# 1. Clone the repository
git clone <repository_url>
cd INE_CYBER_ASSIGNMENT_JOB

# 2. Build and start all 3 lab containers in detached mode
docker compose up -d --build

# 3. Verify all containers are running and healthy
docker ps

python detection/run_all_detections.py

# Enter the attacker container
docker exec -it cve-2025-32433-attacker bash

# Run the master detector inside container
python3 /work/detection/run_all_detections.py

# Connect to Vulnerable Target (Port 2222)
ssh -p 2222 [email protected]
# Password: LabPass2026!Secured

# Connect to Patched Target (Port 2223)
ssh -p 2223 [email protected]
# Password: LabPass2026!Secured

# Connect to Vulnerable Target (Internal Port 2222)
ssh -p 2222 labuser@target_vulnerable
# Password: LabPass2026!Secured

# Connect to Patched Target (Internal Port 2222)
ssh -p 2222 labuser@target_patched
# Password: LabPass2026!Secured

# Test Vulnerable Target
python scripts/baseline_auth_test.py 127.0.0.1 2222

# Test Patched Target
python scripts/baseline_auth_test.py 127.0.0.1 2223

# Test Vulnerable Target
python3 /work/scripts/baseline_auth_test.py target_vulnerable 2222

# Test Patched Target
python3 /work/scripts/baseline_auth_test.py target_patched 2222

# Scan Vulnerable Target
python detection/detect_cve_2025_32433.py 127.0.0.1 2222

# Scan Patched Target
python detection/detect_cve_2025_32433.py 127.0.0.1 2223

# Scan Vulnerable Target
python3 /work/detection/detect_cve_2025_32433.py target_vulnerable 2222

# Scan Patched Target
python3 /work/detection/detect_cve_2025_32433.py target_patched 2222

# Run inside Attacker Container shell
python3 /work/detection/network_behavior_detect.py

# Run from Host PowerShell
python detection/host_process_monitor.py

Get-Content -Path .\logs\target_vulnerable\ssh.log -Wait -Tail 20

handle_msg(#ssh_msg_channel_open{}, #state{authenticated = false} = State) ->
    {disconnect, {error, unauthenticated}, State};

docker compose down