Capstone Lab
Walk Topic 14 checklist on $LAB — search/options/session/aux/post/defense — full teardown.
Visual · msf_capstone_lab
Capstone: checklist × $LAB evidence. Original Cyberlium.
Prove literacy on a VM you own — then leave it clean.
Start $LAB victim and attacker VMs on host-only. Walk checklist: document search/info/show options for one module each from payload, aux, post categories; sessions -l literacy; defender signal notes; logging glance if available. No pivot. Kill sessions, stop handlers, revert snapshots, secure notes.
1. Bring-up
Confirm RoE and $LAB IPs.
Host-only verified.
Command guide
Try these commands — Bring-up
═══ LINUX / KALI (Penetration Testing & Service Audit) ═══
Port scan and service banner grabbing against authorized target
Command — copy this
nmap -sV -sC -Pn -T4 -p 21,22,80,443,445,3389 ${LAB_HOST:-127.0.0.1}Enumerate web directories and hidden endpoints
Command — copy this
gobuster dir -u http://${LAB_HOST:-127.0.0.1} -w /usr/share/wordlists/dirb/common.txt -q -t 20 2>/dev/null || head -5 /etc/hostsMetasploit framework module inspection (Safe lab syntax)
Command — copy this
msfconsole -q -x "use auxiliary/scanner/portscan/tcp; set RHOSTS 127.0.0.1; set PORTS 80,443; run; exit" 2>/dev/null || echo "Run in Kali msfconsole"
═══ WINDOWS (Audit Target) ═══ Enumerate open listening ports with process mappings
Command — copy this
netstat -ano | findstr /i "LISTENING"
Primary tools to practice this lesson: msfconsole, nmap, curl. Reference sites: Metasploit capstone (https://docs.rapid7.com/metasploit/msf-overview/); MITRE ATT&CK matrix (https://attack.mitre.org/matrices/enterprise/); Exploit-DB (https://www.exploit-db.com/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Walk checklist
Evidence for options literacy, one aux on $LAB, session list, post allowlist if brief permits.
Mark N/A honestly when control absent — that is a finding on YOUR lab.
3. Shutdown
Kill all sessions. Stop handlers.
Revert both VMs. chmod 600 notes.
4. What you ship: capstone evidence pack
Checked checklist + redacted transcripts + teardown proof.
5. What you record before the next lesson
Capstone pack path. VMs reverted.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Capstone against a production server without authorization.
- Right: Lab evidence + teardown. Next: topic quiz.
Mission: Topic 14 capstone
1) Verify $LAB host-only. 2) Walk checklist with evidence. 3) Teardown: kill, revert, secure notes.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “How to mark N/A without skipping ethics?”
APPLY: Capstone target:
APPLY: True or False: Pivot to LAN is capstone credit.
APPLY: N/A on checklist means: