Skip to content

AssessmentAttackPlan

Jump to bottom
echadbourne edited this page Sep 27, 2023 · 27 revisions

Phase One

P1 Useful Links

Default Passwords

Lab01

Lab01 Tech Journal

First Steps

Initial Snapshot

Cable all of the boxes properly

  • Firewall - Network Adapter 1 WAN, Network Adapter 2 LAN
  • Everything else LAN

Firewall Initial Setup

Username: admin

Password: pfsense

  1. IP Information
  • Steps 1 and 2 of Lab01
  • em0 = WAN, Upstream Gateway is 10.0.17.2, IP address is 10.0.17.102
  • em1 = LAN, IP address is 10.0.5.2

Hostname and admin password will be set after wks01 is set up

Windows Workstation Setup

Username: champuser

Password: Ch@mpl@1n!22

  1. Change champuser password
  • Settings > Accounts > Sign in Options
  • Password, Change
  1. Hostname
  • Properties of "This PC"
  • Change Settings
  • Rename to wks01-elizabeth
  1. New Admin Account

Making a new Admin Account Windows

  • lusrmgr.msc
  • elizabeth.chadbourne-loc (New Local Admin Account)
  • Password never expires
  • WKS01-ELIZABETH\Administrators

Logout and login again

  1. IP Information
  • IP address 10.0.5.100
  • Default Gateway 10.0.5.2
  • DNS 10.0.5.2

Finish Firewall Setup

  1. Go to 10.0.5.2 in a browser
  • Login is admin and pfsense
  1. General Information
  • fw01-elizabeth
  • elizabeth.local
  • Primary DNS 8.8.8.8
  1. Configure WAN Interface
  • RFC1918 Networks: Uncheck "Block private networks from entering via WAN"
  1. Set Root Password

Check Connectivity for WKS01

Phase 1 Complete, snapshot and go take a break!

Phase 2 - AD and DNS

P2 Useful Links

Lab 02

Lab02 Tech Journal

AD & DNS Initial Setup

  • Do Product Key later
  • Set Administrator Password
  1. New Local Admin account and password (see above)
  2. IP Information
  • IP address 10.0.5.5
  • Gateway 10.0.5.2
  • DNS 10.0.5.2
  • Discoverable Option: Yes
  • UTC-5:00 Eastern Time (US and Canada)
  1. Computer name
  • ad01-elizabeth

Maybe Reboot?

I dont think the ADDS Role needs to be installed but if needed refer to lab doc

Promotion

Double check that hostname is set

  1. Create a new forest called elizabeth.local
  • Enter a DSRM password
  • I think everything else is default

Computer will reboot

Adding a DNS Record

  1. Invoke DNS Manager
  • DNS Tab, right click AD01-ELIZABETH
  1. New Reverse Lookup Zone
  • 10.0.5
  1. New host for fw01
  • fw01-elizabeth
  • fw01-elizabeth.elizabeth.local
  • 10.0.5.2
  • Check make associated PTR record
  1. New host for ad01
  • ad01-elizabeth
  • ad01-elizabeth.elizabeth.local
  • 10.0.5.5
  1. New host for wks01
  • See above
  • 10.0.5.100

Create new users

  1. Active Directory Users and Computers tool
  2. New User (Domain Admin)
  • echadbourne-adm
  • Add to Domain Admins group
  1. New User (Normal)
  • echadbourne
  • Skip addition to group

Join WKS01 to Domain

  1. Change DNS to 10.0.5.5
  • Ping by hostname to check connectivity
  1. In system properties, double check the hostname and then connect to elizabeth.local
  2. Use Domain Admin username and password

Restart

Clone this wiki locally