Hackinabox: Self-Contained Pen Testing Lab

[Music] higher performance communication resources and faster and more reliable technology higher performance communication resources and faster this is a hack in the Box can you hear me now okay thanks everyone uh this is a self-contained pentesting lab um so let's get started I'm ARB white I'm a network security analyst for a local uh healthc care supplement company uh all the requisite certifications that everybody has and I like to say that I collect Hobbies as a hobby I tend to jump from one thing to another and this is just one of those projects so today this is what we're going to talk about uh going to go over the what the hack in the box is how I

came around to do it um kind of the the idea where I'd like to see it go um the problems that I ran into when I was building it the um challenges that I was able to overcome some of the decisions that I made um I also want to make it better and I invite anybody who's interested in this just let me know I'll be happy to take any input particularly if anybody wants to help build some Labs um we'll go into what all is in the kit and there's really nothing of value in this talk so I just want to set that bar really low to begin with uh it's not going to go over how to use Cali uh any

specific attacks anything like that this is more the framework that you can use to uh learn how to build one of these to help teach other people mission statements gotta love these right um reason that I wanted to do this uh as the the project invol evolved is I'd like to have something that you can take into a classroom you can give to kids to uh to a hacker camp or um a scout troop or something like that and give someone the the beginnings of uh this is how you do some pen testing get people interested in uh cc into Security in general um I was going to have a really great quote here about uh standing on the

shoulder of giants but uh our keynote kind of ruined that this morning so I'll skip that bit um but yeah let's let's get the next generation of infos professionals the tools to get interested to learn to to jump into this uh you know I I find security fun for a reason um I'd like to see that interest for other people too again I want to make sure we're setting the bar appropriately here um but a little bit of backstory uh about a year and a half ago I was uh studying for my uh certified ethical hacker uh CT and had uh an introduction into it was backtrack that we were using but uh it was kind of my first for into

the offensive set of security uh having been kind of blue team defensive side for most of my career um I decided I needed a lab so I could use some of the the tools that I've been learning and have a way to kind of work with what I was using uh also I am innately curious and just wanted to kind of dive into that you know self-education is uh a recurring theme amongst uh people of our profession so this was just a a natural progression for me originally my idea was just to use VMS there's a ton of them out there uh that you know you can go get Cali directly from uh offensive security and

a VM app already ready to go out of the box there's metasploitable things like that um so I started looking around my house what what Hardware did I have that I could use to to build up a a hypervisor and set up some VMS and set up a lab well I didn't have a whole lot uh the only spare machine I had lying around used uh old ddr2 memory which was just stupidly expensive when I started this uh so started to think about uh you know what else could I use what could I do uh to build this out um and also you know when it comes to setting up a pen Testing Lab you're running vulnerable

systems intentionally vulnerable systems you don't want those running on your corporate or on your home network what if someone else gets to them then they can pivot around and attack you so I was also looking at ways that I could protect myself I'm no VMware expert so I didn't really feel comfortable setting all this up uh on my home network that's when I came up with uh the the hack in the Box Pro uh concept here it's all Raspberry Pi base and really the reason that is is I was looking for an excuse to play with raspberry pies right um they're cheap you can get them very easily um and so I picked up a couple and

started setting it up and then I got the idea let's let's throw it all in a box a literal box let's have it all self-contained where it's portable and then that's that's when the idea of this is something more than just for me this is for other people to play with this is for uh a different audience right and in talking with a bunch of colleagues about it uh at work it kind of evolved into this idea uh but let's have this Standalone self-contained system uh let's let's use it for more than just my own little personal lab let's start teaching other people with that uh so how do we put it together you know obviously step one you have to cut

a hole in a box and that's just where I'm running the power to uh for the display uh I I looked at a few different options here uh there are some little mini HDMI 7in displays that you can get they're a little spendy also pretty small so it was kind of hard to see um and I was poking around I I think I ran to Walmart with a coworker and I saw this TV I'm like wait a minute that's cheap that's HDMI this will work so I picked it up and I had already picked up this uh toolbox so I take it back to the office take the TV apart it magically fit it just

happened to wedge perfectly in there um I decided you know okay let's this is now a thing we're we're going to go um that was the original concept which we'll get into a little bit later and I ended up uh landing on this gaming display uh which was significantly smaller but I was able to velcro it in which means I can pull it out if I want to use it uh or something else um stuck the raspberry pies together everything's just kind of velcroed in so you can pop it out at needed or at will uh the power supply is in there I had a old tackle box line around that I took some uh some of the inserts out

