0%
Set Up Your Pentest Lab with Docker

Set Up Your Pentest Lab with Docker

Build an isolated pentest lab in under an hour: Kali Linux as the attacker machine and vulnerable targets launched with Docker.

4 hrs/week

Goal: get a working lab in under an hour = 1 attacker (Kali) + vulnerable targets (Docker), all isolated and safe.

flowchart LR
    subgraph PC["Poste de travail"]
        direction TB
        KALI["Kali Linux<br/>(l'attaquant)"]
        subgraph DOCKER["Docker Desktop"]
            DVWA[DVWA :8081]
            JUICE[Juice Shop :8082]
            WG[WebGoat :8083]
            BW[bWAPP :8084]
        end
    end
    HTB["HackTheBox Academy<br/>(exercices système & réseau)"]
    KALI -->|attaque| DOCKER
    KALI -.->|VPN| HTB
    style KALI fill:#c53030,color:#fff
    style HTB fill:#9fef00,color:#000
Why separate the attacker and the targets?

In real-world conditions, the attacker and the target are two separate machines connected by a network. We reproduce that setup: Kali plays the attacker, and the Docker containers play the vulnerable servers. This teaches you to work "remotely" (scan an IP, send an exploit over the network) rather than doing everything on a single machine, which would be nothing like a realistic scenario.

Link copied!