Ready to Start Your Career?
October 1, 2015
Tutorial: Setting Up a Virtual Web Server for Safe Penetration Testing at Home
October 1, 2015
Hi Cybrarians!!!I hope you are doing well and studying hard. While pursuing the Penetration Testing course, we often feel the need for our own Web servers, where we can test our skill-sets without worrying about permissions and the law.To this end, I started to gather some information and found out that we can create our own virtual web servers and apply all of our tricks and skills SAFELY.Here's how to do it:Prerequisites:-
- Virtual Box installed. (You can use any software of your choice)Get it from here:- https://www.virtualbox.org/wiki/Downloads
- A host machine with minimum of 8 GB RAM (recommended)
- Ubuntu server ISO file. (You can use any server OS of your choice.)Get it from here:- http://www.ubuntu.com/download/server
- Check out your processor and OS architecture to be sure which version of these software you need to download.
- Select your language.
- Select your country.
- Choose whether you want it to detect your keyboard layout or not. I chose no.Use Tabs to move, Space to choose and Enter to activate any button you have selected.
- Select your keyboards country of origin. I've selected English (US), with the same keyboard layout at the next dialog. Let it do it's work.
- Select eth1 as your primary network interface, because we've chosen Adapter 2 as the “VirtualBox Host Only Ethernet Adapter,” which will provide the automatic DHCP network configuration for our installation.
- Continue with a default route? I took Yes. Use Tabs to select between the options.
- Name Server addresses? Leave it blank by hitting on Continue.
- Host name? I named it “ubuntuserver”.
- Full name of the user? I have used “myuser”.
- User name of your account? I have used “myuser”.
- Choose a password.
- Encrypt your home directory? I chose “No.” You can choose whatever you want.
- Select the partitioning method. I chose “Guided use entire disk.”
- Select disk to partition? I chose the default “VBOX HARDDISK” provided.
- Write the changes to disks? Hit “Yes.” Then let it do its work.
- HTTP proxy information? Leave it blank by hitting continue. Let it do some more work.
- How do you want to manage upgrades on this system? I chose “No automatic updates.” You can choose as you wish.
- Now the real part. At “Choose software to install,” select the Server parts you wish to install, through selecting it by pressing Space and arrow keys to navigate. You can choose any combination you want. I'm giving a screen shot of what I chose for your convenience. Then hit Continue.
- New Password for MySQL “root” user? Choose a password and hit continue, re-enter it and hit continue.
- General type of mail configuration? I chose No Configuration.
- Create a self signed SSL certificate? I chose Yes.
- Host Name? Leave it as localhost or change it as you wish. Let the installation continue.
- Install the Grub loader to your Master boot record? I chose “Yes” because it is talking about the virtual hard disk image, which is in use.
- You'll see a dialog box saying, “The Installation is Complete.” Hit continue.