that I use for storage internally uh I was running into a problem where I was running out of space internally in in the case with uh all of the the cords and power supplies and and everything uh had a full-sized keyboard full siiz Mouse couldn't fit that in uh so it it changed again over the the course of the the evolution software-wise uh pretty basic stuff running uh Cal Linux on what I call the attack server um and that's what you do all of your interfacing through uh the the victim server I'm just running a a real simple lamp stack uh for anybody who doesn't know lamp is a a Linux Apache myle PHP uh all off the

shelf stuff that you can uh download from uh apt and then for the the victim service I'm running uh dvwa the dam vulnerable web app and this is a application that you can run it has a number of different uh vulnerabilities baked into it that you can attack uh at will as I said again this is kind of a useless talk I'm not going to go over the intricacies of dvwa that's what I decided to use uh software wise and all of this is uh openly available free from the various vendors there will be links later in the slides this is what it looked like to begin with uh there's a fair little spaghetti monster with all the power

supplies power cords network cables uh it was used a switch uh just a little uh I think I used a net gear four port switch uh initially um and at one point I I had as many as uh three victim servers that I was going to run but I decided to pair it down just for usability sake uh into its current form and this is another problem that I was running into you had giant wall warts for everything you needed a you needed one for the switch one for the TV uh one for each of the the raspberry pies and they take up a significant amount of space on a power strip as you could see

there I've got one little slot that I might be able to wedge a plug into if I was lucky uh and this is only running with uh one victim server and one attack server um it was kind of hard to keep things tidy or elegant inside the the box it was uh a giant mess of cables and and everything and I I wasn't real happy with that and so obviously I decided I needed to change it but uh this is what the original display looked like is you can see it just fit right into the the edges of the the toolbox I'm using uh the downside of this is that you can't reach the the power or input

buttons on the side of the the display because they're ociated by the by the case so you had to use the TV remote control something that you could lose uh batteries could die you know I I didn't really like that solution either and also this that giant power brick was really kind of uh was harshing my vibe a little bit I couldn't uh I couldn't make that fit into the into the whole case in a in a way that made sense to me and so I started looking for uh some other Solutions and so this is kind of how the the whole kit evolved over time um originally when I started this this is about a year and a half ago I used

the the raspberry pi b plus um and a Raspberry Pi B that were the original ones that I had and then a few months later about a year ago uh the Rasberry P Foundation introduced the the pi 2 which if you know much about them I think the Raspberry Pi 2 has about six times the CPU is a Raspberry Pi B four times the ram it was a it makes Cali usable because in the old ones there was a Cali image for it but if you got into x windows you could hardly use it so it was really only usable from the command line um so that was the first change uh then just last

week Raspberry Pi 3s were announced um this currently isn't running those I don't have images yet for those but um that that's for future engagement uh for networking uh again I was originally using a small ethernet switch um I wanted to simulate actual attacks where you're going from one host to another which is why there are two separate boxes in this uh and so I felt it was important to have some kind of networking and that's why there was a switch in there but again it's another big wall wart on the power supply um uh and I didn't it just was kind of ugly so I didn't like it so I switched to to Wi-Fi there are small

little USB powered uh Wi-Fi routers that you can get they're they're designed for hotel use when you're on the road so you can hook up to the hotel Wi-Fi you can um connect multiple devices that way without having to pay for it that sort of thing I I used that for a little while but I found them to be quite unreliable uh they're not really designed for two devices to talk across them so uh then I just decided let's just use a crossover C let's cable let's keep it simple and uh that made that made a great deal of sense uh also I stole the cable so hey it's free thanks uh 801 labs for that

uh thank you uh I also have multiple victim Services set up uh uh and that's something that I I still want to do but I think I'll tackle uh in a different matter uh again the victim service just uses a lamp stack I investigated for a little while the Windows 10 iot image for Raspberry Pi there's some drawbacks to that one it's not really running Windows 10 it's effectively a sensor you have to connect to it from another Windows 10 and machine a laptop or a desktop or something uh doesn't run any real services I just felt it wasn't a a good fit at least at this time it'll be interesting to see as the whole iot

