EVE-NG - How To Build Cyber Security and Networking Labs 2

Snapshots are key.  If you mess up you'll have a clean slate you can build new VM's from.  But creating snapshots in EVE-NG is very different from creating them in VMWare Workstation.  Let me show you the recommended way to kick this process off!  See you inside :)

We're going to Kali baby!  I'm going to show you the fastest, most painfree method of importing modern versions of Kali Linux into EVE-NG.  Oh! how I wish I knew about this lecture years ago!  Let's go baby!

After copying the Kali VM on to the EVE-NG appliance, we need to convert the .VMDK into a .QCOW2 image.  Sounds complicated? Not with me guiding you step-by-step through the process!  The folder and files names also need to be perfect or it won't work.  Let me show you how it's done :)

It's time to update our Kali VM and use the pimpmykali script to setup everything we need for our hacking fun.  We'll also update Burp Proxy and show off a powerful Chromium extension for the Burp Browser!

Let's save our settings!  Let me show you how to create snapshots of our EVE-NG VMs - you got this!

Setting up Windows 11 in EVE-NG has a bunch of gotchas.  You can't just pop in the ISO and next, next finish your way through the installation.  Let me show you the proper path for setup - let's go!! (I'll also show you some Linux tricks along the way)

Watch my thought process as I think through why the Windows 10 VM keeps giving us a blue screen of death ("BSOD").

Yes! It's time to add Cisco Routers and Switches to our virtual infrastructure!  If you're studying for the CCNA, CCNP or just want to REALLY understand computer networking, then this lecture will help you get there.  Let's go!

Now it's time to get the latest Palo Alto Networks VM!

Alright, it's the moment of truth: import.  Let's get this thing in EVE-NG!

You like GUI's? I know you do.  And so do I, that's why we're going to play with the PanOS GUI.  We'll set the hostname, configure DNS and a few other housekeeping items and then move on to configuring the IIS webserver.  I've got a lot in store for you guys so let's just jump in

EVE-NG is your canvas and VMs your brushes.  Let's draw.

Zones are basic building blocks for firewalls.  In this lecture we'll quickly setup the three we need and then move on to interfaces.  Let's zip through this one!

Now let's take a moment to configure our interfaces which will serve as the default gateway for our devices.  We'll also configure the Palo Alto Networks firewall as a DHCP server so it can hand out IP's on our LAN.  This is how you get REAL world experience guys!  Let's go!

When the initial traffic flow comes from the outside to the DMZ we are concerned with destination NAT.  We can map the public IP of our web server to the internal private IP with Destination NAT.  Come inside and let me explain this commonly confused topic and help you set it up in your Palo!

What's the point of the Security Policy if you have NAT setup? Well, the default action against traffic traversing zones is to say, NO!.  If we don't configure a Security Policy EVERYTHING will be blocked between zones, so nothing will happen between the DMZ and the outside zone.  In this lecture I'll show you why this is the case and get you on the right path to making things work.  Let's go!

Let's do some CCNA type stuff now.  We're going to setup OSPF on the Palo Alto Networks Firewall and our Cisco Router.  We'll confirm neighbor adjacencies and verify everything is working.  It's going to be awesome guys - let's go!!!

Now we will setup the network information on Kali and then troubleshoot through a little configuration blip to ensure we can hit the outside IP of our website from the quasi-internet.  We'll even map the IP to a hostname in our hosts file so it emulates a real corporate environment!  Let's go!! 

In this lecture, we're going to discover sensitive information disclosure using Burp Proxy, Burp Repeater and a hacker intuition.  It's going to be AWESOME.  Then we'll check the attack in the IIS webserver logs to see the attack artifacts we left behind.  Let's go!

So we have that lonely little Windows 11 enterprise machine all isolated from the world... that's a sad situation!  So in this lecture I'm going to teach you how to configure SOURCE NAT on the Palo Alto Networks Firewall so we can connect this bad boy to the internet.  You'll learn what source NAT is, how it differs from the Destination NAT we configured earlier and how to view the Palo Alto Network's logs to confirm everything is working.  You'll also learn the differences between the Security and NAT policies and why you need both!  Let's go baby let's go!

Before we build this thing, I wanted to take a moment (literally 2 minutes) to give an overview of what we will build.  Let's do this!

Now we get to drag and click our network pieces into position.  In this lecture we'll add the other VPN site.  Get ready to drop another Palo node on the topology along with a Cisco Switch and Windows endpoint!  Let's go!!!

In this lecture we'll hop on our second Palo Alto Networks Firewall and setup the hostname, DNS settings, interfaces, zones, NAT rules and more.  We're going to breeze through this lecture because we covered most of it in earlier lectures!  As always if you have any questions just hit up the Q/A or shoot me a message  :) Let's go!!

Now we're going to configure the VPN tunnel that will connect both sites.  Let's do this baby!

It's kind of hard to send packets to remote networks that the firewall's routing table doesn't know about.  That's why in this lecture we'll setup a static route for our site LANs so the Firewall knows where to send traffic destined to those networks.

The IKE Gateways and IPSec Tunnels is what makes the VPN magic happen.  In this lecture we'll get our hands dirty with step-by-step setup!

Don't forget about the security policy!  We need that to avoid step-over the default interzone deny rule.  Let's quickly set this up.

Now let's test all our hard work with the mighty PING utility!  Let's go! Did it work???