Checklist
One-page Topic 19 capstone checklist — RoE, privesc, AD, post-ex, report on YOUR lab.
Visual · t19_capstone_checklist
Checklist consolidates pentest pillars. Original Cyberlium.
Capstone proves discipline on lab assets you own — not a montage of unauthorized shells.
Assemble checklist covering Modules 1–9: pentest mindset and RoE ($LAB_VM/$LAB_AD only), scope, recon/enum literacy, exploit literacy on lab boxes, privesc lab proof, AD literacy lab, post-ex/pivot inside RoE, cover-tracks refusal documented, pentest report with remediation. Use on capstone walk of YOUR lab engagement only — never scan, pivot, or report stranger networks. Notes chmod 600 under $HOME/cyberlium-lab.
1. Scope and RoE
$LAB_VM and $LAB_AD named. NEVER stranger scans, AD abuse, anti-forensics, dorm LAN pivots.
Written RoE with stop conditions and time box.
Command guide
Try these commands — Scope and RoE
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
PTES reporting — http://www.pentest-standard.org/index.php/Reporting
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t19-lab.env" 2>/dev/null || LAB_HOST=127.0.0.1 nmap -sV --top-ports 10 "$LAB_HOST" printf 'roe recon enum privesc_notes report ' > "$HOME/cyberlium-lab/t19-checklist.txt"
Primary tools to practice this lesson: nmap. Reference sites: PTES reporting (http://www.pentest-standard.org/index.php/Reporting). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Pentest pillars
Enum notes, privesc proof, AD lab pack, post-ex timeline, report + remediation table.
Each checklist row links artifact or honest N/A with reason.
3. Integrity lines
Cover-tracks refused — snapshot revert used.
Teardown: revoke lab creds, secure pack, restore snapshots if required.
4. What you ship: Topic 19 capstone checklist
One-page pentest checklist for $LAB engagement.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger nets vs YOUR lab VMs
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Use checklist to justify pivot into classmate VLAN.
- Right: Checklist written. Next: Lab Path.
Mission: write pentest capstone checklist
1) RoE/scope section. 2) Privesc through report pillars. 3) Refusal and teardown section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
APPLY: Checklist includes:
APPLY: True or False: Checklist authorizes stranger prod pentest.
APPLY: Teardown includes:
Lab Path
Part of Penetration Testing with AI — Capstone and Topic Quiz.
Evidence Pack
Part of Penetration Testing with AI — Capstone and Topic Quiz.
Lab — Capstone
Part of Penetration Testing with AI — Capstone and Topic Quiz.