Recopilación de Máquinas Virtuales para VMWare Player, WorkStation y Server como entornos de uso para Laboratorios de Seguridad

El siguiente listado de Imágenes de Máquinas Virtuales pretende ser un recopilatorio de  recursos de ambientes virtualizados enfocados al desarrollo de Laboratorios de Seguridad Informática. (PenTesting, Análisis de Malware, Hardening, Protección y Análisis de Datos, etc.)

Estas imágenes serán muy útiles cuando se pretendan realizar laboratorios que requieran diferentes Sistemas Operativos como máquinas "atacantes"  y máquinas "víctimas".

Están desarrolladas para ser utilizadas con cualquiera de los productos de VMWare. Recomiendo el uso de VMWare Player y Server como solución al tema de licenciamiento, aunque es posible utilizar VMWare WorkStation en modo Trial por 30 días. Todas estos entornos ya traen instaladas las VMWare Tools para facilitar la transferencia de datos entre uno y otro sistema.

Pronto publicaré otras máquinas virtuales para otras soluciones de virtualización (Virtual PC, Qemu, Virtual Box).

Imágenes tomadas de BagSide:

• BackTrack 4 beta (Imágen de VMware con VMWare Tools).
  • Back|Track 4 beta, with KDE 3.5.10 Desktop and Kernel 2.6.28.1. Now based on Ubuntu Intrepid. Loads of specialized applications for admins. VMwareTools 7.8.4-126130 installed along with SLIM Login manager, some extra scripts and the gtk-qt-engine. Released 11th Feb. 2009. The appliance occupies 4.2GB of the virtual disk which is 25GB in total. Default RAM is set at 688MB and the download is 839 MB. Regarded as one of the top Security distros.
  • Página oficial de BackTrack.
  • Descargar máquina virtual.

• BackTrack 3 (Imágen de VMware con VMWare Tools).
  • Descargar máquina virtual BackTrack 3.

• Caine / Computer Aided INvestigative Environment (Imágen de VMware con VMWare Tools).
  • CAINE (Computer Aided INvestigative Environment) is a GNU/Linux Digital Forensics distro for Interdepartment Center for Research on Security (CRIS), supported by the University of Modena and Reggio Emilia in Italy. Based on Ubuntu 8.04.1 with Kernel 2.6.24-24 and GNOME 2.22.3. Fully updated on the 2nd of March 2009. Released on the 22nd of Feb. 2009. The dynamic disk is 40GB and the appliance occupies 3.5GB installed and the download is 683 MB. 588 MB RAM is allocated as default.
  • Página Oficial de Caine.
  • Descargar máquina virtual Caine.

• Helix 2008R1 (Imágen de VMware con VMWare Tools).
  • Ubuntu 8.04 based Incident Response. Discovery, Forensics and Security Distro
    Kernel 2.6.24-21-generic with Gnome 2.22.3 Desktop. Fully upgraded on the 03/10/2008. The source and some dev-tools are installed as well as VMwareTools 6.5-118166. The resolution is DYNAMIC (drag the VMware frame to desired size). Distro release date 23/09/2008. The appliance occupies 2.8GB of the virtual disk which is 14GB in total. Default RAM is set at 568MB and the download is 708MB in total. Works well here. For those of you who wants to use or try applications like Adepto, Autopsy, GtkHash, Linen, Ophcrack etc.
  • Página oficial de Helix.
  • Descargar máquina virtual Helix.

• nUbuntu (Imágen de VMware con VMWare Tools).
  • Ubuntu 8.10 remaster loaded with Security tools for Bluetooth, Cisco, Scanners, Password, Exploits, Database, Fuzzers, Enum, VoiP and Wireless. Some build-tools and VMwareTools 7.8.4-125130 are installed. Release date 17/12/2008. The physical disk is 9GB whereoff 2.7 GB is used for the appliance. The download is 566 MB and RAM set at 548 MB.
  • Página oficial de nUbuntu.
  • Descargar máquina virtual nUbuntu.

• Samurai Web Testing Framework (Imágen de VMware con VMWare Tools).
  • Security and web penetration test suite based on Ubuntu 8.04
    Kernel 2.6.24-21-generic with Gnome 2.22.3 Desktop. Fully upgraded on 08/10/2008. Headers and some dev-tools are installed as well as VMwareTools 6.5-118166. The resolution is DYNAMIC (drag the VMware frame to desired size). Distro release date 10/08/1008. The appliance occupies 3.0GB of the virtual disk which is 14GB in total. Default RAM is set at 548MB and the download is 675MB in total. Works well here. Loaded with intrusion tools: DirBuster, Fierce Domain Scanner, Gooscan, Grendel-Scan, HTTP_Print fingerprinting tool, Maltego CE, Nikto, Paros, Rat Proxy, Spike Proxy , SQLBrute, w3af (and the GUI), Wapiti, WebScarab, WebShag, ZenMap, dnswalk, httping, httrack, john the ripper, netcat, nmap, siege, snarf etc.
  • Página oficial de Samurai Web Testing Framework.
  • Descargar máquina virtual Samurai Web Testing Framework.