world evolves if they improve the Windows 10 I would like them to improve it enough that it can run like a little stripped down I that you can then bust and own because I think that would be kind of fun um but right now it's not usable enough to to be a good victim server for this so um and also space that would have been another Raspberry Pi and uh my wife was starting to look at me a little weird when I had half a dozen raspberry pies kicking around the house what are you doing with all these things so I trimmed it down a little bit so what do we have today uh and you can come up and look at

it later so right now there's uh two raspberry pies that are just velcroed together and then to the case cross over cable together with a a USB power supply everything in this is running off of USB and uh again the little storage bins I just took out of a tackle box that I have uh so in this I've got a little storage for memory cards Etc and I threw my lockpick stuff in there which I think will be that's a a fun little uh uh tool that you can use for when you put this in front of a student you know it's not just information security that we care about we care about physical security too right so let's have the

lockpicks in there and teach people to be interested in lockpicking that's all part of uh part of what we do so it's not really factored into the cost of this but that's that's why I have it in the case today just uh I think it's a good corollary to the rest of the the kit uh as you can see the the gaming display is up there uh and I'm I'm using a uh Wireless Logitech keyboard uh Mouse combo uh for AO uh and again everything that's physically attached to the case is just using industrial strength Velcro uh just go to your craft store and find it it's pretty easy to get so Raspberry Pi 2 for the compute side

and this will change to Raspberry Pi 3 um that was just released last week I have a couple of these uh the SD cards I I just tried putting the SD cards in to see if they would work and they won't boot so uh the the RAS and the victim server is pretty easy to set up because you're going to do all that through uh rasbian or noobs uh the uh Cali the offensive security hasn't yet released an image for Cali I understand that there's a script uh that you can install with that U it's not part of this because I haven't done it yet everything that I've got here I know works so I can only speak to that um but

uh that's the the next step of this probably is going to be the the pi 3s uh again running uh the Cali arm distribution for the attack side uh the toolbox I just picked up at Harbor Freight was real cheap and uh gave me an excuse to add the fuzzy handcuffs for added security CU I thought that was a fun little thing and everybody everybody that I talked to about this wanted the the nuclear bomb code handcuffed to your wrist toolbox so that's in there the the display I'm using is from games uh thanks to grifter for telling me about that that uh solved a few problems for me and then the power source is uh from

anchor um and I'll get a little bit more into the power supplies because I did run into to some issues

there and then the the bonus stuff in here are some practice locks and lockpicking uh lock picks uh I still have the the USB Wi-Fi stuff in there so if I'm out somewhere and I need to upgrade a package or something like that I've got that connectivity uh and you know you want the fuzzy handcuffs on this that really just kind of seals a deal so the the problems that I ran into while building this um one of the first things when uh when I built the the final form or current form of this was uh finding reliable USB power to run everything uh you will have to find one that works uh I went through about three

that didn't I would plug two or three devices in and when I plug that SEC that third device uh it would dump it wasn't able to provide enough uh Power on each USB port to actually power the raspberry pies the display the Wi-Fi uh that was probably the the biggest challenge uh when I decided to power everything via USB was to uh to find a reliable power source uh the power on procedure C is very picky um about both power on and power off I found at least in this setup so you do have to power on the display first before you power on the the Cali box otherwise it never picks up the um

the signal from the HDMI and uh uh also when you're powering down if you don't gracefully power down C it will more than likely corrupt and you're going to be rebuilding your Cali box um ask me how I know this happened several times I think I wore out a couple of uh micro SD cards the Wi-Fi was very inconsistent I could make connections from the victim or from the attack server to the victim server I was able to kind of proof a concept that but not reliably probably about 75% ping loss when I just be running ping um and it very well could be the the router that I have I only tested one before I decided to dump it as a

concept um I want to look into that further because uh you know wi-fi hacking is part of our daily lives now so uh I'd like to find a better solution for that going forward um also the U sorry the Raspberry Pi 2 has a fun little it's not really a bug it's just physics but but if you uh take a picture of it and you're using a zeeon flash from your camera you just rebooted your Raspberry Pi there's a couple of fun little articles about it I recommend that you'd watch uh or read up on I don't know if Raspberry Pi 3 is susceptible to this the older ones are not um but I think all the Raspberry Pi

