A complete virtual environment for red-team and blue-team simulation, network segmentation, and infrastructure hardening—built by Dylan Barrett under Rogue Labs.
⚠️ Disclaimer
Unauthorized use of cybersecurity tools and methods is illegal and unethical.
You are fully responsible for ensuring your use complies with all applicable laws and regulations.
📜 License
This project is licensed under the Creative Commons Attribution-NonCommercial 4.0 International (CC BY-NC 4.0) license.
🔗 Full License Text
🧑💻 Author
Rogue Labs (Dylan Barrett)
🌐 Visit Portfolio
📂 Directory
| 📁 Section | 🔎 Description |
|---|---|
| 🧱 DC01 Setup | Deploy and configure the lab’s Active Directory domain controller in Proxmox VE. |
| 🧪 Scenario Library — Planned | Red-vs.-blue scenarios, detection exercises, and offensive/defensive walkthroughs. |
🔥 What's Included
| Component | Description |
|---|---|
| Windows Server 2025 | Active Directory Domain Controller (rougelabs.local) |
| Windows Server 2022 | Exchange Server + IIS Web Server |
| Windows 10 & Windows 11 | Client machines for red/blue team operations |
| Ubuntu (LAMP Stack) | Web server in DMZ for vulnerable app testing (e.g., DVWA, WordPress) |
| Ubuntu (Blue Team Box) | Tools like Wazuh, Snort, and Suricata for monitoring and alerting |
| Kali Linux | Red team box with standard offensive tooling |
| IIoT VLAN | Simulated Industrial IoT with isolated test devices |
| Proxmox VE | Base hypervisor platform with snapshot support and virtual VLAN tagging |
| VirtIO Drivers | Integrated for Windows guest installation performance |
🛠️ Features
-
Automated Install:
autounattend.xmlfor Windows Server 2025/2022- PowerShell scripting to deploy AD, users, DNS, and system hardening
-
Network Segmentation:
- DMZ for public services
- IIoT VLAN for industrial test cases
- Red/Blue/White team separation for simulation
-
ISO Customization:
- Custom Windows ISOs with VirtIO drivers
oscdimgautomation for rebuilding media
-
Proxmox Snapshots:
- Instant rollback to clean state
- Optional full backup workflows
🖥️ Lab Architecture (Planned)
graph TD;
Internet --> Firewall
Firewall --> DMZ_VLAN
Firewall --> Internal_Network
Firewall --> IIoT_VLAN
DMZ_VLAN --> LAMP_Server
Internal_Network --> AD_DC
Internal_Network --> Exchange_Server
Internal_Network --> BlueTeam_Box
Internal_Network --> Windows10_Client
Internal_Network --> Windows11_Client
Internal_Network --> RedTeam_Box
IIoT_VLAN --> IIoT_Device1
IIoT_VLAN --> IIoT_Device2