Lion Cipher Lab
Set up a safe, isolated vulnerable-practice lab
- Penetration Testing / Red Team
- Beginner
- ~1 hr
- Free · no account required
Why it matters
Almost every hands-on room says "attack the target" and assumes you already have one you are allowed to attack. You cannot legally practice on someone else's machine, so you build your own: an intentionally-vulnerable box that lives on a sealed network next to your Kali VM. Get this right once and you own a legal, private range you can break, reset, and break again forever — the single thing that turns reading about security into doing it, without ever crossing a line.
What you'll learn
- building a legal practice range
- network isolation
- vulnerable target setup
- Docker lab networking
- safe teardown
Steps in this lab
- Read this before you build anything: the one non-negotiable rule
- What you are building, and why it must be sealed
- Pick your target: a whole vulnerable VM, or a focused Docker scenario
- Option A — drop Metasploitable 2 onto the isolated internal network
- Option B — run a Vulhub Docker scenario, cut off from the internet
- Prove the range is really sealed before you trust it
- Tear it down safely when you are finished
- What you actually built here