On Fri, 12 Nov 2010 00:51:49 -0500 Jeremy Chase <[email protected]> wrote:
> 2010/11/11 Hugo Osvaldo Barrera <[email protected]>: > > On 10/05/10 12:47, Toma9 Vavys wrote: > >> Hello, > >> > >> I would like to become helpful OpenBSD developer (pentester) one day, > >> so I have a few questions. > >> > >> I am CompSci student at the moment. I consider myself as a white hat > >> person and I really enjoy everything about security. It's a shame that > >> we need to sleep sometimes, isn't it? > >> > >> Back to the main topic. I want to migrate to OpenBSD from ArchLinux. > >> But I have these conditions. I travel a lot, so I need everything all > >> in laptop(one). I am thinking about Windows 7 and OpenBSD dualboot > >> because of my hardware support in Windows 7. I'd like to to use HDMI > >> sometimes. So my questios are: > >> > >> 1) What is the best possible way how to setup my penetration lab? I > >> used Virtualbox in Archlinux, but I am new to BDS so I want to ask you > >> what is different here in virtualization. Is it better to test > >> everything in Windows 7 via Virtualbox. Or is it better to test > >> everything via Qemu in OpenBSD? Are there any restrictions? What is > >> your pentest lab setup like? > >> > >> 2) I'd like to use disk encryption which prompts me for password > >> at startup and then there will be 2 options for boot (Windows 7 or > >> OpenBSD). How can I do this to keep OpenBSD totally safe from > >> Windows 7? Can Windows 7 hurt my OpenBSD in any possible way? If yes, > >> how can I prevent this? > >> > >> Thank you for your answers and patience. > >> > >> Toma9 Vavrys > >> ---------------------------------- > >> Website: http://blog.cleancode.cz/ > >> > > > > This might help with full disc encryption: > > - http://16s.us/OpenBSD/softraid.txt > > - man softraid > > - man bioctl > > > > Obviously, windows can't read anything. B I can, of course, write, or > > delete you data. > > > > The best penetration testing is though two physical computers, to better > > simulate real conditions. > > OpenBSD doesn't run properly on VirtualBox (it does install on the > > latest version), and I belive virtualization is not really supported. > > > > > > -- > > Hugo Osvaldo Barrera > > > > > > I can confirm that OpenBSD doesn't always work as a virtual machine. > So I would focus on using OpenBSD as the host and using some other OS > as a client in QEMU. > If you insist and I don't know about the latest version, then vmware is likely much more reliable than virtualbox but still more problematic than a true install. There is a blog on the virtual box site by theo stating he can't believe any OS allows the problems virtualbox introduces(d). This post by theo was made because developers had wasted their time fixing bugs that were caused by virtualbox. If anyone does have problems under emulation make sure you can reproduce it natively before reporting.
