Home labs & practical projects

Map a small training network before testing

A project to do with your own tools, with guidance on what to create and capture.

Authorised security lab Suggested time: 90–120 minutesYour own authorised environment

What you could create

A beginner assessor is given two lab hosts and must understand what is present before choosing a permitted test.

Example evidence format

Project evidence map (example)

Lab host and service inventoryScope and inputs

Beginner assessment noteDecisions and reasoning

Evidence record (example)

Evidence	What to capture
Lab host and service inventory	Show the inputs, scope and decisions behind this record. The inventory distinguishes observed service details from guesses.
Beginner assessment note	Include the evidence supporting your conclusion. Every action can be tied to the supplied scope.

What you'll need

Authorised security lab

Use two deliberately vulnerable training hosts with written permission and an isolated network. Start an inventory table before running the platform’s guided discovery exercise.

Project record

Keep the working files for lab host and service inventory and record assumptions as you go.

Current reference material

Use the linked provider resources to verify the features, access terms and version relevant to your project.

Access & cost

Use a deliberately vulnerable local image or a licensed training range. Check the provider’s access terms and current price.

Only test systems you own or are explicitly authorised to assess. Keep targets isolated and use synthetic accounts and data.

Suggested milestones

1
Plan and investigate
Identify in-scope hosts, exposed services and uncertainties.
2
Develop your approach
Explain which basic validation would answer each uncertainty.
3
Verify and explain
Document one permitted finding with a plain-English remediation suggestion.

Evidence worth keeping

Keep clear, organised evidence of your design and any testing you carry out.

1
Lab host and service inventory
Show the inputs, scope and decisions behind this record. The inventory distinguishes observed service details from guesses.
2
Beginner assessment note
Include the evidence supporting your conclusion. Every action can be tied to the supplied scope.

Label design proposals and observed results clearly.

Explain your work

Use these prompts to reflect on your decisions and what you learned.

Which part of your lab host and service inventory needed the most judgement?
What observation or assumption changed your approach?
What would you improve, and what have you not verified?

Describe this as a personal project in your portfolio.

Useful resources

Use these resources to deepen your understanding and check key details.

Official certification objectives

Review the current provider requirements and relevant subject areas.

INE Junior Penetration Tester learning path

Check relevance, platform versions and current access terms.

Explore external learning resources

Find relevant providers and check features, access requirements and costs.

A useful starting point

Use two deliberately vulnerable training hosts with written permission and an isolated network. Start an inventory table before running the platform’s guided discovery exercise.

What a good result looks like

The inventory distinguishes observed service details from guesses.
Every action can be tied to the supplied scope.

Finish the project

Revert target snapshots, remove test accounts and artefacts, and store a sanitised report. Do not publish credentials or working attack material.

Independent home-project guidance, not an official vendor lab or a claim of complete exam coverage. Use your own tools and label the work accurately.