Architect Plugins
Every lab is built from plugins. A plugin can install software, configure networking, set up Active Directory, plant a prebuilt vulnerability, or set up a whole machine role such as a domain controller or an attacker workstation. Pick a category below to browse its plugins.
Actions
Small, focused plugins for scripts, logins, networking, RDP, and AD changes. You stack several on one machine.
Browse actions 02Roles
Composite builders for DCs, attack boxes, redirectors, and file servers. One plugin configures a whole machine role.
Browse roles 03Applications
Installers for Office, browsers, dev tools, C2 platforms, and ICS simulators. Add one to a VM to install that software.
Browse applicationsDefenses
EDR and NSM stacks such as Elastic, Security Onion, and Zeek. Use them to build the blue side of your lab.
Browse defenses 05Attacks
C2 and offensive tooling such as Mythic, Sliver, and BloodHound, ready for your red team to use.
Browse attacks 06Vulnerabilities
Prebuilt weakness configs such as Kerberoasting, unquoted service paths, and RCE-ready services. Plant a flag for students to find.
Browse vulnerabilities