Home › Lab
Lab
Hands-on cybersecurity labs — guided walkthroughs you can follow start to finish, plus curated external ranges worth your weekend. Everything here runs against legal targets: deliberately vulnerable machines and platforms built to be attacked.
New to this? Follow the guided ladder. Lab 00 sets up your practice environment in about twenty minutes, Lab 01 runs your first scan, then the OverTheWire series takes you from your first shell through your first web hacking one small step at a time — each a copy-paste walkthrough with progress you can track.
Working on AI? The LLM security lab spins up a deliberately vulnerable model on your own machine and walks the OWASP LLM Top 10 — prompt injection, system-prompt leakage, excessive agency.
Want a bigger playground? The curated entries below point to ranges like Hack The Box, LetsDefend and GOAD — honestly labelled, no fluff.
Attack OWASP Juice Shop Locally With Docker
BeginnerTime ~30 minNeeds DockerCost freeDeliberately vulnerable, runs local 0 / 7 steps The goal Run OWASP Juice Shop — the most popular deliberately-vulnerable web app in…
Run Your Own DNS Resolver With Unbound in Docker
BeginnerTime ~25 minNeeds DockerCost freeNo sign-up, runs local 0 / 7 steps The goal Run a real recursive DNS resolver — Unbound — in a container,…
Run Wazuh, a Free SIEM, With Docker
IntermediateTime ~40 minNeeds Docker + 8 GB RAMCost free (open-source)No sign-up, runs local 0 / 7 steps The goal Stand up Wazuh — a genuinely free, open-source…
Set Up Splunk Free With Docker
IntermediateTime ~40 minNeeds DockerCost freeNo sign-up, runs local 0 / 7 steps The goal Install Splunk Enterprise free, locally, and build a proper Splunk home lab…
Build a Security Lab With Docker
Updated September 20, 2026: loopback bindings, versioned database example and scoped cleanup. BeginnerTime ~30 minNeeds DockerWorks on Win / macOS / LinuxNo sign-up, no cloud bill…
LLM Security Lab: The OWASP LLM Top 10 with LLMVault
IntermediateTime ~60 minTarget LLMVault (local)Covers OWASP LLM Top 10Needs Python 3.10+ 0 / 7 steps The goal Stand up a deliberately vulnerable LLM application on your…
Lab 06 — Natas 6 to 10: LFI, decoding, and command injection
IntermediateTime ~50 minTarget OverTheWire NatasLevels 6 → 10Needs a browser 0 / 5 steps The goal Natas 0 to 5 taught you to look. Natas 6…
Lab 05 — Bandit 10 to 15: encodings and your first SSH key
BeginnerTime 30–45 minTarget OverTheWire BanditLevels 10 → 15Needs Lab 03 0 / 5 steps The goal Starting from your Bandit level 10 login, work through five…
Lab 04 — Natas 0 to 5: your first web hacking
BeginnerTime ~40 minTarget OverTheWire NatasLevels 0 → 5Needs a browser 0 / 6 steps The goal Bandit was a shell on a Linux box. Natas is…
Lab 03 — Bandit 5 to 10: finding things you cannot see
BeginnerTime ~45 minTarget OverTheWire BanditLevels 5 → 10Needs Lab 02 0 / 5 steps The goal The first six levels were about opening files you already…