I'm planning on partitioning a part of my desktop to become a small server that I will perform the pentest on, if this doesn't work because of hardware issues I'll simply use VMware workstation.
Questions I have as a complete noob
1. Once I setup the apache server how would I access it from a different network? Would the IP address of the router or the target machine be the target IP?
2. If I do set it up through a VM would I access it differently than I would a machine that has windows 2003 server as the host OS?
3. I'll be using metasploit on BT5 R3 on a VMware station on my laptop to perform the pentest on my desktop server. Once I perform the pentest the first time and document myself getting in, grabbing the target data, then cleaning up the traces, what would be the best way of reversing all damage done to the server?
The reason is because I have to perform it live infront of the class as well.