Offensive Security Lab

Abstract

The objective of this thesis was to explore the different types of cyber-attack, phases of an attack, and building a lab which could be used to safely conducting a cyber-attack. The end goal was to make offensive security learning process to be more approachable for inexperience people. To archive the desired result, the thesis consulted different resources, training, public vulnerability report. The idea was use as recent sources as possible to make the practical part more relevant to the modern attack. All the techniques used in both the theory and practical part are publicly available. This thesis couldn’t cover all the attacking techniques in both theory and practical part. In the scope of this thesis, a successful attack happens when an attacker was able to obtain a remote access control over the victim computer, and the thesis only focus on such attacks. And as a result, the lab was able to create a controllable environment to practice offensive security skills presented in the theory part. In the future, the lab can be further extended to support newer attacking techniques, simply by adding more virtual machines into the virtual network.