Thomas Tech Blog β€” Lab Setups
πŸ”Š πŸ”‹ 94% πŸ“Ά
🏠
Home
 πŸ‘€
About Me
 πŸ”¬
Labs
 🎬
Portfolio & Media
 ✏️
Daily Posts
βœ‰οΈ
Contact Me
Home / Lab Setups
// homelab environments

My Lab Setups

Purpose-built environments for mastering specific cybersecurity domains through real hands-on practice.

6
ACTIVE LABS
3
VLAN ZONES
12+
TOOLS DEPLOYED
24/7
UPTIME TARGET
πŸ›οΈ
⊞ WINDOWS SERVER 2022
Active Directory Lab β€” Crown Jewel
My most complex environment: a full Windows Server 2022 domain with intentionally misconfigured GPOs, Kerberoastable service accounts, ACL abuse paths, and AS-REP roastable users. Used to practice the complete AD attack chain β€” from domain enumeration to domain compromise β€” and build realistic detection logic.
BloodHoundImpacketMimikatzPowerViewRubeusCrackMapExec
ACTIVE
VIEW WRITE-UPS β†’
// NETWORK TOPOLOGY
DC01 β€” Win Server 2022
↓
WS01 β€” Win 10 Workstation
WS02 β€” Win 10 Workstation
↓
KALI β€” Attacker Machine
↓
Elastic SIEM β€” Monitor
🎯
🐧 KALI LINUX
Penetration Testing Lab
Full offensive environment with C2 infrastructure for practicing red team operations and exploitation. Includes a Cobalt Strike-style setup using Havoc C2, custom payloads, and post-exploitation tooling.
MetasploitBurp SuiteNmapGobuster
ACTIVE
NOTES β†’
πŸ”­
✦ MULTI-OS
SOC / SIEM Lab
Elastic SIEM with Wazuh agents and Suricata for blue team detection engineering and threat hunting. Ingest logs from all other lab VMs and build custom detection dashboards.
ElasticWazuhSuricataSigma
ACTIVE
NOTES β†’
🌐
🐧 UBUNTU
Web App Security
Docker-based vulnerable app stack (DVWA, Juice Shop, WebGoat) for OWASP Top 10 attack and defense practice. Intercept traffic with Burp Suite and document every finding.
DVWADockerOWASPFFUF
ACTIVE
NOTES β†’
🧬
🐧 REMNUX
Malware Analysis
Air-gapped sandbox with REMnux & FlareVM for static/dynamic malware analysis and reverse engineering. Completely isolated from all other lab segments via pfSense VLAN rules.
Ghidrax64dbgVolatilityCuckoo
ACTIVE
NOTES β†’
πŸ›‘οΈ
🐧 PFSENSE
Network Defense
pfSense firewall with VLAN segmentation, Snort IPS, and Zeek for traffic analysis and perimeter security practice. Acts as the gateway and traffic choke-point for all other lab environments.
pfSenseSnortZeekVLANs
ACTIVE
NOTES β†’
οΌ‹
NEXT LAB
CLOUD / AWS PENTEST
BUILDING
// lab architecture

Homelab Network Map

ATTACK ZONE β€” VLAN 10
🎯Kali Linux (Attacker)
🐍Python C2 Scripts
πŸ”«Metasploit Framework
πŸ•ΈοΈBurp Suite Pro
TARGET ZONE β€” VLAN 20
πŸ›οΈDC01 β€” Win Server 2022
πŸ’»WS01/WS02 β€” Win 10
🌐DVWA / Juice Shop
🧬REMnux Sandbox (airgap)
MONITOR ZONE β€” VLAN 30
πŸ“ŠElastic SIEM Stack
πŸ›‘οΈWazuh HIDS Agents
πŸ“‘Suricata / Zeek
πŸ”₯pfSense Firewall