Linux Lab
Combined Linux readout on $LAB_HOST — baseline, updates, sshd, firewall.
Visual · linux_lab
Lab: Linux hardening readout pack. $LAB_HOST only. Original Cyberlium.
Four readouts, one hostname check, zero stranger SSH.
Module 3 lessons covered baseline, updates/SSH, and firewall literacy. This lab ships combined evidence from $LAB_HOST: uname, pending updates, sshd -T highlights, ufw/nft summary. Optional one hardening change with snapshot if brief allows. Next: Quiz — Linux Hardening Literacy.
1. Lab contract: hostname, then readouts
Confirm $LAB_HOST. Snapshot VM. Complete four read-only sections in one note file.
Optional: PermitRootLogin no or one ufw rule — with documented revert.
Command guide
Try these commands — Lab contract: hostname, then readouts
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Linux hardening lab — https://www.cisecurity.org/cis-benchmarks CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu): Built-in (iproute2)
macOS: Use: netstat
Windows: Use: netstat
═══ LINUX / macOS ═══
Command — copy this
ss -tulpn 2>/dev/null | sort -t: -k2 -n | head -20 sudo ufw status 2>/dev/null || sudo iptables -L INPUT -n -v 2>/dev/null | head -10 || ss -tuln | head -10
Primary tools to practice this lesson: ss, sudo. Reference sites: Linux hardening lab (https://www.cisecurity.org/cis-benchmarks); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Forbidden in this lab
SSH to university servers, LAN neighbor scans, nft flush on cloud strangers, password spray on port 22.
3. Close
chmod 600. Quiz next — then Network Device Hardening.
4. What you ship: Linux hardening readout pack for $LAB_HOST
Baseline, updates, sshd, firewall sections. Optional one change with snapshot. chmod 600.
5. What you record before the next lesson
Date. Four sections on $LAB_HOST. File t16-m03-l04-linux-lab.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Run lab script against entire /24. Skip hostname verification.
- Right: Combined readout on $LAB_HOST. Next: Quiz — Linux Hardening Literacy.
Mission: Linux evidence pack
1) Verify $LAB_HOST. 2) Complete four readout sections. 3) Optional one change with revert steps. 4) chmod 600. Never SSH-harden strangers.
Stuck? Ask Cyberlium AI Mentor
If sshd change locks you out, revert snapshot — another reason lab stays on owned VM.
APPLY: Linux Lab evidence comes from:
APPLY: True or False: Optional hardening change requires snapshot or backup on $LAB_HOST.
APPLY: LAN SSH scan to 'find lab targets':