2os definitely are uh so it's just something they keep in mind so if you do like I am and and you want to take some pictures for your presentation um you're going to be reinstalling Cali because we're going back to that other problem that I was talking about uh ran into that a couple times and and uh if you use the TV and there's some valid reasons to use the TV rather than this gaming monitor that we'll get into don't lose the TV remote I did for about three weeks and wound up under my couch got to thank my dog for that one I guess but uh so just um I I didn't find a good Sol solution

for that uh if you build one of these I'm sure you can find some way maybe hey velcro it I used a ton of it in here so for the proof of concept finally got all the software up and running and downloaded a lab from uh Googling dvwa walkth through because I'm not going to reinvent the wheel there and uh started just running through the XR exercises in that uh the one of the first things that I ran into the current release of Cali for Raspberry Pi at least does not include some basic uh packages uh specifically curl wasn't in there and half of the um the little walkthrough things you were going to use Curl you could probably use W yet

too but uh uh so you may need to install some packages uh packages yourself uh and you don't have absolutely have to use Cali for this you could use uh Arch Linux and do black Arch and something like that as well but uh again I've only tested this with with Cali and with dvwa I think the problem that I ran into is the lab that I was uh using actually was based off an older version of backtrack and so uh when they change from backtrack to C they they Chang some of their uh base repositories I guess and that's why RS and in there so that's something that you'll need to do but a lot of the labs work some of it is just

URL manipulation for uh password changes things like that I mean that's the level that this web app is designed for is intentional vulnerabilities and there's different levels of security that you can set the web app to and then the lowest ones it's using the dumbest security practices that you can and so sometimes you're just doing URL manipulation that's stuff is working uh I I didn't go through everything on the the labs that I found but a lot of the the walkthrough stuff that I found worked and to go forward with this in the future I definitely want to see uh Labs that are really on Rails that you can put in front of somebody without any

background in this and they'll be able to do all a lot of this uh again if you have any interest in working with me on that please uh let me know I I want to make this a more full-fledged product um going into the improvements um I want to find better uh or more I should say victim Services uh I'll throw together maybe an FTP Service or something like that that you can uh pull some passwords out of with uh uh a TCP dump or something like that just other victim service I'd like to see other than just VD uh dvwa um met exploitable which if you're not familiar with is a intentionally weak uh system that's a an OVA that you

can download it's a VM I'd like to see that something like that ported to this so you can use metas framework to attack it uh because there's tons of labs out there for that as well also because who doesn't love Lego and 3D printers I figure instead of using just off-the-shelf cases for the uh the raspberry pies you know throw together something with Lego that you can connect both of the the raspberry pies together or uh 3D print something um again I want to make a better guided lab I want uh I want something that is very approachable to a young audience I really feel that uh the the end goal for this project is

something that you put in front of kids you know a high school computer class or uh any any group of kids that might be interested in this uh and so the labs need to be better Geared for that most of the most of the labs that I've seen are more Geared for people with a little stronger background um the Raspberry Pi 3s Raspberry Pi 3 one of the big improvements that they added is it uh bundled Bluetooth and Wi-Fi onto the board so you don't need to use uh external cards um and then you can get into some of the wireless hacking stuff you know let's see some CIT on this and see what uh see

what you can get there do some Bluetooth hacking might be fun as well I haven't tested it but I'm pretty sure that uh with one of the beefier USB battery packs that's out there I if they can jump start a car they can probably power this for a little bit of time uh I I want to make it uh battery powered for real port IL so it right now everything's running off of one plug which is great but how about zero plugs I think that' be even better ultimately uh it does Drive the price up on this a little bit but uh it would give it that portability that you could take it out uh it doesn't matter where

you're at you'd be able to run everything um for the attack server C is not the only one out there uh with Arch Linux you can install Raspberry Pi image and then download all the black Arch uh packages uh it requires a fair bit of space so you're going to need I think like a 32 or 64 gig SD card where currently I'm running off of just8 gigs bare minimum is necessary um that's uh somewhere that I want to investigate further and go in the future um and any other improvements that anybody might have to this uh please let me know one that uh I'd also like to see is to ruggedize the raspberry pies to a degree

right uh the raspberry pies that comes out of the box is just a little card it's pretty easy to to break if you really wanted to um I know that hackers for charity has their rugged P project uh something like that might be a direction that I go in the future or even just looking at ways myself to ruggedize these uh I think that again lends itself to the portability aspect of this uh making it easier to put in front of other people um and the sky's a limit on this as far as where it could go uh particularly on the victim Services site there's millions of applications out there a lot of them run on Linux there's no reason

