Virtual Pentest Lab

Has anyone here ever successfully built their own virtual pentest lab? What I want is a website where pentesters can login, select one or multiple boxes from Vulnhub to provision VMs and then SSH to a server that is connected to an isolated network where the Vulnhub boxes run. I was first thinking about using OpenStack but it's a PITA to deploy so I'm going for Apache Cloudstack instead. I will need a custom web interface though. Share your ideas, Lain.

So basically a CTF?

>>9209 your describing hackthebox, or if you want to pentest an actual network with pivoting pentestit.ru >eng version https://lab.pentestit.ru/

>>9210 Depends on the type of CTF. >>9211 I'm actually looking for a self-hosted solution. I haven't used pentestit.ru yet but it looks quite like what I want. Maybe I should have been more specific about the type of pentest lab I want, but yes, pivoting is a requirement. Think of Offensive Security's virtual pentest lab, but on-demand and self-hosted.

>>9217 build your own lab in virtual box. windows serv active directory, with some windows test machines with vuln software off exploitdb. as for the web app side, i wouldnt know what to tell you.

if i ever see someone wearing this shirt i'll beat them up

>>9567 +1

>>9217 Finally found something, you can setup a windows domain and lab setup in azure https://medium.com/@kamran.bilgrami/ethical-hacking-lessons-building-free-active-directory-lab-in-azure-6c67a7eddd7f

I didn't want to make a whole new thread, so I'm just jumping off this one, What are some lab setups everyone has that they would recommend other than just a standard windows domain.

>>9567 +1

>>9567 +1 fuarrrk edgelords

>>9217 Not OP but I'm looking for a CTF type Hackthebox but privacy friendly, libre based and doesn't have a bunch of CDN's and Google Scripts running in the browser. Seems like every CTF site has these. Specifically targeted towards absolute beginners, maybe even all levels. If someone knows of something, or can create something that'd be amazing.

would recommend to anyone who is a complete beginner to read "Penetration Testing: A Hands-On Introduction to Hacking" by Georgia Weidman which will walk you through setting up a variety of labs on your own. check the-eye.eu (/public/MSDN/ and /public/Operating%20Systems/) for some older OS ISOs if you need them

>>12428 it's a bit out of date, I would go with "The hackers playbook 3" or "Hack like a pornstar" For a more modern day learning.