labs
04 — Networking intermediate labs
Agentctl order: Academy Chisel → reverse practice → Vault multi-hop. VIP+ often required for retired boxes.
Core
| Order | Lab | Goal |
|---|---|---|
| 1 | Academy — Pivoting (Chisel/SOCKS; Ligolo as alternate) | Non-SSH tools under guidance |
| 2 | Home lab 3-host + second internal | Ligolo/chisel expose a subnet; contrast SSH -D |
| 3 | Registry | Recreate reverse path with Chisel (who listens / who dials) |
| 4 | Vault | Main multi-VM pivot — diagram segments; SSH + one modern tool |
| Optional | Poison | Replay without ssh -L (tool conversion drill) |
| Capstone | Academy Attacking Enterprise Networks double-pivot | After Vault |
Success
- When SSH is enough vs ligolo/chisel
- One subnet pivot documented (routes, listeners, cleanup)
- Vault or home-lab dual-pivot notes
Skip until operator
Ligolo as step 0 for new students; masscan entire RFC1918 through SOCKS on day one.