Distributed Pentesting Lab Setup

Overview

This project documents the design and execution of a distributed penetration testing lab built across two physical machines. The lab simulates a real-world internal network environment for practicing offensive security techniques.

---

Objectives

• Build a segmented lab network
• Simulate real internal penetration testing scenarios
• Perform structured attack workflows
• Produce professional-grade documentation

---

Architecture

• Attacker: Kali Linux VM (Main PC)
• Target Host: VMware Workstation (Secondary PC - 8GB RAM)
• Network: Host-only (192.168.56.0/24)

Routing Path:

Kali - LAN - VMware Host - Internal Lab Network - Targets

---

Methodology

This project follows the Penetration Testing Execution Standard (PTES):

1. Pre-Engagement & Setup
2. Intelligence Gathering
3. Vulnerability Analysis
4. Exploitation
5. Post-Exploitation
6. Reporting

---

Project Phases

Phase	Description
Phase 1	Lab Infrastructure
Phase 2	Target Deployment
Phase 3	Reconnaissance & Scanning
Phase 4	Enumeration
Phase 5	Exploitation
Phase 6	Post-Exploitation
Phase 7	Reporting

---

Repository Structure

/docs
├── phase-1-infrastructure
|   |    infrastructure.md
├── phase-2-target-deployment
|   |    2a-metasploitable-deployment.md
|   |    2b-routing-challenge.md
|   |    2b-routing-challenge-resolution.md
|   |    2c-owasp-juice-shop-deployment.md
├── phase-3-recon-and-scanning
|   |    3a-host-discovery.md
|   |    3b-port-scanning.md
|   |    3c-service-detection.md
├── phase-4-enumeration
|   |    4a-smb-enumeration.md
|   |    4b-ftp-enumeration.md
|   |    4c-web-enumeration.md
├── phase-5-exploitation
|   |    5a-smb-exploitation.md
|   |    5b-ftp-exploitation.md
|   |    5c-web-exploitation.md
|   |    5d-challenges-limitations.md
├── phase-6-post-exploitation
|   |    6a-access-validation.md
|   |    6b-system-enumeration-and-privilege-escalation.md
|   |    6c-data-discovery.md
|   |    6d-persistence-concept.md
|   |    6e-cleanup.md
├── phase-7-reporting
|   |    final-report.md
|   └── technical-assessment-report.md
|  
/scope
|    scope.md
/screenshots

---

Key Skills Demonstrated

• Network segmentation and lab design
• Reconnaissance and Enumeration
• Vulnerability analysis and exploitation
• Documentation and reporting

---

Status

✅ Phase 1 - Completed
✅ Phase 2 - Completed
✅ Phase 3 - Completed
✅ Phase 4 - Completed
✅ Phase 5 - Completed
✅ Phase 6 - Completed
✅ Phase 7 - Completed

---

Author

CHUKWU PRAISEGOD

Follow my journey: X | LinkedIn