Searching_ _ _
March 28th, 2009, 12:53 PM
-{ Quote: "The first image is the target, a complete Linux installation with PHP, MySQL and Apache installed. The target is set up to simulate a multi-user machine so there are numerous accounts on the machine representing users. Users have files in their home directories and email as well. Every effort was made to simulate a real, production machine.
The second image is the attack, or testing, platform. This is a CentOS Linux based virtual machine which has many of the testing tools pre-installed and configured for use with the exercise. It is not necessary to use this image if you already have access to the tools on your own machine. The documentation outlines all the tools used for the exercise.
The exercise also consists of thorough documentation, attached to this article. The documentation is distributed in PDF format and will guide users step by step through the exercise. The documentation outlines one of the many paths an attacker could pursue to gain root access to the target machine. The documentation also outlines the tools used in the exercise, why they work, and how they could be defended against. It is not necessary to utilize the attack image if you can install the tools described in the documentation on your own host operating system.
" }-
http://lampsecurity.org/capture-the-flag-4
The second image is the attack, or testing, platform. This is a CentOS Linux based virtual machine which has many of the testing tools pre-installed and configured for use with the exercise. It is not necessary to use this image if you already have access to the tools on your own machine. The documentation outlines all the tools used for the exercise.
The exercise also consists of thorough documentation, attached to this article. The documentation is distributed in PDF format and will guide users step by step through the exercise. The documentation outlines one of the many paths an attacker could pursue to gain root access to the target machine. The documentation also outlines the tools used in the exercise, why they work, and how they could be defended against. It is not necessary to utilize the attack image if you can install the tools described in the documentation on your own host operating system.
" }-
http://lampsecurity.org/capture-the-flag-4