Vnc bruteforce

[thorinaboenke]

Adds vnc bruteforcing to lateral movement scenario 3. relates to issue #7

• adds new playbook 3_a_b
• modifies firewall rules to allow access on reposerver on port 5901
• installs tightvnc on reposerver

Aditionally:

• Updates to the new state repository https://git-service.ait.ac.at/api/v4/projects/3012/terraform/state/
• Uses uuid instead of network names because of naming conflict on the new open stack

TEST:

• packer build images for firewall and reposerver, attacker needs latest AttackMate with looping and vnc capabilities.
• deploy bootstrap and repository
• run attack 3_a_b with ansible

Output:

Note:
to watch the screen of the reposerver with for example vncviewer from you own machine you can use ssh tunneling with the following command:
ssh -L 5901:<vnc_server_ip>:5901 -J <jumphost_user>@<jumphost_ip> <vnc_user>@<vnc_server_ip>
then
vncviewer localhost:5901
Screencast from 2025-02-26 13:40:24.webm