Stand up your first Pi pentest lab

Why this matters

All the theory above resolves to: do you have one Pi running Kali on your desk right now, with a known-good loadout? If not, the rest of the course is academic. The minimum: 1 Pi 4B or Pi 5, 1 SD card (32 GB+), 1 USB Wi-Fi adapter (Alfa AWUS036ACS for monitor mode + injection), and a separated 'target' VLAN.

Demo

Lab topology: ISP → router → switch → (a) corp-style VLAN with a deliberately vulnerable web app + an SMB share, (b) attack VLAN where your Pi lives. The two VLANs are routable for the attack, but the rest of the home network is firewalled off.

Try it yourself

1. Stand up the minimum lab. Document network diagram + IP plan.
2. Confirm your Pi can reach the target VLAN but cannot reach your main home VLAN. Test with nmap.
3. Drop one deliberately vulnerable target onto the target VLAN: DVWA, Juice Shop, or a VulnHub VM.
4. Run an end-to-end recon → scan → exploit chain against that target. Document steps as your first lab notebook entry.

References

• VulnHub
• OWASP Juice Shop
• Alfa AWUS036ACS