Automated Cyber
Solutions
← Project indexThomas “Tom” Cappetta

Open-source integration & engineering · Published 2019–2020

CyberRange: an automated AWS security lab

An open-source lab connecting infrastructure automation, offensive and defensive tooling, setup documentation, and environment checks.

The problem

A security experiment is easier to examine when the environment can be built again. Ad hoc provisioning and undocumented dependencies make setup and investigation harder to repeat.

My contribution

I developed the environment integration, AWS provisioning workflows, Make entry points, configuration, checks, and documentation. The project incorporates established community tools and an upstream Terraform foundation, with credit retained for those components.

Architecture diagram · documented historical AWS lab components

AWS lab network · boundaries defined by Terraform

Research systems

Provisioned lab instances
Vulnerable targets

Investigation tooling

Kali · CommandoVM
Community tool integration

Defender visibility

DetectionLab integration
Environment inspection

Provisioning & checks
Make workflows → Terraform / AWS
Setup documentation + InSpec checks

Logical component view, not an exact deployed topology. Network and security-group configuration require inspection before reuse; historical lab tooling is not a production security boundary.

Engineering decisions

Terraform describes lab assets and network configuration; Make provides common build and inspection entry points. Environment checks and a setup guide make assumptions visible to another practitioner.

Kali, CommandoVM, and DetectionLab contribute existing offensive and defensive tooling. Integrating them into a research environment is distinct from authoring the underlying tools.

Evidence & validation

Public source and the setup guide expose provisioning configuration and environment checks. The project was presented at Black Hat Europe Arsenal and BSides London in 2019.

This website revision reviewed the historical evidence; it did not provision AWS resources or validate the original images against current dependencies.

What the work demonstrates

A public, inspectable starting point for building security labs, alongside presentations explaining its architecture and research use.

Scope & limitations

Historical image-sharing requirements and period-specific dependencies affect reproducibility today. Current setup success, managed operation, and production suitability are not claimed.

What you can inspect

Get in touch

Have a challenge
worth solving?

Start a conversation about engineering, research, or a problem that needs a closer look.