Page 1 of 1

Finding IP Address of Remnux on VirtualBox

Posted: 26. Mar 2019, 17:46
by zak100
Hi,

Can somebody please guide me how to find IP address of Remnux on VirtualBox. My VirtualBox is running on ubuntu18.04. I tried the ipconfig command but its not showing me IP address:

I can't copy the output from remnux terminal because then it pops up a message saying "capture" or "cancel". However I have uploaded the image.

Somebody please help me.

Zulfi.

Re: Finding IP Address of Remnux on VirtualBox

Posted: 26. Mar 2019, 18:09
by andyp73
This doesn't (for the moment at least) look like a VirtualBox issue. Your eth0 adapter in the guest doesn't currently have an IP address assigned to it. That may be down to it not being able to reach a DHCP server or a misconfiguration in static addressing. Both of those are a configuration issue in your guest (or a wider networking issue).

We are going to need some better information from you to determine if this is a VirtualBox issue. Lets start with host OS and version, guest OS and version plus how you have configured the network adapters in the guest configuration.

-Andy.

Re: Finding IP Address of Remnux on VirtualBox

Posted: 28. Mar 2019, 22:00
by zak100
Hi,
Why its not a virtual Box issue? I am running virtual Box on remnux.

My host machine is : ubuntu 18.04, Intel i7 8th generation, 16GB RAM, 6 cores,
Guest OS = remnux-6.0-ova-public.ova

I am following a tutorial which requires Host only Machine. Its title is:

Security of Information Systems
Friday, October 17, 2014
Malware analysis for everyone # 2 - REMnux and Mobisec - dynamic analysis of malware on android

I have to do following:

“MobiSec needs to be configured to redirect network traffic to REMnux. To do this, you need to set up DNS and Gateway Mobisec on the REMnux IP address. We set the DNS by editing /etc/resolv.conf in my case, enter 192.168.11.130 - REMnux's IP address. “

Some body please guide me.

Zulfi.

Re: Finding IP Address of Remnux on VirtualBox

Posted: 28. Mar 2019, 23:03
by socratis
You have chosen the Host-only adapter. For your VM to be able to get an IP, you need to have the HostOnly DHCP enabled. Do you? Post the output of the following command from your host:
  • 
    VBoxManage list dhcpservers

Re: Finding IP Address of Remnux on VirtualBox

Posted: 29. Mar 2019, 18:33
by zak100
Hi,
Thanks for your response. I think I have. I got following output:
:~$ VBoxManage list dhcpservers
NetworkName:    HostInterfaceNetworking-vboxnet0
IP:             192.168.99.100
NetworkMask:    255.255.255.0
lowerIPAddress: 192.168.99.101
upperIPAddress: 192.168.99.254
Enabled:        Yes
Does the above command show IP of remuz? Its showing one IP address but I am not sure is it of remnux or not?

Please guide me.

Zulfi.

Re: Finding IP Address of Remnux on VirtualBox

Posted: 29. Mar 2019, 18:44
by andyp73
What it shows is that you have an enabled DHCP server that is capable of giving out IP addresses on the vboxnet0 interface. You should find that your guest gets allocated an IP address somewhere between 192.168.99.101 and 192.168.99.254.

You need to check the configuration of the eth0 network interface to verify that it is set to request an IP address using DHCP. You could try running the following command in the remnux guest:

dhclient -v eth0

-Andy.

Re: Finding IP Address of Remnux on VirtualBox

Posted: 29. Mar 2019, 23:48
by socratis
If we're talking about the same REMnux VM as in your other thread, then I imported the VM and it worked right out of the box. With the default NAT. I see that you changed it to HostOnly adapter, so I did the same. Again no problem:
remnux@remnux:~$ ifconfig
eth0      Link encap:Ethernet  HWaddr 08:00:27:73:2a:cc    <-- That 08:00:27 is a VirtualBox NIC
          inet addr:192.168.20.147  Bcast:192.168.20.255  Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fe73:2acc/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1180 (1.1 KB)  TX bytes:1262 (1.2 KB)
and to compare the output of what Andy asked for (you need to 'sudo' the command, otherwise you get a "Permission Denied"):
remnux@remnux:~$ dhclient -v eth0
Internet Systems Consortium DHCP Client 4.2.4
Copyright 2004-2012 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/

can't create /var/lib/dhcp/dhclient.leases: Permission denied
RTNETLINK answers: Operation not permitted
Open a socket for LPF: Operation not permitted

remnux@remnux:~$ sudo dhclient -v eth0
Internet Systems Consortium DHCP Client 4.2.4
Copyright 2004-2012 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/

Listening on LPF/eth0/08:00:27:73:2a:cc
Sending on   LPF/eth0/08:00:27:73:2a:cc
Sending on   Socket/fallback
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 3 (xid=0x769a15c5)
DHCPREQUEST of 192.168.20.147 on eth0 to 255.255.255.255 port 67 (xid=0x769a15c5)
DHCPOFFER of 192.168.20.147 from 192.168.20.100
DHCPACK of 192.168.20.147 from 192.168.20.100
RTNETLINK answers: File exists
bound to 192.168.20.147 -- renewal in 489 seconds.
remnux@remnux:~$