Build a CyberSecurity Lab using Proxmox

Name: Build a CyberSecurity Lab using Proxmox
Rating: 4.4 (3 reviews)

Your first step towards mastering Cyber Security using a hands on approach

Created bySrinivas .

Last updated 2/2026

English

English [Auto],

What you'll learn

Cyber Security enthusiasts
Penetration Testers
Red team operations aspirants
Cyber Security trainers

Course content

9 sections • 25 lectures • 3h 4m total length

Course Introduction2:15
Build a practical cybersecurity lab with Proxmox, turning a Mac mini into Active Directory on Windows Server 2025, Windows 10 clients, and Docker apps on Ubuntu 2404.

Access Proxmox Management Interface3:55
Access the Proxmox web UI by configuring your LAN and static IP, then log in via https on port 8006 to start your cybersecurity lab.
Lab Architecture8:00
Explore the proxmox-based lab on a Mac mini, with Windows domain controller, Active Directory, Linux web app, centralized logging, and a Kali attacker for red-team and SOC training.
Downloading ISO images3:32
Download and organize ISO images for Windows Server 2025 and 2022 evaluation editions, Windows 10 64-bit, and Ubuntu Server 24.04 to build a Proxmox-based cybersecurity lab.
Uploading ISO files to Proxmox5:17
Upload Windows Server 2025, Windows Server 2022, Windows 10, and Ubuntu Server 24.04 ISO images in the Proxmox web interface to prepare installation media for lab virtual machines.

Installing Windows Server 202511:10
Install Windows Server 2025 in proxmox by creating a VM from the iso, configuring a domain controller, and setting a static ip with dns and hostname updates.
Setting up Active Directory Environment7:09
Install Active Directory Domain Services and promote Windows Server 2025 to a domain controller, then create two domain user accounts in the stratosphere.local domain and configure their password policies.
Creating a Service Account and Service Principle Name (SPN)5:22
Create a custom service principal name for the dummy SQL service user to simulate Kerberos scenarios in the lab, highlighting the risk of a weak password and domain admin privileges.
Creating Network Shares6:38
Create two smb network shares named user share and da share on the domain controller, then place heartbeat service in them for a vulnerable lab.

Installing Windows 1010:53
Install Windows 10 Pro in proxmox by creating a VM from the Win10 ISO, set hostname workstation one, and configure IPv4 10.15.1.101 with gateway 10.15.1.1 and DNS 10.15.1.100.
Joining the Domain3:49
Join a Windows 10 workstation to the stratosphere.local domain using the domain user account user one. Complete the process through system properties, computer name changes, a restart, and domain login.
Installing Third Party Applications5:29
Install heartbeat service on Windows 10 workstation to simulate a local privilege escalation, showing how a low-privileged user can overwrite the administrator binary and trigger escalation when the service restarts.

Installing Windows Server 20228:30
Install Windows Server 2022 in a Proxmox lab and configure it as an ADC's server for Active Directory Certificate Services, with a static IP and DNS to the domain controller.
Configuring ADCS Administrator8:59
Create ADC's admin domain user and grant enterprise admin rights. Join a Windows Server 2022 to the stratosphere.local domain, configure local administrator privileges, and prepare for Active Directory certificate services.
Configuring Active Directory Certificate Services (ADCS)9:48
Install and configure Active Directory Certificate Services on Windows Server 2022, set up an enterprise root CA, and enable certificate enrollment web and policy services for domain joined clients.
Creating a Vulnerable Certificate Template (ESC1)3:12
Demonstrates creating a vulnerable certificate template (ESC1) that enables any authenticated domain user to enroll for a certificate, enabling impersonation and potential privilege escalation.
Validating Vulnerable Certificate Template (ESC1) using Cerify.exe8:17
Validate a misconfigured S1 certificate template using the certify tool on a Windows 10 workstation to obtain a certificate for administrator, enabling domain administrator impersonation.

Installing Ubunut 24.04 Server6:11
Install Ubuntu 24.04 server in a Proxmox VM, configure a manual IP (10.15.1.103) with gateway 10.15.1.1, enable OpenSSH, and set up web admin credentials for a lab vulnerable web server.
Installing Docker environment1:49
Update the package list and install docker.io and docker compose on the lab environment. Verify docker and docker compose versions to complete the quick setup.
Setting up Web Application using Docker Compose10:01
Set up a web application on an Ubuntu 20.04 server using Docker Compose, transferring source code to /opt/exam results, configuring permissions, building images, and validating access via login.

Installing a centralized logging server5:25
Install Ubuntu 2404 server as the SoC host in a Proxmox VM, then configure a manual IPv4 address and install OpenSSH server, preparing Elasticsearch and Kibana for monitoring security events.
Installing Elasticsearch and Kibana12:06
Install and configure Elasticsearch and Kibana on the SoC host, enable network access on port 9200 and 5601, disable security for lab use, and verify with curl.
Shipping logs from Windows machines to a centralized server25:35
Install and configure winlogbeat on Windows systems to forward system, security, and application logs to Elasticsearch, then verify indexing and monitor events in Kibana.
Shipping logs from Linux machines to a centralized server9:20
Install Filebeat on the Ubuntu web server and SOC host. Configure filebeat.yml with unique IDs and forward logs to Elasticsearch for Kibana.

Requirements

Basic experience using Virtual Machines is recommended but not mandatory

Description

Learn how to build your own professional-grade cybersecurity laboratory from scratch! This hands-on course guides you through creating a secure testing environment where you can safely practice security techniques, malware analysis, and penetration testing. Whether you're a beginner or an experienced IT professional, this course provides the foundation for your cybersecurity journey.

You'll learn to set up essential virtualization tools, configure isolated networks, and deploy the most important security tools used by professionals. Starting with basic lab safety and setup, we'll progress to advanced configurations including:

Multiple virtual machines running various operating systems
Network isolation and segmentation
Security tools like Wireshark, Nmap, and Metasploit
Vulnerable machines for practicing ethical hacking
Malware analysis environments
Intrusion Detection Systems (IDS)
Security logging and monitoring solutions

Perfect for aspiring cybersecurity professionals, IT administrators, and security enthusiasts, this course provides practical, real-world skills that you can immediately apply. No prior lab experience required – just basic computer knowledge and a desire to learn. Our step-by-step approach ensures you'll understand each component of your security lab.

By the end, you'll have a fully functional security lab that you can use for certifications like CompTIA Security+, CEH, or OSCP, as well as continuing education and security research. You'll also learn best practices for maintaining and updating your lab environment to keep it current with emerging threats.

Requirements:

Computer with minimum 8GB RAM (16GB recommended)
100GB free storage space
Basic networking knowledge

Who this course is for:

Cyber Security Professionals

Build a CyberSecurity Lab using Proxmox

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 2min

Getting started with Proxmox setup4 lectures • 21min

Building Domain Controller4 lectures • 30min

Building User Workstation3 lectures • 20min

Building Active Directory Certificate Services5 lectures • 39min

Building Web Server Environment3 lectures • 18min

Building a Security Operations Center (SOC) Environment4 lectures • 52min

Knowledge check0

Conclusion1 lecture • 2min

Requirements

Description

Who this course is for: