Re: Building a Practical Penetration Test Lab

2010-11-13 Thread Ed Ahlsen-Girard
From: Chet Langin clangin () siu ! edu Date: 2010-11-12 14:50:59 -Original Message- snip I have run OpenBSD in production on both VMWare server and ESXi. It was the only machine facing the Internet that the auditors had no findings on. -- Edward Ahlsen-Girard

Re: Building a Practical Penetration Test Lab

2010-11-13 Thread Kevin Chadwick
On Sat, 13 Nov 2010 01:27:21 +0100 Tomas Vavrys vav...@cleancode.cz wrote: Is it better to test everything in Windows 7 via Virtualbox. I would have have thought from wherever your pentest tools are? KVM is another option For some things, epecially panics and load tesing/dos. OpenBSD would

Re: Building a Practical Penetration Test Lab

2010-11-13 Thread Kevin Chadwick
On Fri, 12 Nov 2010 14:56:24 -0800 Bryan Irvine sparcta...@gmail.com wrote: I've heard of people not even getting past the install even with a hardware virtualisation capable cpu. On VirtualBox this is probably more to do with the dynamic image size. You have to create the disk image as

Re: Building a Practical Penetration Test Lab

2010-11-13 Thread SJP Lists
On 13 November 2010 01:50, Chet Langin clan...@siu.edu wrote: -Original Message- snip I have run OpenBSD in production on both VMWare server and ESXi. It was the only machine facing the Internet that the auditors had no findings on. -- Edward Ahlsen-Girard Ft Walton Beach, FL

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Kevin Chadwick
On Fri, 12 Nov 2010 00:51:49 -0500 Jeremy Chase jeremych...@gmail.com wrote: 2010/11/11 Hugo Osvaldo Barrera h...@osvaldobarrera.com.ar: On 10/05/10 12:47, Toma9 Vavys wrote: Hello, I would like to become helpful OpenBSD developer (pentester) one day, so I have a few questions. I

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Michal
I can confirm that OpenBSD doesn't always work as a virtual machine. So I would focus on using OpenBSD as the host and using some other OS as a client in QEMU. If you insist and I don't know about the latest version, then vmware is likely much more reliable than virtualbox but still more

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread David Coppa
On Fri, Nov 12, 2010 at 11:15 AM, Michal mic...@sharescope.co.uk wrote: I can confirm that OpenBSD doesn't always work as a virtual machine. So I would focus on using OpenBSD as the host and using some other OS as a client in QEMU. If you insist and I don't know about the latest version, then

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Christiano F. Haesbaert
On 12/11/2010, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: If you insist and I don't know about the latest version, then vmware is likely much more reliable than virtualbox but still more problematic than a true install. There is a blog on the virtual box site by theo stating he can't believe

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Ed Ahlsen-Girard
From: Michal michal () sharescope ! co ! uk Date: 2010-11-12 10:15:34 I can confirm that OpenBSD doesn't always work as a virtual machine. So I would focus on using OpenBSD as the host and using some other OS as a client in QEMU. If you insist and I don't know about the

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Chet Langin
-Original Message- snip I have run OpenBSD in production on both VMWare server and ESXi. It was the only machine facing the Internet that the auditors had no findings on. -- Edward Ahlsen-Girard Ft Walton Beach, FL Which is good, but, then, it appears to me that VMWare and ESXi

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread L. V. Lammert
At 04:01 AM 11/12/2010, Kevin Chadwick wrote: If you insist and I don't know about the latest version, then vmware is likely much more reliable than virtualbox but still more problematic than a true install. There is a blog on the virtual box site by theo stating he can't believe any OS allows

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Kevin Chadwick
On Fri, 12 Nov 2010 13:06:45 -0600 L. V. Lammert l...@omnitec.net wrote: At 04:01 AM 11/12/2010, Kevin Chadwick wrote: If you insist and I don't know about the latest version, then vmware is likely much more reliable than virtualbox but still more problematic than a true install. There is a

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Bryan Irvine
I've heard of people not even getting past the install even with a hardware virtualisation capable cpu. On VirtualBox this is probably more to do with the dynamic image size. You have to create the disk image as a fixed size in order to complete the install. After that it works fine. -Bryan

Re: Building a Practical Penetration Test Lab

2010-11-12 Thread Tomas Vavrys
It's been a long time since I posted it. It was my first post to mailing list. Thank you for reminding me this. I've gotten in touch with stunning piece of work called OpenBSD, found a great friend and learned a lot of things thanks to OpenBSD. Thank you. It's amazing how time passes...

Re: Building a Practical Penetration Test Lab

2010-11-11 Thread Hugo Osvaldo Barrera
On 10/05/10 12:47, Toma9 Vavys wrote: Hello, I would like to become helpful OpenBSD developer (pentester) one day, so I have a few questions. I am CompSci student at the moment. I consider myself as a white hat person and I really enjoy everything about security. It's a shame that we need

Re: Building a Practical Penetration Test Lab

2010-11-11 Thread Jeremy Chase
2010/11/11 Hugo Osvaldo Barrera h...@osvaldobarrera.com.ar: On 10/05/10 12:47, Toma9 Vavys wrote: Hello, I would like to become helpful OpenBSD developer (pentester) one day, so I have a few questions. I am CompSci student at the moment. I consider myself as a white hat person and I really

Building a Practical Penetration Test Lab

2010-05-10 Thread Tomáš Vavys
Hello, I would like to become helpful OpenBSD developer (pentester) one day, so I have a few questions. I am CompSci student at the moment. I consider myself as a white hat person and I really enjoy everything about security. It's a shame that we need to sleep sometimes, isn't it? Back to the