ℹ️

This module is part of a larger project on setting up Game of Active Directory (GOAD) on Proxmox alongside our existing lab infrastructure. Click here to be taken back to the project landing page.

Previous Step

Objectives for this Step

Ensure that we can access the target environment using our attack box

Reviewing the Setup

Reviewing the network diagram for the GOAD environment, note the following about the lab environment

The original lab environment had the following

VLANs
- native — 10.0.0.0/24 (LAN)
- 666 — 10.6.6.0/24 (SEC_EGRESS)
- 999 — 10.9.9.0/24 (SEC_ISOLATED)
- 80 — 10.80.80.0/24 (AD_LAB)
The attack box is on the native VLAN and can reach any of the other VLANs

The GOAD lab environment adds

VLANs
- 10 — 192.168.10.0/24 (GOAD)
The provisioning CT is on native
The GOAD hosts are on 10
The attack box can still reach all of the VLANs, including 10

Positioning the Attack Box

Why this Matters

Certain network attacks only work when the attack box is on the same Local Area Network as the target(s), because some attacks require broadcasts and snooping at layer 2.

💡

If the attack box is on 10.0.0.0/24 and the targets are on 192.168.10.0/24, then certain attacks won't work, but there is still a wide variety of attacks you can try on the GOAD lab from this position

Leaving Attack Box on Native VLAN

This will keep the attack box on the pfSense internal LAN of 10.0.0.0/24. In the original lab design we give the attack box — Kali Linux — a DHCP reservation of 10.0.0.2.

ℹ️

If you've configured static routes in your environment, you should be able to access 10.0.0.2 from your home network via SSH or some remote desktop protocol.

Log into your attack box and you should be able to begin the penetration test against the 192.168.10.0/24 network.

Putting Attack Box on VLAN 10

This will move the attack box to VLAN 10 — 192.168.10.0/24 — and put it on the same LAN as the rest of the GOAD hosts.

ℹ️

The original lab design does not factor for GOAD, so we have not yet added a static route to the GOAD LAN

Configure the Static Route

Refer to the documentation on configuring static routes and add the following:

Destination Network: 192.168.10.0/24
Gateway: pfSense WAN IP address

Give Attack Box a DHCP Reservation

Log into your lab pfSense VM and go to Services > DHCP Server > GOAD

Click the "Add Static Mapping" button at the bottom of the page

Fill out the mapping details and save, then "Apply Changes"

Configure a WAN Firewall Rule

Click the "Add (up)" button

Connecting to Kali on VLAN 10

Now that you've added the firewall rule on the WAN, use a SSH or remote desktop client of your preference and target 192.168.10.2. With the static route, this will send the traffic to pfSense WAN IP, which will pass the traffic internally to complete the connection.

Connectivity Check

Attacking the Lab

Head to the link above and follow along with different attacks as demonstrated by Mayfly

Conclusion