Vulnerability Home Lab Build
Budget / Salary₹1,500–12,500
TypeFreelance project
LocationRemote
Posted2 hours ago
I want to stand up a small-scale lab at home where I can safely probe for weaknesses in both Windows and Linux machines. The main goal is to reproduce the kinds of flaws that appear on systems that have missed patches or are running outdated services, then verify that I can detect them.
Scope
• Two guest operating systems – one Windows, one Linux – each intentionally left un-updated so I can study real-world mis-configuration and missing-patch issues.
• A virtualised environment (VirtualBox, VMware, or similar) so I can reset snapshots quickly after every test round.
• Network segmentation that mirrors a simple corporate LAN so I can scan from an “attacker” node without jeopardising the rest of my home network.
Testing focus
I plan to start with Nmap for discovery and basic vulnerability enumeration. If you think Wireshark captures or Metasploit modules would help deepen the exercise, I’m open to integrating them later, but the initial requirement is an Nmap-ready environment that clearly shows which ports and outdated services are present.
Deliverables
1. Step-by-step build guide: hypervisor install, guest OS images, network settings, and snapshot strategy.
2. A concise checklist of default vulnerabilities you purposely leave exposed on each VM.
3. Example Nmap command set with expected output that proves the lab is working.
Acceptance criteria
• Both VMs boot and are reachable from the scanning host.
• Running the supplied Nmap commands identifies at least three vulnerable or unpatched services per OS.
• All instructions are reproducible on a typical consumer PC (16 GB RAM, 100 GB free disk).
If this sounds like your comfort zone, let’s get the environment online so I can start learning.
Scope
• Two guest operating systems – one Windows, one Linux – each intentionally left un-updated so I can study real-world mis-configuration and missing-patch issues.
• A virtualised environment (VirtualBox, VMware, or similar) so I can reset snapshots quickly after every test round.
• Network segmentation that mirrors a simple corporate LAN so I can scan from an “attacker” node without jeopardising the rest of my home network.
Testing focus
I plan to start with Nmap for discovery and basic vulnerability enumeration. If you think Wireshark captures or Metasploit modules would help deepen the exercise, I’m open to integrating them later, but the initial requirement is an Nmap-ready environment that clearly shows which ports and outdated services are present.
Deliverables
1. Step-by-step build guide: hypervisor install, guest OS images, network settings, and snapshot strategy.
2. A concise checklist of default vulnerabilities you purposely leave exposed on each VM.
3. Example Nmap command set with expected output that proves the lab is working.
Acceptance criteria
• Both VMs boot and are reachable from the scanning host.
• Running the supplied Nmap commands identifies at least three vulnerable or unpatched services per OS.
• All instructions are reproducible on a typical consumer PC (16 GB RAM, 100 GB free disk).
If this sounds like your comfort zone, let’s get the environment online so I can start learning.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.