Enable second network adapter and select type: Host only network. Make sure first network adapter is selected with type NAT.
Open settings on imported virtual machine (context menu) and select Network. Download second virtual machine which contains vulnerable application and import it in Virtual Box. 
Clone repository of marshalsec and built it (this will be needed for one of the exercises). Install Git and Apache Maven using following command: sudo apt install git maven. # restart terminal and verify that Java compiler is at version 8 Tar xpvf ~/Downloads/jdk-8u73-linux-圆4.tar.gz # get old java package - this is not for redistribution using firefox in Kali Install Java 8 and make sure it is used for compilation by default, we need old version because of quirks needed for payload generation, and modern Kali doesn't have javac for Java 8. Install OWASP ZAP tool by executing command: sudo apt install zaproxy. (In case of "apt resource unavailable" error reboot the VM and retry). Open Terminal window from sidebar and run command sudo apt update & sudo apt full-upgrade. If any of them has no IP assigned (no inet: field in output) invoke command sudo dhclient ( sudo dhclient eth0 or sudo dhclient eth1) in terminal window. Interface with IP from range 10.0.2.x is a NAT interface and second is Internal network interface. Two network interfaces should be returned ( eth0 and eth1). Open Terminal window from sidebar and run command sudo ifconfig. n" to install newest version of guest additions) message disable Autoscaling in View menu and reboot VM, after that use: "Mount guest additions" from "Devices" menu, click CD ikon to mount the image inside Kali Linux and use command "cd /mnt/cdrom & sudo bash. (if Kali hangs with Blue screen and VBoxClient: unable to get dis. Note name of interface selected in Name field, it should be used with second machine as well. 
Open settings on Kali Virtual Machine (context menu) and select Network.
Open menu File-> Host Network Manager and make sure at least one network is present with DHCP enabled (there should be items with names vboxnet0, vboxnet1. Import downloaded file in VirtualBox but don't run it yet. Procedure was verified with file (You may have to disable USB 2.0 controller in Virtual Machine properties). Download Kali Linux Virtual Machine From Offensive Security website (caution: download is slow and can take up to 2 hours!).
0 kommentar(er)