they couldn't run on the the Raspberry Pi uh and the I really think that a lot more work can be done on that side and that's where where I'm going to work in the future also there are ways that you can cut prices on these I want to make this approachable and affordable for people to build and there's several way there several places that you can cut significant costs out of this the original TV that I was using in this ran about 99 bucks and that was uh the display is Far and Away the most expensive part of all this by the way uh the gaming display that I'm running now that was uh 170 so you can save

significant costs right there there are also some other USB displays out there uh I started digging around to see if I could find alternates uh to this particular one and I found them for 100 to 150 and there may be others go to some sketchy Chinese site and maybe you can get a knock off of this for 75 bucks I don't know you can run your victim Services locally to the Cali box you could run install the same lamp stack that you do on the victim server install dvwa set it up and then you're just attacking against Local Host that removes half of the the cost of the computers that you're using in this right uh you can use the Raspberry Pi

zero Raspberry Pi Zer came out uh four or five months ago it runs $5 instead of the $35 or so dollar for the Raspberry Pi uh there are some extra complexity to that because it doesn't have uh a built-in Network Port so you'll have to uh use like an OTG cable and then a a network adapter it's a little bit more as far as moving Parts uh drives the price up a little bit more because all of the peripherals for the Raspberry Pi zero cost about as much as the Raspberry Pi zero OTG cables the same amount cases the same amount um but it's also there you can omit the toolbox you don't need it I just felt that it was kind of a fun

little gimmick and kept everything all self-contained uh save a couple of bucks there also on the compute side there are alternatives to the Raspberry Pi uh the orange pie which is a a clone of the Raspberry Pi is significantly less expensive uh I haven't tested it with this I know for the victim server server it would be fine also with that note on the Raspberry Pi zero it would really only be able to run the victim Services uh it doesn't have the compute I think necessary to run uh Cali or to run a graphical interface in a usable manner I think um I again I haven't tested it but uh just given the the difference in

amount of memory and CPU available I think that would be the case uh but as far as the other system on board uh machines that are out there chip is one that would just came out it's about 25 bucks uh they had a successful Kickstarter and I'm waiting for mine to be delivered and uh I want to test it for victim Services Pine 64 is another one that recently hit the market Jaguar board is an x86 compatible one it's about the same price point that hit the the market um there there are several other options as far as the uh the compute that you can use you don't have to use Raspberry Pi I know

the Raspberry Pi stuff works as long as you're using pi 2s um so that that's what I'm I'm recommending in this case for power um the display wants uh 2.1 amp at 5 volt and uh the Raspberry Pi is 1.8 for the pi 2 I'm not sure what the power difference is if any for the Raspberry Pi 3 it's a little bit less for the older raspberry piip B's B pluses um so that's a consideration that you're if you're going to run a similar sort of uh USB charger block like I'm running you need to make sure that you've got that the one that I have is an 8 Amp 40 wat charger it's from anchor

uh I think they've uh upgraded it and the new one is obviously a lot more expensive but this one's still available you can find it on Amazon you can find it on eBay today um that uh if you want the USB power if you want the one plug solution that I've built here that's uh that's going to be keys to make sure that you can power correctly uh to steal a phrase I found a lot of ways to not power this so keep that in mind for the parts on this uh this is basically the build sheet for this uh two Raspberry Pi twos with a k case they run about $45 with the case 35 bucks for

a Raspberry Pi too about 10 bucks for the case and then you can find some deals the new Raspberry Pi 3 might actually drive that price down a little bit seemed to be the case when they introduced the Raspberry Pi 2 uh so you can say you know 10 20 bucks there maybe in the next few months uh a couple micro SD cards about eight bucks a piece um you want good good micro SD cards I found that out as well there's uh class 10 and other class 10 and so buy something that you know from a reputable Source the toolbox picked it up at Harbor for eight about 25 bucks it has uh some uh internal Pockets that you can

rip out which is what I did uh which where the display happens to be monitored or uh mounted um but there are some options there too the display is a gaming display from Gaines they run about 170 it's the most expensive part of this and as I said that's also probably the biggest opportunity you have to cut costs is to use a different display you could do set up everything else the same and just take it into a place that has a TV or a monitor you can plug into and get the same results so uh you don't have to have it like this you do have some options there uh picked up a couple

