user@lab:~/labs$ls --roadmap
I'm at the start: learning through online courses and first experiments in virtual machines (VirtualBox, VMware) and the cloud. This page is my lab roadmap. Nothing here is finished yet; each lab gets a write-up once it is built: what I set up, what broke and what I learnt.
01
Set up the environment in isolation, so nothing touches real networks.
02
Run the attack or the failure scenario and observe what happens.
03
Document what worked, what didn't, and how to defend against it.
Lab roadmap
A small Windows domain for practising common Active Directory attacks, such as Kerberoasting and password spraying, together with the logging and hardening that detects or stops them.
goal › Understand both sides: run the attack, then find it in the logs.
Capturing and analysing traffic inside the lab to recognise scans, beaconing and data exfiltration patterns.
goal › Recognise suspicious traffic at a glance, without guessing.
Deliberately vulnerable web apps for practising the OWASP Top 10 safely: injection, broken access control, misconfiguration.
goal › Find, exploit and explain each vulnerability, then write the fix.
Finding and fixing common cloud mistakes: public storage, over-permissive IAM roles and missing audit logging.
goal › Build a checklist of the mistakes that cause most cloud incidents.
Starting point
Curious?
Have an idea for a lab scenario, or learning the same things? Let's talk.
