial on installing a VM.There he had posted screenshots about installation of a windows 7 OS.What changes should I make in the settings if I want to do the testing on a windows 7 OS?Or should I use XP only?

As long as all your sharing options between the host system and the VM are disabled, and you use a NAT adapter in the VM, you should be good.


* - -Hyperion - Dec 2, 2014

(Dec 2, 2014 11:04 AM)tusharthehottie Wrote:  I followed Aura's tutorial on installing a VM.There he had posted screenshots about installation of a windows 7 OS.What changes should I make in the settings if I want to do the testing on a windows 7 OS?Or should I use XP only?

there are no setting changes they exactly the same basically


* - Algo-rhythm - Dec 3, 2014

What is the idea behind enabling bridged networking?Is it to allow a direct connection to the router without passing through the host OS connection?


* - Aura - Dec 3, 2014

(Dec 3, 2014 10:34 AM)Algo-rhythm Wrote:  What is the idea behind enabling bridged networking?Is it to allow a direct connection to the router without passing through the host OS connection?

There's no idea behind enabling it, you don't want to enable it and stay on a NAT network.


* - Algo-rhythm - Dec 3, 2014

(Dec 3, 2014 10:42 AM)Aurа Wrote:  There's no idea behind enabling it, you don't want to enable it and stay on a NAT network.

I think you do enable it when portforwarding.But here we are not portforwarding.So,why has it been mentioned in the tutorial?


* - Aura - Dec 3, 2014

(Dec 3, 2014 11:00 AM)Algo-rhythm Wrote:  I think you do enable it when portforwarding.But here we are not portforwarding.So,why has it been mentioned in the tutorial?

Probably -Hyperion's inattention as he thought of it as a normal VM setup and not one you used for malware testing. Keep the NAT setting.


* - -Hyperion - Dec 3, 2014

(Dec 3, 2014 11:05 AM)Aurа Wrote:  Probably -Hyperion's inattention as he thought of it as a normal VM setup and not one you used for malware testing. Keep the NAT setting.

I mentioned it in the tutorial because when this was written it allowed easier monitoring with wireshark and it fooled some malware into thinking it was on a network. I now have a new program being tested that will allow this while still allowing a NAT setting.


* - SureAintMe - Dec 13, 2014

(Jun 1, 2014 02:05 PM)MaiTriCks Wrote:  I like this tutorial, I support Virtual Machine use. HF users should do it more often, however, I support VMware over all other vendors. You just can't beat them.

Man, thank the computer gods for virtualization! I don't know how I lived without it! I setup a couple ESXi servers and use both the vSphere client and VMware Workstation (on a local PC) for my lab environment. It's unbelievably handy and time-saving to be able to revert back to snapshots every step of the way and have multiple VMs with different OS's up and running to practice and learn penTesting. Plus, it's easier to contain an accidental or unwanted infection and adds another layer of security to the network.

VirtualBox is good enough for most basic users-- the price is certainly right! But since I get access to VMware Workstation from my work, I prefer it much over VBox.


* - Aura - Dec 13, 2014

(Dec 13, 2014 02:22 PM)SureAintMe Wrote:  Man, thank the computer gods for virtualization! I don't know how I lived without it! I setup a couple ESXi servers and use both the vSphere client and VMware Workstation (on a local PC) for my lab environment. It's unbelievably handy and time-saving to be able to revert back to snapshots every step of the way and have multiple VMs with different OS's up and running to practice and learn penTesting. Plus, it's easier to contain an accidental or unwanted infection and adds another layer of security to the network.

VirtualBox is good enough for most basic users-- the price is certainly right! But since I get access to VMware Workstation from my work, I prefer it much over VBox.

VirtualBox is good for anyone, it's just easier to use VMWare Workstation when you have 10+ VMs. I currently use VirtualBox with 6-7 VMs and I have no issues with it.