Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Labtainers - A Docker-based Cyber Lab Framework

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFxFYgvNkTy2U7csMMD5N9X8bnLisTR7mpaXHLk5gvRCZRp7lXT_RCgQ4U-yI5BOZBfXVArP0saZZADjeOKcDMccGQzQsBTVrmCxlWX_spl7E4COwGnwf2nF8IVvmetOuWGVaWozKp1vQcNSsTtgTOXM54RuM9MC6FdZ3SpX87mkSiWoSUEP7SPNE6/s1600/labtainer.png Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises.

* Consistent lab execution environments and automated provisioning via Docker containers
* Multi-component network topologies on a modestly performing laptop computer
* Automated assessment of student lab activity and progress
* Individualized lab exercises to discourage sharing solutions

Labtainers provide controlled and consistent execution environments in which students perform labs entirely within the confines of their computer, regardless of the Linux distribution and packages installed on the student's computer. Labtainers run on our [VM appliance][vm-appliancee], or on any Linux with Dockers installed. And Labtainers is available as cloud-based VMs, e.g., on Azure as described in the Student Guide.

See the Student Guide for installation and use, and the Instructor Guide for student assessment. Developing and customizing lab exercises is described in the Designer Guide. See the Papers for additional information about the framework. The Labtainers website, and downloads (including VM appliances with Labtainers pre-installed) are at https://nps.edu/web/c3o/labtainers.

Distribution created: 03/25/2022 09:37
Revision: v1.3.7c
Commit: 626ea075
Branch: master Distribution and UsePlease see the licensing and distribution information in the docs/license.md file. Guide to directories*
scripts/labtainers-student -- the work directory for running and testing student labs. You must be in that directory to run student labs.

*
scripts/labtainers-instructor -- the work directory for running and testing automated assessment and viewing student results.

*
labs -- Files specific to each of the labs

*
setup_scripts -- scripts for installing Labtainers and Docker and updating Labtainers

*
docs -- latex source for the labdesigner.pdf, and other documentation.

*
UI -- Labtainers lab editor source code (Java).

*
headless-lite -- scripts for managing Docker Workstation and cloud instances of Labtainers (systems that do not have native X11 servers.)

*
scripts/designer -- Tools for building new labs and managing base Docker images.

*
config -- system-wide configuration settings (these are not the lab-specific configuration settings.

*
distrib -- distribution support scripts, e.g., for publishing labs to the Docker hub.

*
testsets -- Test procedures and expected results. (Per-lab drivers for SimLab are not distributed).

*
pkg-mirrors -- utility scripts for internal NPS package mirroring to reduce external package pulling during tests and distribution. SupportUse the GitHub issue reports, or email me at mfthomps@nps.edu

Also see https://my.nps.edu/web/c3o/support1 Release notesThe standard Labtainers distribution does not include files required for development of new labs. For those, run ./update-designer.sh from the labtainer/trunk/setup_scripts directory.

The installation script and the update-designer.sh script set environment variables, so you may want to logout/login, or start a new bash shell before using Labtainers the first time.

March 23, 2022

* Fix path to tap lock directory; was causing failure of labs using network taps
* Update plc-traffic netmon computer to have openjfx needed for new grassmarlin in java environment
* Speed up lab startup by avoiding chown -R, which is very sl[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Labtainers - A Docker-based Cyber Lab Framework

5 viewsedited 22:51

KitPloit - PenTest Tools! Labtainers - A Docker-based Cyber Lab Framework https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFxFYgvNkTy2U7csMMD5N9X8bnLisTR7mpaXHLk5gvRCZRp7lXT_RCgQ4U-yI5BOZBfXVArP0saZZADjeOKcDMccGQzQsBTVrmCxlWX_spl7E4COwGnwf2nF8…

ow in docker.
* Another shot at avoiding deletion of the X11 link in container /tmp directory.
* Fix webtrack counting of sites visited and remove live-headers goal, that tool is no longer available. Clarified some lab manual steps.

March 2, 2022

* Add new ssh-tunnel lab (thanks GWD!)
* Fix labedit failure to reflect X11 value set by new_lab_setup
* Add option to not parameterize a container

February 23, 2022

* labedit was corrupting start.config after addition of new containers
* Incorrect path to student guide in the student README file; dynamically change for cloud configs
* Incorrect extension to update-labtainer.sh
* Msc guide enahancements
* Update the ghidra lab to include version 10.1.2 of Ghidra

February 15, 2022

* Revert Azure cloud support to provision for each student. Azure discourages sharing resources.

January 24, 2022

* Azure cloud now uses image stored in an Azure blob instead of provisioning for each student.
* Added support for Google Cloud.

January 19, 2022

* Introduce Labtainers on the Azure cloud. See the Student Guide for details on how to use this.

