Penetration testing
How to Build a Cyber Security Home Lab on Your Laptop
A home lab is a small network of virtual machines on your own computer where you can attack and defend legally. It is the single most useful thing a beginner can build, and it can cost nothing beyond the laptop you already have. Here is a simple setup that grows with you.
What You Need
- A laptop or desktop with at least 16 GB of RAM; 32 GB lets you run a Windows domain and a SIEM together
- A processor with virtualization enabled in the BIOS or UEFI settings
- At least 150 GB of free disk space, preferably on an SSD
- Free virtualization software: VirtualBox, or VMware Workstation, which is now free for personal use
1Create an Isolated Network
Put your lab machines on a host-only or internal network so they can talk to each other but not to your home network or the internet. Vulnerable machines should never be reachable from outside. Give Kali a second adapter with NAT only when you need to download updates, then switch it off.
2Add an Attacker Machine
Download the official Kali Linux virtual machine image from kali.org and import it. Update it, change the default password and take a snapshot. See Kali Linux for beginners for first steps.
3Add Targets
- Metasploitable 2: an old, deliberately vulnerable Linux machine for practicing scanning and exploitation
- OWASP Juice Shop or DVWA: intentionally insecure web applications for web testing
- Practice machines exported from platforms that allow it
Download targets only from their official project pages.
4Add a Small Windows Domain
Microsoft offers free evaluation versions of Windows Server and Windows client editions for a limited period. Build one domain controller and one workstation, create a few users and groups, and you have an Active Directory lab. Snapshot it before you start attacking, so you can roll back. Then work through Active Directory attacks explained.
5Add the Defender's View
Install Sysmon on the Windows machine and send its logs to Wazuh or a free Splunk instance. Now every attack you run from Kali leaves evidence you can find. This turns your lab into SOC practice as well. Our Splunk vs Wazuh guide explains both.
Habits That Make a Lab Useful
- Take snapshots before every exercise
- Keep notes and screenshots, and write a short report for each exercise
- Attack, then look for the evidence from the defender's side
- Rebuild machines occasionally; building them teaches as much as attacking them
Our Lab
In our network and Active Directory course, building this lab in VirtualBox is the first module, with an instructor to help when it does not work. The SOC course adds Splunk, Wazuh and Sysmon to the same idea.
Need help choosing a laptop for the lab? Ask a counselor. Contact us or call +91 86868 92922.
Courses Mentioned in This Guide
More Guides
Active Directory Attacks Explained for Beginners
How penetration testers assess Active Directory: enumeration, Kerberoasting, NTLM relay, ACL abuse and DCSync in plain language, with the fix for each.
Read the guide →What Is VAPT? Vulnerability Assessment vs Penetration Testing
VAPT explained: how a vulnerability assessment differs from a penetration test, the types of VAPT, how an engagement runs and what the final report contains.
Read the guide →Nmap for Beginners: Essential Scans Explained
Learn Nmap step by step: host discovery, port and version scans, default scripts, timing and saving output, with the commands explained and where to practice legally.
Read the guide →Kali Linux for Beginners: Install, Set Up and First Steps
Start with Kali Linux the right way: what it is, how to install it in a virtual machine, first setup steps, the tool categories, and the Linux skills to learn first.
Read the guide →Start Your Cyber Security Career
Talk to a counselor, choose the right course for your goals, and get the fee, syllabus and next batch dates in writing.
- Call+91 86868 92922
Open 7 days: Mon to Fri 8:30 AM to 8:30 PM IST
Sat and Sun 10 AM to 6 PM IST - Emailinfo@hackingtrainer.com
- VisitGround Floor, G-3, Sri Venkatasai Nest, Kallu Compound Road, Nagarjuna Nagar Colony, Yella Reddy Guda, Ameerpet, Hyderabad – 500073
Open in Google Maps