Cybersecurity Practice Labs

Apply classroom knowledge in a secure environment, practicing real-world cybersecurity scenarios with hands-on labs.

Docker Labs

Pentesting machines in Docker are essentially isolated, virtualized environments specifically designed for penetration testing practice. By using Docker containers, you can easily deploy and manage various vulnerable machines or services that mimic real-world systems and network infrastructures. These machines are configured to simulate common vulnerabilities, allowing you to practice ethical hacking techniques in a controlled environment without affecting your actual system.

Vulhub

Vulhub is an open-source project that offers a collection of pre-configured vulnerable environments for security testing and learning. It provides a variety of real-world scenarios where users can practice exploiting known vulnerabilities in a safe and controlled setting.

coming soon

Vulhub is an open-source project that offers a collection of pre-configured vulnerable environments for security testing and learning. It provides a variety of real-world scenarios where users can practice exploiting known vulnerabilities in a safe and controlled setting.

.

Collegiate Cyber Defense Competition (CCDC)

In this lab, you will engage with setups that closely resemble those used in competitions. It features advanced security systems and a fully configured network with consistent settings, providing a realistic and effective learning experience.

coming soon

coming soon

coming soon

coming soon

Purple

I currently don’t have any Purple Team machines available, but if you have an idea or would like to create one, feel free to reach out to me.​⬤

  • PurpleSharp

    Active Directory Attack Simulation: PurpleSharp allows you to run simulations of real-world attack techniques in an Active Directory environment, such as lateral movement, privilege escalation, or credential dumping.

    • Modular Approach: It uses pre-built modules that simulate specific attack tactics, techniques, and procedures (TTPs), closely aligned with the MITRE ATT&CK framework.

    PurpleSharp primarily runs on Windows environments, especially within Active Directory setups, and it leverages PowerShell to execute attack simulations. This makes it ideal for internal testing in organizations that heavily rely on Windows-based infrastructure and want to improve their security posture by simulating threats in real-time.

    • Caldera by Mitre

      A Scalable, Automated Adversary Emulation Platform

      • Caldera is a cybersecurity framework developed by MITRE that empowers cyber practitioners to save time, money, and energy through automated security assessments.

      Expand Caldera's Capabilities

      There are various plugins available for Caldera that help to expand the core capabilities of the framework and provide additional functionality, including agents, reporting, collections of TTPs and others.

  • Social