Home Lab Builder

A home lab is your safe practice space for both attack and defense. This roadmap shows how to build one that is isolated, affordable, easy to reset and useful for learning.

• Check your computer has enough RAM (16 GB recommended) and disk
• Decide on a budget
• Plan your study time

• CyberA4U Academy — courses

A lab should serve your learning goals — for example, practicing SOC work, Active Directory, web testing or cloud. Clear goals keep it small and useful.

• Choose what you want to practice
• List the machines and tools you need
• Keep the first version small

Tools & tech: Labs

• CISA — Cyber Hygiene Services

A hypervisor runs virtual machines. VirtualBox is easy for beginners; Proxmox suits a dedicated lab server.

• Compare desktop and bare-metal hypervisors
• Choose based on your hardware
• Install your chosen hypervisor

Tools & tech: Labs

Learn it on CyberA4U:Module 2: Building the Practice Lab

• Proxmox VE documentation
• Oracle VirtualBox documentation

Lab machines — especially vulnerable ones — must not be reachable from your home network or the internet. Host-only or internal networks keep them contained.

• Understand NAT, bridged, host-only and internal networks
• Isolate vulnerable machines
• Control internet access deliberately

Tools & tech: Labs

Learn it on CyberA4U:Module 2: Building the Practice Lab

• Oracle VirtualBox documentation

A small Active Directory domain is essential for practicing Windows administration, attacks and detection.

• Install Windows Server evaluation
• Promote a domain controller
• Join a client to the domain

Tools & tech: Labs

• Microsoft — Install Active Directory Domain Services

Intentionally vulnerable applications such as OWASP Juice Shop let you practice web testing legally and safely.

• Deploy a vulnerable app in an isolated network
• Practice only against your own lab
• Reset the app between sessions

Tools & tech: Labs

Learn it on CyberA4U:Module 2: Building the Practice Lab

• OWASP Juice Shop

A free SIEM such as Wazuh collects logs from your lab machines so you can see attacks from the defender's side.

• Deploy a SIEM
• Install agents on lab machines
• Review alerts

Tools & tech: Labs

• Wazuh — Quickstart

An attack VM such as Kali Linux contains testing tools. Keep it inside the isolated lab network.

• Install and update an attack distribution
• Keep it isolated
• Snapshot it before experiments

Tools & tech: Labs

Learn it on CyberA4U:Module 2: Building the Practice Lab

• Kali Linux documentation

Snapshots let you return a machine to a clean state in seconds — essential after experiments that break or infect systems.

• Take snapshots before experiments
• Restore quickly
• Keep a clean "golden" snapshot for each VM

Tools & tech: Labs

• Proxmox VE documentation

Lab safety means never testing systems you don't own, never exposing vulnerable machines, and handling real malware only in isolated setups.

• Write your lab rules
• Keep vulnerable and malicious content isolated
• Know what's legal where you live

Tools & tech: Labs

• CISA — Coordinated Vulnerability Disclosure process

Documentation — network diagram, credentials store, build steps — lets you rebuild the lab and turn your work into portfolio material.

• Keep a network diagram and inventory
• Record build steps
• Store lab credentials safely

Tools & tech: Labs

A useful lab can be almost free: evaluation licenses, open-source tools, and turning off cloud resources when not in use.

• Use free and evaluation software
• Shut down unused VMs
• Set budget alerts for any cloud lab

Tools & tech: Labs

As you advance, add machines and scenarios gradually — a second domain, a cloud account, network devices — while keeping everything documented and resettable.

• Add components based on your next learning goal
• Automate builds where possible
• Retire what you no longer use

Tools & tech: Labs

Check that your lab is isolated, documented, resettable and supports your learning goals.

• Isolate vulnerable machines
• Snapshot and restore reliably
• Monitor with a SIEM

• CyberA4U CTF Arena — practice challenges

Your lab is ready. Use it with the Blue Team, SOC Analyst, Active Directory or Web Application Pentesting roadmaps.

• Keep your lab updated
• Choose your next roadmap
• Share your lab design

• CyberA4U CTF Arena — practice challenges