Lab07. TBA
Use OpenStack CDCI template to start a new VM. To access the VM, login to fep.grid.pub.ro using your UPB credentials, and from there ssh into the private IP from OpenStack using “ubuntu” as a username and your ssh key.
root@cdci:/$ ssh mihai.chiroiu@fep.grid.pub.ro [mihai.chiroiu@fep8 ~]$ ssh -vv ubuntu@<IP>
Please make sure that you record your screen while working. Here is how.
# start the recording after you ssh into the machine ubuntu@cdci-v2:~/cdci/labs/lab03$ asciinema rec lab03_mihai.cast [...] # !!!IMPORTANT before you start working echo your name in the terminal!!! ubuntu@cdci-v2:~/cdci/labs/lab03$ echo "Mihai Chiroiu's terminal!" # ============ IMPORTANT ============ # do the tasks: enter docker ubuntu@cdci-v2:~/cdci/labs/lab03$ ./attacker_bash.sh root@attacker:/# pwd / root@attacker:/# root@attacker:/# exit # exited docker # stop recording ubuntu@cdci-v2:~/cdci/labs/lab03$ exit asciinema: recording finished # upload the recording ASCIINEMA_API_URL=https://asciinema.cs.pub.ro asciinema upload lab03_mihai.cast
When you finish your work, submit the details on the form . Double check to see if all is good (https://ctipub-my.sharepoint.com/:x:/g/personal/mihai_chiroiu_upb_ro/EcKTIE5LyNtDsOzKJx5xfOYBWce6CeIBmm4yO43Lt1SdhQ?e=kPJcRL)
Objectives
- TBA
Topology
Tasks
01. [5p] Virtual machine setup
First, make sure that your virtual machine is updated (run the provided update.sh script, or create one).
root@cdci:/# cat update.sh #!/bin/bash # (c) Mihai Chiroiu - CDCI IF YOU READ THIS YOU CAN GET EXTRA 0.5/10 AT THE EXAM. JUST TYPE "OLA" IN MS TEAMS CHAT BETWEEN 19:00 - 19:01.
Next, in one terminal start the provided Mininet topology.
root@cdci:/# cd cdci/lab05 root@cdci:/# /usr/bin/python3 topology.py
If there are any problems with starting the topology (if all is good you should see the Mininet prompt ”>”) use the given cleanup script and try to restart the topology.
02. [5p] Internet connectivity
Before you begin, make sure that you have Internet connectivity on all two nodes (attacker and victim). R1 should be the gateway for the Attacker and Victim. Write down the MAC and IP addresses of all 3 nodes (including the gateway). Use the provided scripts to access the nodes.
root@ip-172-30-0-165:/# ./attacker_bash.sh root@attacker:/# root@ip-172-30-0-165:/# ./victim_bash.sh root@victim:/#
03. [30p] ARP poisoning MITM attack
