Penetration Testing: RE: Suggested lab materials/systems/setup?

["Desai, Dipen" <ddesai1 () ipolicynetworks com>]

VMWare is the way to go in such testing scenarios. I have it setup with
multiple guest Operating Systems. You can have each Virtual machine set
up with the configurations you want to and save the image with the
required configuration before executing the attacks/exploits/malware
against those virtual machines.


Thanks,
Deepen Desai

-----Original Message-----
From: Erin Carroll [mailto:amoeba () amoebazone com] 
Sent: Sunday, July 10, 2005 3:43 PM
To: pen-test () securityfocus com
Subject: Suggested lab materials/systems/setup?

All,

I'm in the process of setting up a pen-test lab environment of several
servers running various OS flavors (both Windows & BSD/*nix) along with
a
netscreen-10 firewall and cisco 3825 to use as the lab router. What do
other
list members use for their lab environments and what suggestions/issues
have
you encountered? I'm just using equipment I have laying around but would
be
interested in hearing about other lab setups to get some ideas (or
excuses
to go shopping) on what else I can utilize for pen-testing practice.

I'm definitely going to set up an imaging server (jumpstart & Altiris)
to
make changing things around less painful but I've also considered Vmware
on
the hosts. Basically I'm curious as to what you all use to practice
pen-testing to keep the skills sharp when not "on the job".

Thanks!
--
Erin Carroll
"Do Not Taunt Happy-Fun Ball"