Open-source integration & engineering · Published 2019–2020
CyberRange: an automated AWS security lab
An open-source lab connecting infrastructure automation, offensive and defensive tooling, setup documentation, and environment checks.
The problem
A security experiment is easier to examine when the environment can be built again. Ad hoc provisioning and undocumented dependencies make setup and investigation harder to repeat.
My contribution
I developed the environment integration, AWS provisioning workflows, Make entry points, configuration, checks, and documentation. The project incorporates established community tools and an upstream Terraform foundation, with credit retained for those components.
AWS lab network · boundaries defined by Terraform
Provisioned lab instances
Vulnerable targets
Kali · CommandoVM
Community tool integration
DetectionLab integration
Environment inspection
Logical component view, not an exact deployed topology. Network and security-group configuration require inspection before reuse; historical lab tooling is not a production security boundary.
Engineering decisions
Terraform describes lab assets and network configuration; Make provides common build and inspection entry points. Environment checks and a setup guide make assumptions visible to another practitioner.
Kali, CommandoVM, and DetectionLab contribute existing offensive and defensive tooling. Integrating them into a research environment is distinct from authoring the underlying tools.
Evidence & validation
Public source and the setup guide expose provisioning configuration and environment checks. The project was presented at Black Hat Europe Arsenal and BSides London in 2019.
This website revision reviewed the historical evidence; it did not provision AWS resources or validate the original images against current dependencies.
What the work demonstrates
A public, inspectable starting point for building security labs, alongside presentations explaining its architecture and research use.
Scope & limitations
Historical image-sharing requirements and period-specific dependencies affect reproducibility today. Current setup success, managed operation, and production suitability are not claimed.
What you can inspect
Get in touch
Have a challenge
worth solving?
Start a conversation about engineering, research, or a problem that needs a closer look.