# Capsulecorp-Pentest | Vagrant VirtualBox Environment For Conducting An Internal Network Penetration Test

**URL:** <https://onehack.st/t/capsulecorp-pentest-vagrant-virtualbox-environment-for-conducting-an-internal-network-penetration-test/96423>\
**Category:** Tools & Scripts\
**Tags:** hacking, windows\
**Created:** [July 16, 2020, 3:18pm UTC](https://onehack.st/t/capsulecorp-pentest-vagrant-virtualbox-environment-for-conducting-an-internal-network-penetration-test/96423 "2020-07-16T15:18:12Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [July 16, 2020, 3:18pm UTC](https://onehack.st/t/capsulecorp-pentest-vagrant-virtualbox-environment-for-conducting-an-internal-network-penetration-test/96423/1 "2020-07-16T15:18:12Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/1/d/1d06f89280982fe2789d0f5fc7ad18179041df58.png)

Vagrant VirtualBox Environment For Conducting An Internal Network Penetration Test.

**1. Capsulecorp Pentest**  
The Capsulecorp Pentest is a small virtual network managed by vagrant and ansible. It contains five virtual machines, including one Linux attacking system running xubuntu and 4 Windows 2019 servers configured with various vulnerable services. This project can be used to learn network penetration testing as a stand-alone environment but is ultimatly designed to compliment my book [The Art of Network Penetration Testing](https://www.manning.com/books/the-art-of-network-penetration-testing?a_aid=royce)

**1.1. Current Funcionality**

- Active directory domain with one DC and 3 server members
  - Domain Controler: `goku.capsulecorp.local`
  - Server 01: `vegeta.capsulecorp.local`
  - Server 02: `gohan.capsulecorp.local`
  - Server 03: `trunks.capsulecorp.local`

- Vulnerable Jenkins server on `vegeta`
- Vulnerable Apache Tomcat server on `trunks`
- Vulnerable MSSQL server on `gohan`
- Xubuntu pentest system running XRDP.
  - Metasploit
  - CrackMapExec
  - Nmap
  - Remmina RDP client
  - RVM
  - Python/Pip/Pipenv
  - Impacket

**1.2. Requirements**  
In order to use the Capsulecorp Pentest network you must have the following:

- VirtualBox

- Vagrant

- Ansible

**1.3. OSX Configuration**  
In order to manage Windows hosts you’ll have to install `pywinrm` with pip inside the ansible virtual environment

```auto
source ~/ansible/bin/activatepip install pywinrmdeactivate

```

**2. Installation**  
For a detailed installation walkthrough check out the [MacOS Setup Guide](https://github.com/R3dy/capsulecorp-pentest/wiki/MacOS-Setup-Guide)

**2.1. Configure the windows hosts**  
The first thing you should do is bring up and provision Goku the domain controller. This system will likely take the longest to bring up because the dcpromo stuff just takes a while.  
Bring up the VM

```auto
vagrant up goku

```

Provision the VM

```auto
vagrant provision goku

```

Repeat the above two commands for gohan, vageta and trunks.  
_ **…WARNING…** _  
This section of the provision is expected to take a while because after a dcpromo it takes a long time for the system to reboot.

```auto
TASK [promotedc : Set a static address to 172.28.128.100] **********************changed: [goku]TASK [promotedc : Change hostname to goku]*************************************ok: [goku]TASK [promotedc : Install Active Directory Services] ***************************ok: [goku]TASK [promotedc : Promote goku to domain controller]***************************changed: [goku]TASK [promotedc : Reboot after promotion] **************************************

```

**2.2. Configure your pentest platform**  
Bring up the virtual machines using vagrant. First cd into the project directory, for example: `cd ~/capsulecorp-pentes` . Take note of the RDP port that gets forwarded to your localhost.

```auto
vagrant up pentest

```

Provision the pentest machine.

```auto
vagrant provision pentest

```

You can access your penitent machine either using your preferred RDP client to connect to the xrdp listener or via SSH with.

```auto
vagrant ssh pentest

```

## GitHub:

> **[GitHub - R3dy/capsulecorp-pentest: Vagrant VirtualBox environment for conducting an...](https://github.com/R3dy/capsulecorp-pentest)**
>
> Vagrant VirtualBox environment for conducting an internal network penetration test