The Complete Cyber Range Hacking Lab: Full Course

Build a realistic, full featured, Attack and Defense environment on your Home computer. No cloud costs to worry about.

Created by: Vonnie Hudson
Ethical Hacker and Teacher

What Will I Learn?

• Learn Active Directory Red Teaming, Web Application Hacking, Penetration Testing and Bug Bounty Hunting in a safe, customizable environment on your local system
• Avoid expensive AWS or Microsoft Azure costs by hosting the entire attack range on your local machine
• Build confidence for job interviews as you will know EXACTLY how modern attacks and defenses work
• How to analyze packet captures with Google Stenographer and Wireshark
• How to extract malicious files from packet captures with Network Miner
• How to use pFsense to monitor network traffic
• How to use Zeek (formerly Bro) to examine network metadata
• How to use the open source host intrusion detection platform Wazuh to monitor Windows 10 endpoints
• How to analyze Sysmon logs for evidence of attack
• How to use Strelka to automatically extract malicious files and scan them against Yara rules
• How to setup Security Onion 2, Elk, Kibana and Logstash and how to use it to hunt for evil in your network
• How to use osquery and Fleet to interact with your endpoints, query processes, scheduled tasks and more
• How to use WinLogBeat to ship Windows Powershell logs, Event Logs and more to your SIEM for analysis

Requirements

• You will need a beefy system for this course as we are building a complete cyber attack and defense range on your local machine
• 250GB of Hard disk Space is recommended although you could probably get by with 200GB
• 32GB of RAM is recommended, 16GB is probably possible but not ideal.
• VMWare Workstation Pro
• A willing heart to learn!

Target audience

• New Security Operations Center Analysts ("SOC") and Insident Responders
• New and Experienced Network and Web Application Penetration Testers
• Bug Bounty Hunters who hunt targets on HackerOne and BugCrowd
• Red Teamers who use Cobalt Strike, Metasploit or PowerShell Empire 3
• Security Engineers who want to know how to stand up attack and defense infrastructure
• Information Security Managers and Executives who want hands-on details about how breaches occur (and can be detected and prevented)
• Anyone who wants a hands-on practical free lab to prepare for the Security+, CEH or OSCP exams (without the stupid 60 day limitations cloud vendors slap you with)