• WeakNet Linux (Imágen de VMware con VMWare Tools).
  • Security distro from WeakNetLabs. Based on Ubuntu 8.04.1 with Kernel 2.6.24-21 and GNOME 2.22.3. Fully updated on the 22nd of November. Released on the 20th of November 2008. Substantial amount of security tools including WeakNetLabs own code and a 'dashboard' with main applications. The dynamic disk is 20GB and the appliance occupies 3.6GB installed and the download is 848 MB. 612 MB RAM is allocated as default.
  • Página oficial de WeakNet Linux.
  • Descargar máquina virtual Weaknet.

• CentOS (Imágen de VMware con VMWare Tools).
  • Red Hat Enterprise based with GNOME 2.16 desktop. Installed kernel-devel, cpp, gcc, build-tools and VMwareTools 7.8.4-126130, Adobe flash plugin, Yum-extender, Yum-utils and gtk-murrine-engine and some iconsets. Release date 31/03/2009. CentOS is ranked no.10 on Distrowatch. The physical disk is 40GB whereoff 4.1 GB i used for the appliance. The download is 813MB. Very mature and stable although not bleeding edge.
  • Página oficial de CentOS.
  • Descargar máquina virtual CentOS.

• FreeBSD (Imágen de VMware con VMWare Tools).
  • Standard with the following added, Opera 9.63, MySQL Server Client, Ruby, Apache, Ark, compat6, Nano and a few more plus VMwareTools. Occupies 4.5 GB on disk off a virtual dynamic disk of 20 GB. 644 MB RAM allocated and the download is 904 MB. Works here after some serious tweaking and fixing. I must say that I have still problems getting to grips with all BSD's as VMware guest OS desktops although this is probably the best one I have built so far.
  • Página oficial de FreeBSD.
  • Descargar máquina virtual FreeBSD.

Imágenes tomadas de Virtual Appliance Marketplace:

• Astaro Mail / Web / Security Gateway (Imágen de VMware).
  • Astaro Mail Gateway provides complete protection and control over spam, viruses, worms and Trojans transferred through email. The All-In-One mail security appliance features comprehensive features for spam detection and malware filtering.
  • Astaro Web Gateway provides complete protection and control over data transferred over the web. The All-In-One web security appliance features Malware Detection, Application Control, URL Filtering and Bandwidth Management, fully integrated and manageable through a single and intuitive browser-based user interface.
  • Astaro Security Gateway integrates complete Network, Web and Mail Security through an intuitive browser-based user interface. The Astaro Unified Threat Management appliance is the most easy-to-use and cost-effective "all-in-one" solution available, working to effectively shield businesses from internet based threats everyday.
  • Página oficial de Astaro Mail Gateway.
  • Descargar Astaro Mail gateway.
  • Descargar Astaro Web Gateway.
  • Astaro Security Gateway.

• WiKID Strong Authentication Server Community Edition 3.3.8 (Imágen de VMware).
  • The WiKID Strong Authentication System is a dual-source, software-based two-factor authentication system designed to be less expensive and more extensible than hardware tokens.
  • Página oficial de WiKID Strong Authentication Server Community Edition.
  • Descargar máquina virtual WiKID Strong Authentication Server Community Edition.

• Accellion Secure File Transfer (Imágen de VMware).
  • Secure File Transfer Virtual Appliance - secure, economical and easy to use secure file transfer for today's global enterprises.
  • Página oficial de Accellion Secure File Transfer.
  • Descargar máquina virtual  Accellion Secure File Transfer.

• ShellNET MiniVM (Imágen de VMware).
  • Web Interface for managing Nessus Vulnerability Scans and results.
  • Página oficial de ShellNET MiniVM.
  • Descargar máquina virtual ShellNET MiniVM.

• JanusVM (Imágen de VMware con VMWare Tools).
  • Internet Privacy Appliance :: Encrypts your Internet traffic, hides your IP address, and is easy to setup.
  • Página oficial de JanusVM.
  • Descargar máquina virtual JanusVM.

• OWASP Live CD (Imágen de VMware con VMWare Tools).
  • The overarching goal for this project is to make application security tools and documentation easily available. I see this as a great complement to OWASP's goal to make application security visible.
  • Página oficial de OWASP Live CD.
  • Descargar máquina virtual de OWASP Live CD.

• Fireball ISO Builder (Imágen de VMware).
  • Fireball ISO Builder is a VMWare virtual appliance that builds a bootable Gentoo Linux-base ISO image, focused on providing security and networking services to a network. IPv4 and IPv6. go6.net tunnel broker. DHCP, DNS, SSHD services.
  • Página oficial de Fireball ISO Builder.
  • Descargar máquina virtual de Fireball ISO Builder.

• Nepenthes VMware Appliance (Imágen de VMware con VMWare Tools).
  • Nepenthes is a low interaction honeypot like honeyd or mwcollect. Low Interaction Honeypots emulate known vulnerabilities to collect information about potential attacks. Nepenthes is designed to emulate vulnerabilties worms use to spread, and to capture these worms. As there are many possible ways for worms to spread, Nepenthes is modular. There are module interface to Resolve DNS Asynchronous, Emulate Vulnerabilities, Download Files, Submit the Downloaded Files, Trigger Events, Shellcode Handler.
  • Página oficial de Nepenthes VMware Appliance.
  • Descargar máquina virtual Nepenthes.