Penetracijsko testiranje WIndows Server 2016 u virtualnom okruženju

master's thesis

• Title (english): Penetration testing Windows Server 2016 in a virtual environment
• Author: Lovro Božičević
• Mentor: Krešimir Pavlina (mentor)
• Committee member: Ana Pongrac Pavlina (predsjednik povjerenstva)
• Committee member: Kristijan Klasan (član povjerenstva)
• Committee member: Krešimir Pavlina (član povjerenstva)
• Granter: University of Zagreb; Faculty of Humanities and Social Sciences; (Department of information and Communication sciences); Zagreb
• Defense date and country: 2023-07-06, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Information and Communication Sciences

Abstract

Cilj ovog rada je steći uvid u sigurnost Windows Server 2016 operacijskog sustava u laboratorijskom virtualnom serversko-klijentskom okruženju. Računala te generalno informacijske tehnologije su potpuno utkani u svakodnevni život te je u razvijenim dijelovima svijeta poslovanje bez njih nezamislivo. Sa konstantnim, rapidnim razvitkom informacijskih tehnologija otvaraju se i novi vektori napada na računalne sustave, računalni sustavi su kompleksniji nego ikada te je vrlo lako previdjeti i pogriješiti pri konfiguraciji istih. Sa strane napadača je procesorska snaga jača nego ikada te su mnogi alati dostupni koji potpuno automatiziraju procese napada na računalne sustave. Jedan od načina otvrdnjavanja sustava protiv napada jest penetracijskim testiranjem. U ovome radu se provodi penetracijsko testiranje Windows Server 2016 serversko-klijentskog okruženja koristeći Kali Linux operativni sustav. Želi se prikazati koliko je bitno redovito ažuriranje, nadziranje i ispravno konfiguriranje serverskih sustava.

Abstract (english)

The goal of this thesis is go gain insight into the security of the Windows Server 2016 operating system in a controlled virtual server-client environment. In the current age, computers and IT in general are completely integrated into our everyday lives. In developed parts of the world, business without IT is unthinkable and not possible. With the constant, rapid development of IT, new vectors of attacks on computer systems are opening up, computer systems are more complex than ever and it is very easy to overlook and make mistakes when configuring them. On the attacker's side, processing power is stronger and more available than ever and many powerful tools which automate attacks are free and at their disposal. One of many ways to test a systems' security and defenses is by conducting a penetration test. In this thesis, penetration testing of the Windows Server 2016 operating system is carried out using a Kali Linux machine in a controlled, laboratory environment. The goal is to present how important it is to regularly patch, monitor and correctly configure a server.

• Keywords: penetracijsko testiranje; server-klijent; windows server 2016; kali linux; active directory; eternalblue
• Keywords (english): penetration testing; server-client; windows server 2016; kali linux; active directory; eternalblue
• Language: croatian
• URN:NBN: urn:nbn:hr:131:858299
• Study programme: Title: Information Sciences; specializations in: Archivistics Study, Library Science, Information Sciences (research), Information Sciences (teaching), Museology and heritage management, Informatology; Course: Information Sciences (research); Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra informacijskih znanosti (magistar/magistra informacijskih znanosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2023-07-06 13:53:38