January 3, 2022

* Revise setuid-env lab to add better assessment; simlab testing and avoid sighup in the printenv child.
* Fix assessment goal count directive to exclude result tag values of false.
* Do not require labname when using gradelab -a with a grader started with the debug option.
* Revise capinout (stdin/stdout mirroring) to handle orphaning of command process children, improved documentation and error handling.
* Added display of progress bars of docker images being pulled when a lab is first run.
* User feedback on progress of container initialization.
* The pcap-lib lab was missing a notify file needed for automated assessment; Remove extraneous step from Lab Manual.

November 23, 2021

* Disable ubuntu popup errors on test VM.
* Fix handling of different DISPLAY variable formats.

October 22, 2021

* Revise the tcpip lab guide to note a successful syn-flood attack is not possible. Fix its automated assessment and add SimLab scripts.
* Change artifact file extension from zip to lab, and add a preamble to confuse GUI file managers. Students were opening the zip and submitting its guts.
* Make the -r option to gradelab the default, add a -c option for cumulative use of grader.
* Modify refresh_mirror to refer to the local release date to avoid frequent queries of DockerHub. Each such query counts as an image pull, and they are now trying to monetize those.

September 30, 2021

* Change bufoverflow lab guide and grading to not expect success with ASLR turned on, assess whether it was run.
* Error handling for web grader for cases where student lacks results.
* Print warning when deprecated lab is run.
* Change formatstring grading to remove unused "_leaked_secret" description and clarify value of leaked_no_scanf.
* Also change formatstring grading to allow any name for the vulnerable executable.

September 29, 2021

* Gradelab error handling, reduce instances of crashes due to bad zip files.
* Limit stdout artifact files to 1MB

September 17, 2021

* Ghidra lab guide had wrong IP address, was not remade from source.

September 14, 2021

* Example labs for LDAP and Mariadb using SSL. Intended as templates for new labs.
* Handle Mariadb log format
* Add per-container parameters to limit CPU use or pin container to CPU set.
* Labpack creation now available via a GUI (makepackui).
* Tab completion for the labtainer, labpack and gradelab commands.
* New parallel computing lab ``parallel'' using MPI.

August 3, 2021

* Add a "WAIT_FOR" configuration option to cause a container to delay parameterization until another container completes its parameterization.
* Support for Mariadb log formats in results parsing
* Remove support for Mac and Windows use of Docker Desktop. That product is too unstable for us to support.
* Supress stderr messages when user uses built-in bash commands such as "which".
* B[...]

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 22:51

Hacking Articles Tips Tricks Videos Tutorials

ug fixes to makepack/labpack programs.

July 19, 2021

* Add a DNS lab to introduce the DNS protocol and configuration.
* Revised VirtualBox appliance image to start with the correct update script.
* Split resolv.conf nameserver parameter out of the lab_gw configuration field into its own value.
* IModule command failed if run before any labs had been started.

July 5, 2021

* Errors in DISPLAY env variable management broke GUI applications on Docker Desktop.

July 1, 2021

* Support Mac package installation of headless Labtainers.
* The routing-basics lab automated assessment failed due to lack of treataslocal files
* Correct typos and incorrect addresses in routing-basics lab, and fix automated assessment.
* Assessment of pcapanalysis was failing.

June 10, 2021

* All lab manual PDFs are now in the github repo
* Convert vpnlab and vpnlab2 instructions to PDF lab manuals.

May 25, 2021

* Add searchable keywords to each lab. See "labtainer -h" for usage.
* Expand routing-basics lab and lab manual
* Remove routing-basics2 lab, it is now redundant.
* sudo on some containers failed because hostnames remove underscores, leading to mismatch with the hosts file. Fix with extra entry in the hosts file with container name sans underscore.
* New Labpack feature to package a collection of labs, and makepack tool to create Labpacks.
* Error check for /sbin directory when using ubuntu20 -- would be silently fatal.
* New network-basics lab

May 5, 2021

* Introduce a new users lab to introduce user/group management
* Surpress Apparmor host messages in centos container syslogs

April 28, 2021

* New base2 images lacked man pages. Used unminimize to restore them in the base image.
* Introduce a OSSEC host-based IDS lab.

April 13, 2021

* CyberCIEGE lab failed because X11 socket was not relocated prior to starting Wine via fixlocal.

April 9, 2021

* New gdb-cpp tutorial lab for using GDB on a simple C++ program.
* Floating point exceptions were revealing use of exec_wrap.sh for stdin/stdout mirroring.

April 7, 2021

* ldap lab failed when moved to Ubuntu 20. Problem traced to problem with nscd cache of pwd. Move ldap to Ubuntu 20

March 23, 2021

* Parameterizing with RANDOM did not include the upper bound.
* Add optional step parameter to RANDOM, e.g., to ensure word boundaries.
* db-access lab: add mysql-workbench to database computer.
* New overrun lab to illustrate memory references beyond bounds of c data structures.
* New printf lab to introduce memory references made by the printf function.

March 19, 2021

* gradelab ignore makdirs error, problem with Windows rmtree on shared folders.
* gradelab handle spaces in student zip file names.
* gradelab handle zip file names from Moodle, including build downloads.

