This is basically a Dockerized version of Exploit.Education's Phoenix VM (basically, qemu inside of Docker, running the Phoenix image). I put this together yesterday, for a friend, and others have expressed interest, so here it is.
-
Visit https://exploit.education and download the exploit-education-phoenix-amd64-v1.0.0-alpha-3.tar.xz file. Note: this is not a small file.
-
Place the above file in the same folder as the Dockerfile
-
Run "./build-image" to build the Docker image
-
Run "./build" to deploy a container from the image
-
Connect to the Phoenix VM by using ssh to connect to port 2222 on your Docker host (localhost should work also).
In no particular order:
- "build", "build-image", "connect-to-container", and "connect-to-vm" are Bash scripts for the user to run. If you're new to Docker (or just paranoid), recommend looking at the contents of these scripts.
- "start-up.sh" is used in automatically starting Qemu inside of the container (don't run it manually).
- "notes.md" is the Markdown text that I used to generate the PDF (via Pandoc).
- The notes(.md|.pdf) file contains additional steps if you want to export the image to a tarball and import on a different machine. This is useful when the target machine is air-gapped.
- This is a quick-kluge to run the VM. There's probably cleaner ways to do this but for an hour's work, it's usable.
- Given the size of the .xz file, as well as the number of tools needed to run it inside of a container, build-image can take a while to finish.
- Once the build-image script finishes, you should have a Docker image roughly 6.8 GB in size.
- I intentionally left out persistent storage (in the "build" script). This is because completing (at least some of) the challenges modifies the challenge's binary. If you want to reset everything, delete the container and run "./build" again.
- Since this is just a quick-and-dirty jury rig, please don't expect rapid support for any problem that you experience. You can ask but, given that work involves travel, I may not notice your query for a month or more. You might also try the TC4 meetings on Fridays (1st Friday of the month is in-person, others are on the TCC Cybersecurity Club Discord server (6-9 PM, Eastern). Ask if you need an invite.
- I'm attempting a similar Dockerization of the Nebula challenges but likely won't have time for it until after the holidays (or later). Nebula appears to be based on a "live" Ubuntu CD, which will require a different technique to get it running inside of a container.
- Once the phoenix container is running, the virtual machine also has to start. If there's no response to SSH, it's still starting. If SSH complains about a key, it's almost-started. Give it another minute.
- Credentials are the same as before (user/user) and you can run "sudo -s" to switch to root, once you're in the VM.
They're not heavy on details and assume that you know a few basics, but visit: https://blog.lamarranet.com/index.php/exploit-education-phoenix-solutions/