This is the project of the course Applied Security Laboratory offered by ETH Zurich in the autumn semester 2020.
All servers run on Ubuntu server 18.04.5 LTS except the Client, which runs on Peppermint OS 10. All servers run an SSH server used for administration and to backup data through SFTP.
A system description and risk analysis can be found in the report.
Before running the VM for the first time, please set up the shared folder as shown in the screenshot below. The path /media/asl must point to the root of this repo.
The networks are configured according to this network plan (ip addresses are defined in the setup.sh). 
For development reason, all VMs have also a NAT interface with connection to the Internet. We will remove it before the hand in (except maybe for the client). All VMs have already OpenSSH installed.
All installations, settings must be done inside the setup.sh corresponding to your VM (for example if you want to copy a file inside the folder /var/apache write inside setup.sh cp /media/asl/vm_folder/your_config.conf /var/apache). If you make it manually, we will not have all the same versions of our environement. This script is launch at each boot of the VM (launch by the service setup.service in /etc/systemd/system/setup.service) or can be launch with the command sudo systemctl start setup.service. I recommand to make a snapshot of the state after the first setup (see on the Virtualbox documentation) to test if everything works from a fresh VM before you push on the master branch your new feature.
In the following table you find the usernames and passwords for the relevant users of our system.
| User | Machine | Password |
|---|---|---|
| backup_user | CA | WR=JdhtW4R_qV4b9 |
| ubuntu | CA | y9!x/En6pJ?uvFP(Q% |
| backup_user | Core | 7zM2YCHky=SQ?e3n |
| ubuntu | Core | YA&pd>I01>*h)6vjFT |
| backup_user | Firewall | rS^9cN?E?jxTj@4K |
| ubuntu | Firewall | 0=?w-x_X(OC3X&iW5z |
| backup_user | MySQLDatabase | 4-c/hT?CsHTg$b&<Xt |
| ubuntu | MySQLDatabase | l6C)XRhH!P9iuFvTVa |
| backup_user | VPN | ?c_bEpuN-ssCJ4Y3 |
| ubuntu | VPN | IloveASL |
| backup_user | WebServer | C?NMuPu77c4sHfa3 |
| ubuntu | WebServer | GBciDw_fkMO<x3KQ@! |
| ubuntu | Backup | 6-jR=)aDGavj-exU39 |