After watching videos and downloading just about every possible pen-testing tool out there to play around with and learn. How do you setup test beds and practice scenarios to crack?

With RE people make crackme.exe files. I was curious do people have virtual machine templates and other setups created for download that you can practice cracking.

  • What are you interested in? .. Pen-testing is a very broad field. Further specify what realm you are interested in - web pen, net pen, physical security, etc. Many virtual machines exist - for example, Kali linux (attack VM) and numerous 'victim' VMs that you can use in a local VM network. – octagonC Jun 9 '14 at 4:27
  • 1
    pentestlab.org ! – AK_ Jun 9 '14 at 11:13
  • I do server administration so mostly focused on web,net,server. – Jason Jun 9 '14 at 13:58

I run a lab on a KVM virtualization setup. Among other things, I use Damn Vulnerable Linux, old versions of Ubuntu, and various VMs and software from VulnHub. I have an ethernet bridge acting as an internal switch and a virtual router between my test lab and my internet connection to isolate tests like ARP Spoofing, subnet-wide scans, etc.

| improve this answer | |

Additional answer:

You may try to install DVWA (Damn Vulnerable Web Applications) locally at your computer. This web application is designed as vulnerable applications. It's free and open source, so you could read the source code. It's written in PHP, by the way.

| improve this answer | |

install VMware and install kali linux (goto http://kali.org/downloads). Kali linux is all in one pentesting software for pentester. Then install another OS on which you want to pentest, for example as David said download Damn Vulnerable Linux and you are done. Hope that will help ya.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.