History

Elliott Kolden b29d30a1b2 Tier-3: fix QEMU boot, catalog admission, verify module Bug 14 (vm/launch_target.sh): Metasploitable2 requires -machine pc (i440fx), -cpu kvm32, -drive if=ide, and -device e1000. The previous config (-machine q35, -cpu host, -drive if=virtio, virtio-net-pci) caused a kernel panic at boot because /dev/vda != the grub root=/dev/sda1. Services never started; the b'' probe fix (Bug 10) then correctly waited out the full timeout with no result. Bug 15 (scripts/install-tier-3-4.sh): verify step used vsftpd_234_backdoor which is requires_bridge=true and has a hardcoded port-6200 backdoor. Changed to distccd_command_exec with TARGET_PORTS="5632:3632,4444:4444". manifest.toml: admit distccd_command_exec and unreal_ircd_3281_backdoor to the module catalog. Both use cmd/unix/bind_perl (bind shell, no guest egress, SLIRP-safe). distccd returns a valid protocol response so MSF's handler runs and session_open fires. Verified against Metasploitable2 sourceforge image sha256 a8c019c3. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-05 16:41:41 -06:00
..
guest-agent	PIPELINE §5 step 1: fix four root-cause defects	2026-05-03 17:05:25 -05:00
targets	PIPELINE §5 step 3: target VM build infrastructure + containment posture	2026-05-04 01:31:40 -05:00
launch_demo.sh	Close out the open issues: bridge pcap wiring, perf collector, Tier-4	2026-04-30 00:17:49 -05:00
launch_target.sh	Tier-3: fix QEMU boot, catalog admission, verify module	2026-05-05 16:41:41 -06:00
README.md	Scaffold project: docs, repo skeleton, transport + deploy design	2026-04-28 23:21:00 -06:00
setup_bridge.sh	Collectors 2/4/5 + fleet runner + sample manifest + Tier-3 setup scripts	2026-04-30 00:02:27 -05:00

README.md

vm/

Recipes and helpers for building and snapshotting guest VMs. Disk images and snapshots themselves are gitignored — this directory carries the how, not the bytes.

vm/
  images/                # qcow2 staging (gitignored)
  snapshots/             # exported snapshots if needed (gitignored)
  guest-agent/           # in-guest telemetry agent (shipped into the guest)
  metasploitable2.md     # download/convert/snapshot procedure (TODO)
  custom-debian/         # cloud-init for our own vulnerable Debian (TODO)

See docs/lab-setup.md for the full host + guest bring-up procedure.