Dark › Module 1 › Lesson 2
Lab Research Only
Lab notes only means YOUR literacy artifacts under $DW_LAB — labeled Tor cards, OPSEC rows, fictional FAKE-CORP alert stubs — document lab scope in notes before any dark web exercise.
Visual · t39_lab_notes_only
Lab scope. $DW_LAB only. Original Cyberlium.
Opening
The lab label is part of scope — Cyberlium refuses exercises that paste real breach dumps, victim PII, or employer monitoring exports into lab notes without fictional labeling.
Your dark web lab is a notes folder YOU define — $HOME/cyberlium-lab/t39-dw/ with tor/, opsec/, hardened/, monitoring/ subfolders — containing literacy cards and fictional alert stubs for learning. Templates live on $DW_LAB only — never copied from live criminal forums, real credential dumps, or employer confidential TI feeds. Cyberlium maps allowed lab inventory on YOUR $DW_LAB — folder paths, note types, fictional alert labels — never 'borrowed' employer production monitoring data or scraped real victim credentials. Next: No Marketplace Access.
1. Allowed lab surfaces (named)
Self-authored Tor literacy cards sourced from Tor Project public docs. OPSEC vocabulary rows with fictional scenarios. FAKE-CORP alert stubs with LAB severity labels. Defender monitoring policy cards — educational only.
On $DW_LAB, list lab inventory row — folder path, note type, fictional label — never paste real victim credentials or employer TI exports into lab notes.
Command guide
Try these commands — Allowed lab surfaces (named)
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Tor Project — https://www.torproject.org/ Tor Browser Manual — https://tb-manual.torproject.org/ EFF SSD — https://ssd.eff.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
mkdir -p "$HOME/cyberlium-lab/t39-dw/notes" "$HOME/cyberlium-lab/t39-dw/tor" "$HOME/cyberlium-lab/t39-dw/opsec" "$HOME/cyberlium-lab/t39-dw/hardened" "$HOME/cyberlium-lab/t39-dw/monitoring" "$HOME/cyberlium-lab/t39-dw/leaks" "$HOME/cyberlium-lab/t39-dw/legal" "$HOME/cyberlium-lab/t39-dw/ti" "$HOME/cyberlium-lab/t39-dw/reporting" cat > "$HOME/cyberlium-lab/t39-dw/lab.env" <<'EOF' export DW_LAB=$HOME/cyberlium-lab/t39-dw export DW_TOR=$HOME/cyberlium-lab/t39-dw/tor export DW_OPSEC=$HOME/cyberlium-lab/t39-dw/opsec export DW_HARDENED=$HOME/cyberlium-lab/t39-dw/hardened export DW_MONITOR=$HOME/cyberlium-lab/t39-dw/monitoring export DW_LEAKS=$HOME/cyberlium-lab/t39-dw/leaks export DW_LEGAL=$HOME/cyberlium-lab/t39-dw/legal export DW_TI=$HOME/cyberlium-lab/t39-dw/ti export DW_REPORTING=$HOME/cyberlium-lab/t39-dw/reporting EOF
Command — copy this
chmod 600 "$HOME/cyberlium-lab/t39-dw/lab.env" grep -E 'DW_' "$HOME/cyberlium-lab/t39-dw/lab.env" curl -sS https://tb-manual.torproject.org/ | head -5
Primary tools to practice this lesson: grep, curl. Reference sites: Tor Project (https://www.torproject.org/); Tor Browser Manual (https://tb-manual.torproject.org/); EFF SSD (https://ssd.eff.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Why lab scope matters before dark web work
Monitoring alerts and OPSEC cards reference brands and metadata fields. Scope is what keeps practice ethical and legally safe. Employer production TI feeds, real credential dumps, and live criminal forum screenshots copied into lab work are out of scope.
If you cannot answer 'is this note fictional and labeled lab-only?', pause and fix scope notes before building monitoring or OPSEC artifacts.
3. Lab inventory habit
Forbidden: importing real breach dumps because lab stubs 'look too simple.' Allowed: lab inventory row — folder, note type, source = $DW_LAB self-authored fictional stub.
Ship: lab inventory row for one $DW_LAB subfolder. Next: No Marketplace Access.
4. What you ship: lab inventory row for $DW_LAB
One subfolder with note type and fictional labels. $DW_LAB named. NEVER real breach imports. chmod 600.
5. What you record before the next lesson
Date. Lab inventory row. $DW_LAB named. File t39-m01-l02-lab-notes-only.txt chmod 600.
6. Wrong vs right: criminal markets vs YOUR OPSEC lab
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Paste real credential dump into lab because 'realism helps.' Skip fictional label because 'it's just notes.'
Right
Write lab inventory row for YOUR $DW_LAB notes folder. Next: No Marketplace Access.
Mission: document YOUR lab notes inventory
1) Write one $DW_LAB subfolder path and purpose. 2) List three allowed note types with fictional labels. 3) Confirm zero real breach dump imports. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Lab inventory exists for scope — use fictional stubs instead of real victim data.
Knowledge Check
APPLY: Lab notes only on Cyberlium means:
Multiple choice
Knowledge Check
APPLY: True or False: Dark web lab notes on $DW_LAB use explicit fictional labels.
True or False
Knowledge Check
APPLY: Before building a monitoring alert stub you should:
Multiple choice