Segmented Proxmox Homelab

Mon, 01 Jan 0001 00:00:00 +0000

One Proxmox host runs workloads at different trust levels: development, internal services, public-facing services, and a security lab for malware and offensive tooling. Each is isolated in its own network segment behind a firewall, with no path between segments except by explicit rule.

Network segmentation

The firewall is an OPNsense VM. The host has a single NIC and the router has no VLANs, so each segment is a Linux bridge with no uplink, attached only to OPNsense, which routes and filters between them.

Internal Pentest: Five Boxes, Five Ways In

Thu, 04 May 2023 00:00:00 +0000

This is a retrospective on an internal penetration test I ran as the final for a CMIS offensive-security course. The scope was five intentionally-vulnerable hosts on one flat network, assessed end to end from enumeration through root. On four of the five boxes, the way in was a configuration problem, not a software flaw. Each section is the shortest honest path to root/admin, then the fix that would have stopped it.

Rylan Puderbaugh

Segmented Proxmox Homelab

Network segmentation

Internal Pentest: Five Boxes, Five Ways In