A Scalable and Dynamic Testbed for Conducting Penetration-Test Training in a Laboratory Environment

This report describes a novel testbed for training penetration testers who evaluate the security of computer networks. This testbed was generated based on an informal study of the common needs of real-life penetration testers. Only open-source technologies are used and step-by-step instructions are provided on how to create the testbed. A case study is also included with a sample scenario and the steps that a penetration tester may take to evaluate a network. Lastly, the report includes lessons learned and limitations of the testbed. The original document contains color images.