Penetration Testing Bootcamp - Setting Up A Pentesting Lab

Key Takeaways

hey guys welcome back to the penetration testing boot camp in this video i'm going to be showing you how to set up your own virtual pen testing lab or at the very least the tools that we're going to be using and the various frameworks that you can use based on the operating system you actually choose to use um so let's take a look at the requirements so first of all we're going to be using virtualbox now you have you you can use any hypervisor of your choice so you can use vmware or whatever you're actually comfortable with secondly we're going to be using kali linux as our main penetration testing distribution you can use any other penetration testing distribution of choice um so if we take a look at some quick examples of some of these pen testing distributions most of which i've actually covered so we have kali linux power to s black arch and back box and now these these are this is not really an extensive list of all of the distributions available to you but you know you can actually go through all of them and find out what you're comfortable with i have various videos where i cover the installation of all of these distributions so they'll be linked in the description section if you're interested in checking them out i've also created a playlist that you can use now when talking about pen testing frameworks uh let's start off with linux right so if you want to install a particular tool or you want to install a complete uh a specific set of tools rather than using an entire pen testing distribution you can utilize you know a framework like katulin or the pen testers framework more of which i'll actually touch upon in a second and then the various windows tools and frameworks that you can actually use to to actually utilize various pen testing tools one example of this is with the windows subsystem for linux now no that's not an exclusive windows tool but it essentially allows you gives you access to distributions like kali linux in a in the form of a subsystem where you can use the kali linux repositories to install the tools that you need and then we have pentax box which is a great um sandbox environment or a framework that allows you to run various pen testing tools within windows uh and you i'll actually show that to you right now so let me just open up my browser here and we can get started so uh if you are interested in in any linux distributions or in any pen testing distributions make sure to check them out uh you know on distro watch that's a great starting point uh as for kali linux we're going to be using the vm images here so if i you can actually just go to offensivesecurity.com and you're looking for the downloads page and we are going to get the the vm images now many people ask me why would i recommend the vma image and of course this is quite self-explanatory these are already pre-packaged environments that have you know already have cali installed and you don't need to perform any manual install everything is standardized and you can easily set them up take snapshots etc and it it's really better than installing kali manually especially in a virtualized environment so you can go into the offensive security vm page and download the uh the specific version for the type of hypervisor that you're using they currently only support virtualbox hyper-v and of course vmware so you can you can actually use that if you want i highly recommend that you also have pirate west which many of you are actually fond of in my case i'm not going to be going to be using parrot west because i've been having a lot of issues with it i do want to have students running into other issues that i cannot actually fix or uh remediate because of various driver issues all right as for black arch linux i've made tons of videos covering how to install arch linux how to use the uh the black arch repository to install the specific tools you want however if you want to run black arch linux i have those videos already on the channel so you can actually check it out how to install it how to install a desktop environment of choice how to install xfce and then of course how to set it up with virtualbox so that you don't run into any issues so i've already explained that our hypervisor of choice is going to be virtualbox as the motif of this course is is of course structured towards an open source approach this is katulin all of these links will be in the description section so katoolin essentially allows you to install or to use the kali repositories to install pen testing tools from the kali repositories on any debian or ubuntu based distribution so again i have a video covering how to use it and i would recommend if you are looking for a framework to install tools that you actually use uh the pen tester the pentesters framework which i've also added and i'll actually show you the playlist right now so this allows you to install manage update various pen testing tools and again you can run it on any distribution you want so that's the great thing now for windows we have pen test box and i've already covered the windows subsystem for linux which i've added to the playlist i'll show you that right now so the great thing about pentest box is that it's an open source pre-configured portable penetration testing environment for the windows system so you can take a look at the features here it's very simple to use it also has java installed which means tools like their buster and burp suite work perfectly fine and you don't need any dependencies no linux utilities and it's extremely it's extremely performance based because you're not really hypervising anything or you're not really virtualizing anything so again all of these links will be in the description section uh as for the vulnerable boxes and the vms that we're going to be using they're all going to be coming from uh vonhub and of course that is also self-explanatory the reason being is this course is open source which means everyone should be able to access the materials without any issues and uh we've already curated a huge list of vulnerable boxes that are extremely useful or helpful in teaching you various pen testing concepts and we're going to be using vuln hub the reason we're not going to be using hack the box is because the retired machines which are the only ones we can demonstrate uh actually do require a paid subscription which not which mostly or are quite a few students are not really comfortable with so we've opted to use one knob and the boxes are just as good all right now talking about the playlist that i've set up you can see that i've actually covered all of these topics or i've actually covered how to install or set up your environment quite in depth i would recommend uh actually getting started with the how to setup how to set up a virtual penetration testing lab first and then you can take a look at all of the frameworks here i've also covered how to install kali linux on vmware uh you know from scratch if you want to so i have the pentest framework windows subsystem for linux and pen test box and also katoolin so you can actually go through that and you can set up your environment however you want to however i recommend uh as part of this course that you actually set up the virtual uh your virtual pen testing lab using this video right here the playlist is under uh right over here so it's under how to set up a penetration testing lab and you have the pen testing bootcamp playlist here which is going to be separate uh and we'll be adding videos that way so that's pretty much all i wanted to cover in this video at the moment uh in the next section we're gonna get started with information gathering and reconnaissance so hope you guys are excited and we'll start releasing the various documented versions of these videos on our website that we're currently pointing up or finishing right now um so that's gonna be it for this video guys uh thank you so much for watching if you have any questions suggestions leave them in the comment section or you can hit up us you can hit us up on our social networks and i will be happy to answer them so i'll see you in the next video [Music] you