# Setting Up Your Workstation

Before proceeding, notify your manager that you will need access to NPK, Qualys, Ghostwriter, the Cloudflare Zero Trust testers group, and the local Kali users group.

# Setting Up Your Terminal

If the Windows Terminal app is not already installed, install it from the Microsoft Store. Then, navigate to the settings page and click the gear icon in the lower left corner. This will open the JSON file that holds the terminal settings.

Navigate to the the "schemes" object and add the following inside the square brackets. The trailing comma is only needed if there are other styles listed after the one you are adding. This is a color scheme that conforms to the DM style guide and should be used when taking screenshots of the terminal.

        {
            "background": "#FFFFFF",
            "black": "#000000",
            "blue": "#6D174E",
            "brightBlack": "#000000",
            "brightBlue": "#6D174E",
            "brightCyan": "#145571",
            "brightGreen": "#5BA0A0",
            "brightPurple": "#6D174E",
            "brightRed": "#F26F2D",
            "brightWhite": "#000000",
            "brightYellow": "#CEA04A",
            "cursorColor": "#FFFFFF",
            "cyan": "#145571",
            "foreground": "#000000",
            "green": "#5BA0A0",
            "name": "Doeren Mayhew",
            "purple": "#6D174E",
            "red": "#F26F2D",
            "selectionBackground": "#000000",
            "white": "#000000",
            "yellow": "#CEA04A"
        },

Save and close the file. Return to the Settings section and select Color Schemes from the left-hand navigation menu. The Doeren Mayhew theme should be included in the presented list. Click the Doeren Mayhew theme, then click the "Set as default" button. Press the save button and exit the settings screen. This will set the Doeren Mayhew color scheme as the default for all profiles in the Terminal app. Use of this profile is required when taking screenshots for reports.

Testing Tip

Many people prefer to use dark mode to reduce eye strain, especially when working at night. You can use a dark mode theme to do the work, then change the profile to Doeren Mayhew just to take screenshots.

# Configure Cloudflare SSH

You will primarily connect to the testing appliances from the terminal using SSH. However, becasue the resources are protected behind Cloudflare Zero Trust, you will need the cloudflare daemon (cloudflared) to access them. We will integrate this seemlessly into your SSH configuration so no extra commands will be needed.

First, download cloudflared from this page Downloads. Select the Windows 64-bit Executable and download it. Move it to the following location and rename to cloudflared. Replace {account} with the correct folder for your account. The Cloudflare folder will not exist, so you will need to create it. C:\Users\{account}\AppData\Local\Cloudflare\cloudflared.exe

Warning

You may not be able to see the AppData folder without enabling Show hidden files in file explorer in your computer's settings.

If it does not already exist, create a folder named .ssh in C:\Users\{account}. In that folder, create a text file named config with no file extension. Paste the following into that file, again being mindful to replace the to replace both occurences of {account} with the correct path.

Match host *.itasredteam.com exec "C:\Users\{account}\AppData\Local\Cloudflare\cloudflared.exe access ssh-gen --hostname %h"
  ProxyCommand C:\Users\{account}\AppData\Local\Cloudflare\cloudflared.exe access ssh --hostname %h
  IdentityFile ~/.cloudflared/%h-cf_key
  CertificateFile ~/.cloudflared/%h-cf_key-cert.pub

This will allow connection to our resources behind Cloudflare Zero Trust using the standard ssh syntax ssh username@server. If you are not assigned to an engagement, ask a manager for an appliance you can connect to as a test.

# Test Access to Internal Apps

If you are able to access this wiki, you have probably been already setup with the necessary applications via Cloudflare Zero Trust. However, test each link below and ensure you are able to log in. These all use SSO and you should not be asked to enter a username and password. If anything isnt working, let your manager know.

AWS SSO - you should be able to reach the AWS access portal screenm, its ok if no accounts are listed.
Qualys
Ghostwriter - click the Cloudflare Access button to login via SSO