Penetration Testing Server
Rissanen, Jevi (2021)
2021
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2021111120084
https://urn.fi/URN:NBN:fi:amk-2021111120084
Tiivistelmä
The objective of this thesis was to gain understanding of how a PC cluster server could be created for penetration testing. The goal was to build a cluster of three server PCs with NAS and switch and configure it to be suitable for a team of penetration testers. The system will let the user in after the authentication process before letting the user in the network. After authentication the user can use the hypervisor and spawn a virtual machine. This project was done for a case company using their equipment but also other devices and testing environments were utilized during the project.
The project consists of three HP Z2 G5 Workstation PCs, Synology DiskStation DS1821+ NAS device and Cisco Catalyst 2960G 8-port switch. The PCs are utilizing XCP-ng which is a type-1 hypervisor. Xen Orchestra is used to manage and spawn virtual machines. The user authentication is done with FreeIPA utilizing LDAP. pfSense is managing IP addresses and VLANs and functions as a firewall.
Utilizing these components, a functioning penetration testing server was assembled. It is used at the company for creating virtual testing environments. To conclude, this thesis has provided a method to build a viable penetration testing server.
The project consists of three HP Z2 G5 Workstation PCs, Synology DiskStation DS1821+ NAS device and Cisco Catalyst 2960G 8-port switch. The PCs are utilizing XCP-ng which is a type-1 hypervisor. Xen Orchestra is used to manage and spawn virtual machines. The user authentication is done with FreeIPA utilizing LDAP. pfSense is managing IP addresses and VLANs and functions as a firewall.
Utilizing these components, a functioning penetration testing server was assembled. It is used at the company for creating virtual testing environments. To conclude, this thesis has provided a method to build a viable penetration testing server.