What's new in Labtainers - Center for Cybersecurity and Cyber Operations
What's new in Labtainers?
See the Labtainers release notes for details on additions and fixes to Labtainers.
- Revised the tcpip lab and guide to clarify that a successful syn-flood attach is not possible with this configuration, and corrected its automated assessment.
- Changed student artifact file names from "zip" to "lab" and added a preamble in an attempt to prevent students from unknowingly expanding the zip and then submitting some portion of its internals.
- The -r option is now the default when using gradelab, (i.e., to get a fresh grading container.)
- New DNS lab to introduce the DNS protocol and configuration setup.
- Remove support for Mac and Windows use of Docker Desktop, which is too unstable for us to support.
- Example labs for LDAP and Mariadb using SSL.
- Tutorial videos
- Use a "labtainers" terminal profile when displaying terminals for Labtainer computers (see the tutorials).
- New host-based IDS lab using OSSEC.
- New lab to introduce management of users/groups and file permissions.
- Added searchable keywords to each lab, see the "-k" and "-f" options to the labtainer command.
- Introduced "Labpacks" to collect exercises into packages with common content. Instructors can define their own Labpacks, e.g., to identify a set of labs as part of a course. See the Student Guide and Instructor Guide.
- New lab on networking basics.
- 2 new introductory software vulnerability labs: overrun and printf
- Added sql-workbench to the db-access lab
- Moodle LMS support for bulk download of student submissions (See the Instructor Guide)
- SIGCSE Symposium workshop guide for using and creating new Labtainers exercises.
- Ten new web security labs using the OWASP framework, published as IModules.
- GUI-based "labedit" tool for creating and editing labs (see the Lab Designer Guide)
- Browser-based review of automated assessment results and artifacts from student labs. (See the Instructor Guide).
- Run Labtainers using “Docker Desktop” for Windows or Mac, accessing a virtual desktop via a web browser. (See Student Guide.)
- Deploy Labtainers on cloud servers for remote access via a web browser (See https://github.com/mfthomps/Labtainers/blob/master/headless-lite/README.md) Note this is not a turn-key solution, it requires IT support and integration with local infrastructure.
- A new “db-access” lab covering access control on a shared RDBMS per an information security policy
- Addition of quizzes to help ensure students are prepared to perform the lab – see the db-access lab for an example.