webdevil

You could as well use a linux distro and setup a rouge DHCP server with squid on it.

You must understand, that in a wargame you must get access to the machine. It's not that you have the username/password to login and scan. In another scenario, it could also come to a stage where unkowingly the created VM gets infected by a worm while it was being created. So, basically you have a VM on your network which propogates it... ;)

He seems to have explained everything step by step. Which part of it are you facing a problem with?

yeah, you have a point there. lol. I would term it Social Engineering at its best! Make 'em download 500MB of a rootkit.

You could probably get a copy anywhere is the world, atleast the pdf version. :)

I lol'd, after reading the doc's. You need to install it on the same PC where you want SSL Decrypted. Anyhow, enough of my intrusion into this topic.

You would need to find a vulnerability in the VirtualBox server that handles the images to exploit it. And if you are referring to VM Trojans, they are alot different. They are supposed to build their own Environment, so that AV's fail in scanning it. No offense taken ;) Oh, and if you are referring to the image itself as trojan then it wouldn't make a difference as it is powered on for a while until you complete the game.

Why not use konboot!? So you login as the admin, 'nuff said.

doesn't specifying the source as wlan0 work with kismet?

NOTHING would decrypt SSL unless your doing a MiTM attack, even Komodia! SSLsniff is a free software which sould be a good alternative to Komodia. The newer version should be out as indicated by Moxie who recently presented at Blackhat 09.

Test out your skills This includes some common sense, brute forcing, sql injections, writing exploits etc. Basically you start of with a web page and go about being the owner ;) . Should be good for people at all levels and it based on some live environments that I found, good for experience.

I liked this alot. All the a basic flaw but cheers to Moxie.