Internal Pentest – Assuming that an attacker has access to the internal network, we can use Kali Linux with the IP address 10.0.0.5 to pentest the other machines in the private network.Įxternal Pentest – Web Server is kept behind the firewall. To avoid this, the Web Server is kept in the private network. Note: If you want to setup a true DMZ environment in this lab, you need to setup back-to-back firewalls. PfSense firewall can be downloaded from the link below.

So we won’t be covering how to configure Windows Server. The main focus of this lab is to show how we can set up the environment using pfSense. Kali Linux can be downloaded from the link below.Īs mentioned in the beginning of the article, we need to get a licensed version of Windows Server from Microsoft. VirtualBox can be downloaded from the link below. I am using Mac as host machine (192.168.1.103) and am connected to a wireless router (192.168.1.1).

Windows Operating Systems that we use in this article must be purchased from Microsoft or you can go with trial versions available.įollowing is the network we are going to setup in this article. Before proceeding further, here is a quick note about licensing.

Kali linux virtualbox image