No Bypass Cookbooks
No attack tools means Cyberlium teaches ZT design literacy — write the defensive ethics card into YOUR $ZT_LAB notes; refuse lateral movement, exploitation, and unauthorized scanning as ZT validation.
Visual · t40_no_attack_tools
Defensive ethics. $ZT_LAB only. Original Cyberlium.
Architecture literacy is not pentest theater — Cyberlium refuses attack-tool walkthroughs disguised as Zero Trust gap analysis on systems you do not own.
Validating ZT in production uses authorized purple-team exercises, controlled test tenants, and vendor-supported assessment modes — not Cyberlium student labs running Metasploit, credential stuffing, or stranger network scans. Topic 40 teaches diagrams, checklists, policy matrices, and NIST SP 800-207 literacy on $ZT_LAB fictional orgs only. Write YOUR ethics card: allowed = architecture diagrams, segment matrices, identity policy stubs, curl public NIST pages; refused = attack tools, lateral movement cookbooks, unauthorized port scans. Next: Lab Setup.
1. Hard refusals (named)
NEVER: lateral movement scripts on stranger networks, exploitation frameworks as ZT lab exercises, unauthorized nmap/masscan on production or classmate targets, credential attacks to prove MFA gaps, or publishing lab attack output as employer architecture review.
NEVER: treat microsegmentation literacy as instructions to bypass segments on unauthorized hosts.
Command guide
Try these commands — Hard refusals (named)
═══ LINUX / macOS (Terminal Practice) ═══
Check system state and user context
Command — copy this
id whoami uname -a
Inspect network sockets listening for connections
Command — copy this
ss -tuln 2>/dev/null || netstat -tuln
Audit active processes
Command — copy this
ps aux | grep -v "\[" | head -15
═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information
Command — copy this
whoami /all Get-ComputerInfo | Select-Object CsName, OsName, OsVersion
Primary tools to practice this lesson: grep, python3. Reference sites: NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final); CISA ZTMM (https://www.cisa.gov/zero-trust-maturity-model). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Allowed defensive artifacts
Architecture diagram stubs (markdown/ASCII), ZT pillar checklists, policy decision matrices, device compliance tables, roadmap Gantt literacy, curl NIST SP 800-207 and vendor architecture whitepapers for vocabulary.
Purple-team validation belongs in authorized employer programs with RoE — not Cyberlium Topic 40 default lab.
3. Ethics card habit
Ship: ethics card with NEVER attack tools line and ALLOWED diagram/checklist line on $ZT_LAB.
If a tutorial suggests scanning a stranger org to find ZT gaps — refuse and document the refusal in lab notes. Next: Lab Setup.
4. What you ship: no-attack-tools ethics card
NEVER attack tools + ALLOWED diagram/checklist lines. $ZT_LAB named. chmod 600.
5. What you record before the next lesson
Date. Ethics card. $ZT_LAB named. File t40-m01-l03-no-attack-tools.txt chmod 600.
6. Wrong vs right: bypass cookbooks vs YOUR ZT design
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Run lateral movement lab on café Wi-Fi because ZT assumes breach. Skip ethics card because diagrams are harmless.
- Right: Write ethics card refusing attack tools on unauthorized targets. Next: Lab Setup.
Mission: write YOUR ZT lab ethics card
1) List three NEVER attack patterns. 2) List three ALLOWED defensive artifacts. 3) Name $ZT_LAB as scope. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
ZT assumes breach in design — not as license to attack stranger systems in student lab.
APPLY: Topic 40 refuses:
APPLY: True or False: Lateral movement cookbooks belong in Cyberlium ZT lab.
APPLY: Allowed ZT lab artifacts include: