VM.ppt
- 1. Virtual Machine and VirtualBox CIS 6395, Incident Response Technologies Fall 2016, Dr. Cliff Zou
- 2. Acknowledgement Univ. Northern Iowa, COP 4610 Intro Operating Systems ◦ http://www.cs.uni.edu/~diesburg/courses/cop4610_fall10/ http://www.dedoimedo.com/computers/virtualbox- network-sharing.html Creating a Test Lab Using VirtualBox / NAT networking (by Peter Sylvester) ◦ https://www.pythian.com/blog/test-lab-using-virtualbox-nat- networking/
- 3. Virtualization Software Runs operating systems in fully emulated environment ◦ Vmware (Vmware Inc.) ◦ VirtualBox (Oracle) ◦ Virtual PC (Microsoft) ◦ Xen (open source project) 3
- 4. Virtualization Terminology Host OS – running on physical computer ◦ Only one host OS may run at a time ◦ “Hosts” the other running operating systems Guest OS – running in emulated environment ◦ Can run multiple guests at the same time ◦ Guest thinks it is running on actual hardware Virtual machine – set of files that 4
- 5. Virtual Machine Advantages Can distribute a pre-configured OS ◦ Run VM, install/configure it, then export to another VM image Easy to create multiple snapshots ◦ If something goes wrong, roll-back to a previously saved snapshot Portable ◦ Run on any host OS ◦ Store on portable hard drive or laptop 5
- 6. Virtual Machine Advantages Sandbox ◦ Does not affect anything on host OS Networked ◦ Can access over the network 6
- 7. Guest OSes ---- Linux Kali Linux ◦ Penetration testing preconfigured ◦ A lot of hacking tools preinstalled ◦ https://www.offensive-security.com/kali-linux-vmware- virtualbox-image-download/ ◦ Root Name: root password: toor Metasploitable ◦ An intentionally vulnerable Linux VM ◦ Security training, penetration testing ◦ https://sourceforge.net/projects/metasploitable/files/Metasploit able2/ ◦ The default login and password is
- 8. Guest OSes ---- Windows Windows VMs ◦ Microsoft has made available a number of VMs that can be downloaded to test Microsoft Edge and different versions of IE. ◦ Download from: https://dev.windows.com/en- us/microsoft-edge/tools/vms/ ◦ Currently it has Win7, Win8, Win10 ◦ Under the webpage, “Choose your OS” means your host OS ◦ These virtual machines expire after 90 days. setting a snapshot when you first install the virtual machine which you can roll back to later.
- 9. Guest OSes ---- Windows I have a previously available VM of WinXP ◦ Will provide you the download link on webCourse when we need to do penetration testing on vulnerable WinXP
- 10. Install VM Images in VirtualBox For VM images with .ova file type ◦ VirtualBox menu: “File””Import Appliance” Choose the *.ova image file to import the VM image Just use the default configurations
- 11. Importing Win7 VM Image…. Take a while, so be patient…. ( a few minutes)
- 12. Networking in VirtualBox VirtualBox provides the following networking options: We will introduce: ◦ NAT, NAT Network, Bridged Adapter
- 13. IP Address Checking Tool In Windows, run “ipconfig” under “cmd” window In Linux, run “ifconfig” in terminal
- 14. Networking Diagnosis Tool Use “Ping” command to check if a host is reachable ◦ In Windows, run “ping x.x.x.x” under “cmd” window ◦ In Linux, run “ping x.x.x.x” in terminal Use CTRL+C to stop the pinging action
- 15. VirtualBox Networking Setup Objective: ◦ Let multiple VMs in the same LAN This LAN is private, cannot be connected from outside (for security purpose) ◦ Each VM has Internet access So that we can download/install software on them Two types of networks: ◦ (Bridged Adapter) Host machine and VMs are in the same LAN ◦ (NAT Network) Guest VMs in the LAN, cannot see host OS
- 16. Networking in VirtualBox: NAT Default configuration Virtualbox generates NAT routers ◦ One NAT router for each VM Simplest, no configuration at all Issues: ◦ Each VM in its own private LAN, cannot see each other VM1 VM2 VM3 NAT routers VirtualBox Network Engine
- 17. Networking in VirtualBox: Bridged Adapter Each VM requests its IP address just like the host OS to the default DHCP server ◦ All VMs and host OS are in the same LAN, so they can talk to each other ◦ Your home WiFi router most likely will support this DHCP/NAT server (e.g., wifi router) Host OS VM1 VM2
- 18. Networking in VirtualBox: Bridged Adapter Problem: some DHCP servers do not provide service to VMs ◦ UCF WiFi does not provide IP to VMs Your VM will not be able to obtain a valid IP ◦ Your home WiFi router most likely will support this You can use this networking setup at home, but not in UCF campus
- 19. VirtualBox Networking Option: NAT Network On VirtualBox, click “File” “Preferences…” ”Network” If the “Net Networks” tab is empty, click to add the default “NatNetwork” ◦ You can change this NAT network name This will let VirtualBox to create a NAT router for Internal VMs that join in this NAT router
- 20. Networking in VirtualBox: NAT Network VirtualBox setup a NAT router X All VMs join this NAT router X All VMs can see each other, in the same LAN ◦ Host OS is not in this NAT router’s LAN VirtualBox can set up multiple NAT Routers for multiple isolated VM LANs VM1 VM2 VM3 NAT Router ‘X’ NAT Router ‘Y’ VirtualBox Network Engine Host OS
- 21. Networking in VirtualBox: NAT Network Determine local NAT LAN subnet: ◦ Goto virtualBox menu: Filepreferences… ◦ On the NAT network, select the tool
- 22. File Transfer between VM and Host OS under VirtualBox 1. Use online server for file upload/download • Upload to an online storage (such as Google Drive, MS Onedrive) • Download to the host OS or VM 2. Virtualbox support ‘drag and drop’ file transfer between host OS and a VM OS • Run the Kali Linux VM under virtualBox • Configure virtualBox menu “Devices” “Drag and Drop” enable “Bidirectional” • In Kali, open “file folder” icon, in the host OS, open a folder window • Now you can drag/drop files between host and VM
- 23. Shared Folder in Linux VM 3. VirtualBox supports “shared folder” between host OS and VM • Run the Kali Linux VM under VirtualBox • Configure virtualBox menu “Devices” “shared folders” “Shared folder setting…” click the “+” button • In the Folder Path field, choose “Other…” to add a host OS folder as the shared folder (e.g., “Download”) In Linux VM: mkdir shared mount -t vboxsf Download ~/shared Now VM’s “~/shared” would be identical to the “Download” folder on host OS
- 24. Shared Folder in Windows VM • Configure virtualBox menu “Devices” “shared folders” “Shared folder setting…” click the “+” button • In the Folder Path field, choose “Other…” to add a host OS folder as the shared folder (e.g., “Download”) • In Win VM, open folder, goto “network”, select “VBOXSVR”, then the shared folder will show up as a network drive