基于virtualbox的网络攻防环境搭建 #72
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| 网络安全&移动互联网安全作业 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,47 @@ | ||
| # chap0x01 基于VirtualBox的网络攻防基础环境搭建 | ||
|
|
||
| - 要求与完成情况概括 | ||
| - 节点：靶机、网关、攻击者主机 | ||
| - 连通性 | ||
| 靶机可以直接访问攻击者主机（√） | ||
| 攻击者主机无法直接访问靶机（√） | ||
| 网关可以直接访问攻击者主机和靶机（√） | ||
| 靶机的所有对外上下行流量必须经过网关（√） | ||
| 所有节点均可以访问互联网（×） | ||
| - 其他要求 | ||
| 所有节点制作成基础镜像（多重加载的虚拟硬盘）（√） | ||
| - 配置情况 | ||
| kali:网关 | ||
| kali-victim:靶机 | ||
| kali-attacker:攻击者 | ||
|
|
||
| - 网关设置转发功能 | ||
|  | ||
|
There was a problem hiding this comment. 这里没有看见你在网关设置靶机的ip转发规则，这也可能是后面靶机不能访问互联网的原因。 |
||
| - 靶机(NAT网络)： | ||
|  | ||
| - 攻击者(桥接)： | ||
|  | ||
| - 网关(对应靶机:eth0-NAT网络、对应攻击者:eth1-桥接)： | ||
|  | ||
| - 连通情况 | ||
| - 靶机可以访问攻击者主机 | ||
|  | ||
| - 攻击者主机无法直接访问靶机（iptables） | ||
|  | ||
|
There was a problem hiding this comment. 这里不需要给靶机的防火墙设置规则，攻击主机就应该无法访问靶机。 There was a problem hiding this comment. 这里不需要给靶机设置防火墙规则，请看 |
||
|  | ||
| - 网关可以直接访问攻击者主机和靶机 | ||
|  | ||
| - 靶机所有上下行流量必须经过网关 | ||
|  | ||
| - 所有节点可以访问互联网（未完成：攻击者和网关可以、靶机不可以，网关route设置不成功） | ||
|  | ||
|  | ||
| 添加默认路由没有显示出错，但是查看路由表并没有添加进去 | ||
|  | ||
| 查看靶机网卡上抓的包，数据到达192.168.1.1（默认路由选择的网关）就转发不到10.0.2.15（靶机）了，想添加一条新的默认路由（10.0.2.16，靶机的网关），但是没有成功。 | ||
| - 所有节点制作成基础镜像（多重加载的虚拟硬盘） | ||
|  | ||
|
|
||
|
|
||
|
|
||
|
|
||
|
|
||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
没有看见你在网关处给靶机设置ip转发规则，这也可能是后面靶机无法访问外网的原因。