I am taking a Sec Lab class and we've been sectioned into teams and tasked with 'attacking' the other teams while 'defending' against them.
Each team is set up with 4 VMs, and we have a few days to harden them. ALL VMs live on a single server which we have physical access to (it's in the lab room). Each VM will be loaded with a flag.txt file which we cannot hide/modify/encrypt etc. The goal is to simply gain entry into other teams' VMs.
I am wondering -- since I have physical access to the server, is there any way for me to tap into all of the VMs and bypass the designated passwords? Or to inject keyloggers or something of the sort in order to collect all of the passwords?
For obvious reasons, I won't be asking this in class, but I am curious.. since everyone is focusing on plans of attack via port scans, mitm network spoofing, etc.. I am thinking of different, less brunt, approaches.
If anyone could offer some advice on what I could actually do after physically plugging into the VM farm server, please let me know!