March 12, 2021

* labedit UI: Remove old wireshark image from list of base images.
* labedit UI: Increase some font sizes.
* grader web interface failed to display lab manuals if the manual name does not follow naming conventions.

March 11, 2021

* labedit UI add registry setting in new global lab configuration panel.

March 10, 2021

* labedit UI fixes to not build if syntax error in lab
* labedit UI "Lab running" indicator fix to reflect current lab.

March 8, 2021

* Deprecate use of HOST_HOME_XFER, all labs use directory per the labtainer.config file.
* Add documentation comment to start.config for REGISTRY and BASE_REGISTRY

March 5, 2021

* Error handling on gradelab web interface when missing results.
* labedit addition of precheck, msc bug fixes.

February 26, 2021

* The dmz-example lab had errors in routing and setup of dnsmasq on some components.

February 18, 2021

* UI was rebuilding images because it was updating file times without cause
* Clean up UI code to remove some redundant data copies.

February 14, 2021

* Add local build option to UI
* Create empty faux_init for centos6 bases.

February 11, 2021

* Fix UI handling of editing files. [...]

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 22:51

Hacking Articles Tips Tricks Videos Tutorials

Revise layout and eliminate unused fields.
* Add ubuntu20 base2 base configuration along with ssh2, network2 and wireshark2
* The new wireshark solves the prolem of black/noise windows.
* Map /tmp/.X11-unix to /var/tmp and create a link. Needed for ubuntu20 (was deleting /tmp?) and may fix others.

February 4, 2021

* Add SIZE option to results artifacts
* Simplify wireshark-intro assessment and parameterization and add PDF lab manual.
* Provide parameter list values to pregrade.sh script as environment variables
* enable X11 on the grader
* put update-designer.sh into users path.

January 19, 2021

* Change management of README date/rev to update file in source repo.
* Introduce GUI for creating/editing labs -- see labedit command.

December 21, 2020

* The gradelab function failed when zip files were copied from a VirtualBox shared folder.
* Update Instructor Guide to describe management of student zip files on host computers.

December 4, 2020

* Transition distribution of tar to GitHub releaese artifacts
* Eliminate seperate designer tar file, use git repo tarball.
* Testing of grader web functions for analysis of student lab artifacts
* Clear logs from full smoketest and delete grader container in removelab command.

December 1, 2020

* The iptables2 lab assessment relied on random ports being "unknown" to nmap.
* Use a sync diretory to delay smoketests from starting prior to lab startup.
* Begin integrating Lab designer UI elements.

October 13, 2020

* Headless configuraions for running on Docker Desktop on Macs & Windows
* Headless server support, cloud-config file for cloud deployments
* Testing support for headless configurations
* Force mynotify to wait until rc.local runs on boot
* Improve mynotify service ability to merge output into single timestamp
* Python3 for stopgrade script
* SimLab now uses docker top rather than system ps

September 26, 2020

* Clean up the stoplab scripts to ignore non-lab containers
* Add db-access database access control lab for controlles sharing of a mysql db.

September 17, 2020

* The macs-hash lab was unable to run Leafpad due to the X11 setting.
* Grader logging was being redirected to the wrong log file, now captures errors from instructor.py
* Copy instructor.log from grader to the host logs directory if there is an error.

August 28, 2020

* Fix install script to use python3-pip and fix broken scripts: getinfo.py and pull-all.py
* Registry logic was broken, test systems were not using the test registry, add development documentation.
* Add juiceshop and owasp base files for OWASP-based web security labs
* Remove unnecessary sudos from check_nets
* Add CHECK_OK documentation directive for automated assessment
* Change check_nets to fix iptables and routing issues if so directed.

August 12, 2020

* Add timeout to prestop scripts
* Add quiz and checkwork to dmz-lab
* Restarting the dmz-lab without -r option broke routing out of the ISP.
* Allow multiple files for time_delim results.

August 6, 2020

* Bug in error handling when X11 socket is missing
* Commas in quiz questions led to parse errors
* Add quiz and checkwork to iptables2 lab

July 28, 2020

* Add quiz support -- these are guidance quizzes, not assessment quizzes. See the designer guide.
* Add current-state assessment for use with the checkwork command.

July 21, 2020

* Add testsets/bin to designer's path
* Designer guide corrections and explainations for IModule steps.
* Add RANGE_REGEX result type for defining time ranges using regular expressions on log entries.
* Check that X11 socket exists if it is needed when starting a lab.
* Add base image for mysql
* Handle mysql log timestamp formats in results parsing.

June 15, 2020

* New base image contianing the Bird open source router
* Add bird-bgp Border Gateway Protocol lab.
* Add bird-ospf Open Shortest Path First routing protocol.
* Improve handling of DNS changes, external access from some containers was blocke[...]

___________________________
@hacking_Attack
@Hacking_Video

4 viewsedited 22:51

About

Blog

Apps

Platform