Capstone Lab
Execute checklist on $LAB_ASSETS — evidence complete, pack sealed, full teardown.
Visual · t18_capstone_lab
Capstone: checklist × $LAB_ASSETS VA evidence. Original Cyberlium.
Close the loop on lab assets you own — then secure notes and revoke scan creds.
Walk Topic 18 checklist on YOUR $LAB_ASSETS engagement: verify RoE on file, inventory current, scan export within RoE window, CVSS annotations, triage workbook complete, VA report and pack indexed, ≥1 remediated finding with retest closed. Update scan notes index. Teardown: revoke disposable scan credentials, snapshot restore if required, chmod 600 all artifacts. No stranger scans, no exploit PoCs, no unauthorized remediation. Defender paragraph: how YOUR workflow would catch a new Critical on lab web VM next week.
1. Execute checklist
Check each row; link artifact or N/A with reason.
Confirm no unauthorized targets in any file.
Command guide
Try these commands — Execute checklist
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
VA capstone — YOUR lab only NVD — https://nvd.nist.gov Nmap — https://nmap.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap sudo apt install jq
macOS:
Command — copy this
brew install nmap brew install jq
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html choco install jq
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t18-lab.env" nmap -sV --top-ports 20 -oN "$HOME/cyberlium-lab/t18-capstone-scan.txt" "$LAB_HOST" curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.id' ls -la "$HOME/cyberlium-lab"/t18-*.txt
Primary tools to practice this lesson: nmap, jq. Reference sites: VA capstone; NVD (https://nvd.nist.gov); Nmap (https://nmap.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Defender paragraph
One paragraph: scan → triage → report → remediate → retest cycle on YOUR lab.
Name what breaks if you skip retest or accept without review date.
3. Shutdown
Revoke scan creds. Secure pack. Sign completion in index.
Leave lab VMs patched or snapshot restored per course policy.
4. What you ship: capstone evidence pack complete
Checked checklist + sealed report pack + teardown proof.
5. What you record before the next lesson
Capstone pack path. Scanners quiet.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Capstone evidence from unauthorized prod scan.
- Right: Capstone complete on $LAB_ASSETS. Next: topic quiz.
Mission: Topic 18 capstone
1) Walk checklist with evidence links. 2) Defender paragraph from your VA cycle. 3) Full teardown documented.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum N/A documentation?”
APPLY: Capstone target:
APPLY: True or False: Exploit PoC capstone is credit.
APPLY: Teardown includes: