Build a Home Lab: Equipment, Tools, and Tips
by Martin Pearson || Guest Author
This article was originally published in the second edition of the InfoSec Survival Guide. Find it free online HERE or order your $1 physical copy on the Spearphish General Store.
A home lab will not only enhance your learning opportunities, but can also give you a safe place to play by using virtual machine to emulate a computer, giving you the ability to easily make mistakes with no fear of harm to your personal setup.
Practicing on entry-level product is a great way to get started. Think about what you want to learn and how your setup will help you meet your goals. You don’t need the fastest equipment, the most storage, or the best memory to start your home lab. Even if you can afford the best, it won’t suddenly make you a master hacker. It relies on your commitment, not your equipment.
In general, the fundamental building blocks of a lab are a network, virtual machines, and the physical machine to run them on. It’s common to have one Linux (Kali) machine and usually one Windows client/server. This will be enough to do some really fun stuff!
VM Options
There are lots of virtualization software to choose from. Below are some links to get you started. (Don’t worry if these mean nothing to you at this stage; it’s just good to be aware.)
- proxmox.com/en/
- vmware.com/products/workstation-pro.html
- docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.install.doc/
- qemu.org/download/
- virtualbox.org/
Equipment Considerations
- How many virtual machines do you want (vs. how many you actually need)?
» How many might you want in the future?
» The more virtual machines, the more memory/storage space you will need.
» Consider purchasing second-hand machines fi rst. - It is better to have a separate network to avoid family/user arguments when
you play –
» Consider a dedicated router or switch. - You WILL break things! Make a backup (sometimes called a snapshot).
Other Considerations
- Both Windows client and server can be used in evaluation-mode legally (no
need to purchase). - Kali and Parrot are commonly used operating systems that will give you all the
learning tools you need. Search Kali or Parrot ISO to fi nd out more.
» To learn about the operating systems and their included tools: - https://www.kali.org/tools/
- https://www.parrotsec.org/
- A journey of a thousand miles begins with a single step!
- Consider exactly what you’re trying to achieve. You don’t need to know and
do everything right away.
Depending on what you start off with and how your needs grow, you may decide to buy more machines. Remember, they are very easy to network, so no need to throw away your old equipment. Above all, have fun and learn!
Read more Infosec Survival Guide Blogs:
- Blue Team, Red Team, and Purple Team: An Overview
- Pentesting, Threat Hunting, and SOC: An Overview
- How to Put Yourself Out There – Networking on Social Media
- How to Get a Job in Cybersecurity
- How to Perform and Combat Social Engineering
- Mental Health – An Infosec Challenge
Ready to learn more?
Check out this BHIS webcast on the topic here —
How To Build a Home Lab for Infosec
with Ralph May