CyberRangeCZ sandbox definition for the CADMUS-BTCMP-18 OSINT Bootcamp.
- vm1 — analyst workstation (
xubuntu-noble, browsers + OSINT tooling), LAN192.168.10.10 - vm2 — web server (
ubuntu-noble, Apache + PHP), hosts the lab websites, LAN192.168.10.20 - router — LAN gateway
192.168.10.1 - lan —
192.168.10.0/24
The Module 4 (Social Media Intelligence) challenge sites are deployed to VM2's
Apache document root during provisioning. Source files live in
provisioning/files/website/ (a copy of ../../module4/challenge/).
From vm1, the lab is reachable at:
| URL | Site |
|---|---|
http://192.168.10.20/ |
403 Forbidden (no landing page, no listing) |
http://192.168.10.20/chirp/ |
Chirp (social platform) |
http://192.168.10.20/agora/ |
Agora (forum) |
http://192.168.10.20/aif2024/ |
Athens Infosec Forum 2024 event site |
The sites are reachable only by path. There is no index page at the web
root, and Apache directory listing is disabled (Options -Indexes), so hitting
the bare IP returns 403 and does not reveal the available sites.
The mission briefing and 10 questions are not served on VM2 — they are delivered separately (e.g. via the lab portal).
All cross-platform links are relative, so the single docroot serves the whole
challenge tree. To update the sites after editing the source, re-sync (note the
/index.html exclude so the source briefing page is never deployed):
rsync -a --exclude='.DS_Store' --exclude='._*' --exclude='/index.html' \
../module4/challenge/ provisioning/files/website/then re-run provisioning.