Penetration › Module 10 › Lesson 4
Lab — Capstone
Execute checklist on $LAB engagement — evidence complete, pack sealed, full teardown.
Visual · t19_capstone_lab
Capstone: checklist × $LAB pentest evidence. Original Cyberlium.
Opening
Close the loop on lab assets you own — then revert VMs and revoke lab creds.
Walk Topic 19 checklist on YOUR $LAB engagement: verify RoE on file, lab path current, privesc and AD labs linked, post-ex timeline with pivot only inside VLAN, cover-tracks refusal signed, pentest report and evidence pack indexed, remediation rows present. Update index. Teardown: revert $LAB_VM/$LAB_AD snapshots, revoke disposable creds, chmod 600 all artifacts. No stranger scans, no anti-forensics, no unauthorized AD abuse. Defender paragraph: how YOUR workflow would detect the lab path next week on the same bench.
1. Execute checklist
Check each row; link artifact or N/A with reason.
Confirm no unauthorized targets in any file.
Command guide
Try these commands — Execute checklist
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Pentest capstone — YOUR lab only; stop VMs when done PTES — http://www.pentest-standard.org/ Nmap — https://nmap.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t19-lab.env" nmap -sV --top-ports 30 -oN "$HOME/cyberlium-lab/t19-capstone-enum.txt" "$LAB_HOST" ls -la "$HOME/cyberlium-lab"/t19-*.txt grep -E 'open|title|in_scope' "$HOME/cyberlium-lab/t19-capstone-enum.txt" "$HOME/cyberlium-lab/t19-finding.txt" "$HOME/cyberlium-lab/t19-scope.txt" 2>/dev/null | head -12
Primary tools to practice this lesson: nmap, grep. Reference sites: Pentest capstone; PTES (http://www.pentest-standard.org/); Nmap (https://nmap.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Defender paragraph
One paragraph: entry → privesc/AD → post-ex cycle on YOUR lab and detection gaps.
Name what breaks if you skip RoE or use cover-tracks tradecraft.
3. Shutdown
Revert lab VMs. Revoke creds. Sign completion in index.
Leave lab patched or snapshot restored per course policy.
4. What you ship: capstone evidence pack complete
Checked checklist + sealed evidence pack + teardown proof.
5. What you record before the next lesson
Capstone pack path. Lab VLAN quiet.
6. Wrong vs right: stranger nets vs YOUR lab VMs
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Capstone evidence from unauthorized prod pentest.
Right
Capstone complete on $LAB engagement. Next: topic quiz.
Mission: Topic 19 capstone
1) Walk checklist with evidence links. 2) Defender paragraph from your lab path. 3) Full teardown documented.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum N/A documentation?”
Knowledge Check
APPLY: Capstone target:
Multiple choice
Knowledge Check
APPLY: True or False: Log clearing capstone is credit.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice