THE HACKER PLAYBOOK 3: Practical Guide to Penetration Testing, Red Team Edition
THE HACKER PLAYBOOK 3
Practical Guide to Penetration Testing
Red Team Edition
Peter Kim
Practical Guide to Penetration Testing
Red Team Edition
Peter Kim
1 pregame - the setup
Setting Up Your Campaign
- Lightsail is free only for 3 months.
- For permanently free VPS, Oracle Cloud offers the best resources.
- Other good options include GCP, AWS EC2 free tier, and Azure.
Step-by-Step: Set Up Free Ubuntu VPS on Oracle Cloud
Step 1: Create an Oracle Cloud Account
- Go to: https://www.oracle.com/cloud/free/
- Click "Start for Free"
- Fill in your:
- Name, email, password
- Country/region
- Credit card (required for identity verification, but you won’t be charged)
- Confirm your email and phone number
Step-by-Step: Set Up Free Ubuntu VPS on Microsoft Azure
Step 1: Create an Azure Cloud Account
- Go to: https://azure.microsoft.com/free
- Click "Start free" 使用 Azure 入口網站中的[免費服務] 頁面來建立免費服務
- Sign in with a Microsoft account or create one
- Enter:
- Personal details
- Credit card (for verification only)
- Phone number
如果您在 [免費服務] 頁面以外的地方建立資源，預設情況下不會總是選取免費層或免費資源組態選項。
若要避免產生費用，請確定您從 [免費服務] 頁面建立資源。
然後，當您建立資源時，請務必選取免費層。
Step 2: Create Ubuntu VM (Free Tier)
您可以透過 Azure 入口網站建立 Azure 虛擬機器 (VM)。 Azure 入口網站是以瀏覽器為基礎的使用者介面，可用來建立 Azure 資源。為了查看作用中的 VM，您還會以 SSH 連線至 VM，並安裝 NGINX 網頁伺服器。
- After sign-in, go to Azure Portal: https://portal.azure.com
- On the sidebar, click "Virtual Machines" → Create → Azure virtual machine
- Configure:
- Subscription: Select your free tier subscription
- Resource group: Create a new one (e.g., my-free-tier)
- VM name: e.g., ubuntu-vps
- Region: Choose one that allows B1S VM (e.g., East US)
- Image: Choose Ubuntu Server 22.04 LTS
- Size: Click "See all sizes", filter by “Free services”, and pick B1S
- Authentication type:
- Choose SSH public key
- Paste in your SSH key from ~/.ssh/id_rsa.pub
- Leave disk, networking, and monitoring as defaults (or adjust as needed)
- Click Review + Create, then Create
B 系列 VM 非常適合不需要持續性完整 CPU 效能的工作負載，例如 Web 伺服器、概念證明、小型資料庫以及開發建置環境。
B1s 是 Azure 的實用小 VM，1 顆 vCPU + 1G RAM (
操作方式可參考這篇：Create Free Tier Windows/Linux Virtual Machines in Azure Cloud
如果沒有買自己的網域可透過 Azure Portal 管理介面設定，用 Azure 預設的 DNS 名稱 (尾巴為 .region-name.cloudapp.azure.com )
VM 裝好時預設只對外開放 SSH 22 Port，要跑網站需在 *-nsg (Network Security Group) 加開 80,443 Port 連入。若要防止不明人士連 SSH Try 密碼，還可順便限定來源 IP 提升安全性。
留言