Plan du Cours (5h)

• client/serveur, OSI, encapsulation, protocoles
• protocoles de communication d'internet et du web (TCP, HTTP)
• sécurité des cummunications (chiffrement symétrique et asymétrique)

Outils Visés

• programmation socket python : https://docs.python.org/3/howto/sockets.html
• scapy : https://scapy.net/
  • https://openclassrooms.com/fr/courses/1291886-manipulez-les-paquets-reseau-avec-scapy
• wireshark : https://www.wireshark.org/
• qemunet : https://github.com/orel33/qemunet

Progammes

* http://cache.media.education.gouv.fr/file/CSP/41/2/1e_Numerique_et_sciences_informatiques_Specialite_Voie_G_1025412.pdf

• http://cache.media.education.gouv.fr/file/CSP/41/0/2de_Sciences_numeriques_et_technologie_Ens-commun_1025410.pdf

Docker Demo

Installation de Docker :

1. Windows 10 (64 bit) : https://hub.docker.com/editions/community/docker-ce-desktop-windows
   • select linux container
2. Linux (Debian/Ubuntu) : …

Installation de Scapy :

• s'inspirer du Dockerfile https://hub.docker.com/r/syakesaba/scapy/ (based on kali-linux)
• regarder aussi scapy + jupyter : https://github.com/rambasnet/scapynotebooks

Special Tips for Nested Virt in QEMU/KVM

Check nested virtualization inside QEMU :

For kvm_intel module, check /sys/module/kvm_intel/parameters/nested is “Y”… Else

# If you have an Intel CPU, use this:
$ cat > /etc/modprobe.d/kvm_intel.conf
options kvm-intel nested=Y

Enable Intel VMX cpu flag in bios, then in /etc/default/grub and add “intel_iommu=on” to GRUB_CMDLINE_LINUX line. Then, sudo update-grub

Check IOMMU is OK with command: virt-host-validate

• https://www.linux-kvm.org/page/Nested_Guests
• https://www.linux-kvm.org/page/How_to_assign_devices_with_VT-d_in_KVM
• https://scottlinux.com/2017/05/10/how-to-enable-iommu-support-in-fedora-linux/