This playbook will install and configure my typical malware anlysis lab setup. This was never really meant to be shared and it may not even work on your setup or network depending on your lan config etc etc. I run this on a fresh ubuntu 18.04 install, I doubt it will work on anything else without a fair amount of work. Also this will install a bunch of stuff really only I will use (i3 with my specific config etc) so I wouldn't run this without modification if I were you anyway. You could just comment out all the dotfiles / i3 crap in the playbook/workstation.yml file.

I should also mention this will remap your caps lock as a ctrl key.. I'm sorry if thats not your thing. Just find the block with name: set keyboard mods in the playbook/workstation.yml file and remove it.

Here is a (very) short overview:

This lab uses kvm as the hypervisor and installs virt-manager. There are two bridged interfaces created and configured for me to attach VMs to, br0 and br1.

br0 is treated as the "greenzone". It's iptables config allows all outgoing connections to the internet but not to local lan networks.

br1 is treated as the "redzone". It's iptables config allows all outgoing connections to the internet, but transparently routes them through tor, masking your IP address. It also doesn't allow outgoing connections to local lan networks.

• Generate ssh key with no password
• Add key to github (cloning over ssh for workstation so I can modify my dotfiles easily)
• Set correct config in ./bootstrap.sh
• Run sudo ./bootstrap.sh, this will install ansible and run the playbook.

If you want to run the labs playbook (to set up an ubuntu 18.04 server instance):

• Copy the ./playbook/inventory.yml.example file to ./playbook/inventory.yml and set up your hosts with the correct config (as shown in the example).
• Run ansible-playbook playbook/labs.yml -i playbook/inventory.yml --ask-sudo-pass.

• Set up my "blackzone", routing all traffic to inetsim.
• Extract all of my specific configs (CIDRs etc) to ansible vars so they can easily be overriden.