of little 6inch micro USB cables just to limit the cable mess Inside the Box uh there are a couple bucks uh stole the ethernet cable I highly recommend doing that wherever you can uh ethernet cables you shouldn't buy them uh HDMI cable it's a little one foot I think uh HDMI cable that was eight bucks uh the Logitech K400 keyboard it's a really great keyboard last week or the week before somebody disclosed some nice vulnerabilities for that so if you do buy any Wireless non-bluetooth uh keyboard go see if uh it's one of the affected ones upgrade your firmware if it's a Logitech or Microsoft they're the only two vendors I've seen that have upgraded firmware for it something to

keep in mind uh you know who knows what we're going to see attacks against next uh I I was a little surprised to see that one well not surprised but a little dismay I guess everything that you see here save the uh the USB router and lock picks I'm in under 370 bucks so for less than a price of a laptop you can build all this and it's really extensible you can you don't have to build the hack in a box out of this you can build like a little retro P retro gaming machine out of the same stuff get get some value out of it other than uh this my silly little project um

software everything again is open source uh or freely available uh the victim server runs rasbian in my case I just I'm lazy so I installed it via noobs uh noobs is uh the official Raspberry Pi uh method of uh creating the uh the images on uh there there's a NOS for Windows there's one for Mac uh OSX Mac uh or you can just image a a card with DD or whatever there's various different ways you can do that uh Cali Linux for arm you can get from offensive security uh if you go to c.org you can find a link to uh the arm uh images and uh C recently upgraded the their image to the new rolling

release for C that they uh they use and then DBW is from DBW doc. and that you just download the the zip file you extract it and you run some and put it into your uh uh website uh your your web server index page uh directory and you can run it very easily there's very little setup for that I think basically the the configuration you put in your MySQL password uh it's pretty simple I'd like to say thanks to a few people Pope uh for helping me take that stolen cable make a crossover cable out of it because I suck at cables Grifford for telling me about the this uh USB gaming monitor that really solved my

power problem um quite a bit uh dvwa for making a web app that made this really easy to set up uh Condor you know what you did uh my wife C and the bsides Raleigh career for convincing me to come up and talk in front of you guys today uh any question questions anybody has please let me know it's a g it's right here I GLI I think it it was uh pretty inexpensive uh sorry ginet is what it is pretty inexpensive very unreliable about set if I was just pinging across to the website to a website I'd get no packet loss but when I was is going from host to host across this tons of packet loss uh this needs a

little bit more investigation on my part to see why or if there are other options for the wireless um there there are a ton of these out there at varying price points this one is cheap because I'm cheap so uh ginet avoid for this but it is it is Handy to have in a in a case like this if I was going to do a live demo which I'm not quite stupid enough to do for my first ever talk like this um it would be nice if uh you could download updates or something like that if you needed to pull a package it's really good for that you can get online very easily this way um and safely

um but I I know there's got to be a better solution for the wireless and I'd really like to see it go that way particularly with the Raspberry Pi 3 with built-in Wi-Fi you don't need to add a another Wi-Fi card to the mix anything

else um about a year and a half but let me qualify that I had four surgeries in that time so there was a lot of downtime that I was not paying attention to it I'd probably say I'm in uh 30 days of real work over the course of the last year and a half of finding the services putting it together taking it to 801 labs and getting input and uh stealing ideas from other people things like that and

cables yep but from the software point of view you will have to rebuild the services and uh at least as of day before yesterday which is last last time I looked there is not an official Cali image for the Raspberry Pi 3 but I understand there is a script that you can run to download everything and and build a Cali image uh on top of rasmia not yet I don't suspect there will because of the the limitations of usb2 power it's not a usb3 power supply requirement uh and I just plugged it in when I was testing it uh I just plugged it directly into my existing infrastructure and it works you know I can install uh rasbian on it and

get it to work that way but uh I haven't run any um any scripts to try and build Cali or anything like that yet but power-wise no there should be no differences

yes don't know I'm an old school networking guy so the first thing that came to mind was a uh a crossover cable I don't think they're 10 or I don't think they're gig I think they are 10100 so they're probably don't auto switch would be my or Auto would be my guess but I don't know anything else anyone well I'll be kicking around up here uh I think we've got a few minutes if anyone wants to see it unfortunately apparently someone stole the dongle for my uh keyboard because it's not in there and it was earlier um so I can't actually log into uh my Cali box so when I power it down I'm going to have to reimage it uh but

if you want to kind of see how I've got it all put together it's all right here and happy to walk through it

thanks