Home-Cybersecurity-Lab - Home cybersecurity lab documenting offensive and d

项目说明

Home Cybersecurity Lab

A personal cybersecurity home lab built to develop and document hands-on skills in penetration testing, SIEM detection engineering, incident response, and Acti security. All projects are performed in an isolated lab en.

---

Network O

---

Lab In

| Host | OS | IP | Role |
|------|----|----|------|
| Linux PC | Ubuntu 22.04 | 10.0.0.1 | Gateway, Pi-hole DNS/DHCP, Nextcloud |
| Windows PC | Windows 11 | 10.0.0.111 | Hypervisor Host |
| Kali Linux | Kali Rolling | 10.0.0.117 | Attacker Machine |
| Wazuh Manager | Ubuntu 22.04 | 10.0.0.166 | SIEM / Detection Engineering |
| | Ubuntu 22.04 | 10.0.0.106 | Intentionally Target |
| Metasploitable 2 | Ubuntu 8.04 | 10.0.0.142 | Legacy Target |
| DC01 | Windows Server 2022 | 10.0.0.200 | Acti Domain Controller (lab.local) |
| WS01 | Windows Server 2022 | 10.0.0.201 | Domain-Joined Workstation |

---

Projects and Write-Ups

| # | Project | Category | Skills Demonstrated |
|---|---------|----------|-------------------|
| 01 | Metasploitable 2 Penetration Test | Offensive | Nmap, Metasploit, 2.3.4 exploit, pri escalation, password cracking |
| 02 | Wazuh Brute Force Detection and Acti | Defensive / SIEM | Wazuh rules, acti, Hydra, SSH log analysis |
| 03 | Acti Lab Setup | Infrastructure | AD DS, domain users, SPNs, Group Policy, DNS |
| 04 | Kerberoasting Attack and Detection | Offensive + Defensive | Impacket, TGS ticket extraction, Wazuh detection, custom SIEM rules, MITRE T1558.003 |
| 05 | BloodHound AD Enumeration | Reconnaissance | BloodHound CE, SharpHound, Cypher queries, attack path mapping, Tier Zero identification |
| 06 | Pass-the-Hash Attack and Detection | Offensive + Defensive | Mimikatz, NTLM hash extraction, Impacket psexec, Wazuh detection, MITRE T1550.002 |
| 07 | Microsoft Purview DLP | Defensive / DLP | Microsoft Purview, PCI DSS policy creation, SSN and HIPAA detection, confidence le, li , MITRE T1567, T1048 |

More labs added continuously. See commit history for progress.

---

Tools and Technologies

Offensi
Kali Linux, Nmap, Metasploit Framework, Hydra, John the Ripper, Impacket, Mimikatz, BloodHound, SharpHound

SIEM and Detection
Wazuh 4.x, Splunk (professional experience), custom detection rules, acti, Windows Event Log analysis

DLP and Compliance
Microsoft Purview, PCI DSS, HIPAA, U.S. SSN Confidentiality Laws, DLP policy creation and tuning

Infrastructure
, iptables, Pi-hole, Ubuntu Server, Windows Server 2022, Acti, Tailscale VPN

Scripting and Admin
Bash, Python, Linux system administration, Windows Ser, PowerShell

---

Lab Goals

---

Certifications

---

About

Le - CS Graduate (UTSA, B.S. Computer Science, Dec 2025) | 2x Cybersecurity Analyst Intern @ CGI Federal (DoD clients) | Targeting SOC Analyst and Security Engineer roles.

LinkedIn •

项目信息

开发语言：未知

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Home cybersecurity lab documenting offensive and defensive security projects; AD attacks, SIEM detection, incident response, and penetration testing.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。