demo_lab
Wazuh-instrumented infrastructure with vulnerable hosts. Designed for detection-engineering, alert tuning and blue-team training. Includes misconfigured services and CVE reproductions out of the box.
catalog
Ready-to-deploy training environments for Proxmox. Pick a scenario, run the wizard, and your lab is live in minutes.
Scenarios
Complete end-to-end lab deployments. Each scenario provisions networks, VMs and services.
Bundles
Atomic, reusable Ansible actions you can compose into custom deployments via the CLI or UI.
Roles
Individual Ansible roles for specific products, CVEs and misconfigurations. Building blocks for new scenarios.
Scenarios
Wazuh-instrumented infrastructure with vulnerable hosts. Designed for detection-engineering, alert tuning and blue-team training. Includes misconfigured services and CVE reproductions out of the box.
Reproducible compromised environments for incident reconstruction and post-mortem analysis. Perfect for DFIR training and rebuilding compromised systems in an isolated context.
Full MISP (Malware Information Sharing Platform) deployment for threat intelligence sharing, indicator correlation and collaborative analysis exercises.
Linux kernel-level monitoring with Kunai for deep system telemetry and advanced threat detection. Ideal for understanding low-level attacker behaviour and building detection rules.
Network Bases
Clean, empty network bases to install your own workloads on. Production-grade multi-subnet foundations ready in minutes.
Simple two-subnet base. Ideal for basic attacker/defender split.
GitHub ↗Four subnets for more complex segmentation scenarios and DMZ setups.
GitHub ↗Six subnets for enterprise-scale topologies and multi-zone environments.
GitHub ↗Bundles & Roles
Bundles are atomic, reusable Ansible actions that you can invoke directly from the CLI or compose into custom scenarios. Current bundles cover core Linux setup, Proxmox operations, user management, Docker, and monitoring agents.
Individual roles follow the <category>.<action>.<target> naming convention
(e.g. software.install.wazuh, systems.checks.overview).
# Catalog structure range42-catalog/ ├── 02_ansible_layer/ │ ├── admin/ # infrastructure roles │ ├── trainee/ # student roles │ └── _ctf/ # challenge roles ├── 03_container_layer/ │ ├── cve/ │ │ ├── web/ # web CVEs │ │ ├── network/ # network CVEs │ │ └── system/ # system CVEs │ └── misconfiguration/ └── 04_gamification_layer/ ├── hospital/ # hospital theme └── bank/ # bank theme
Contribute
Open an issue on the catalog repo to request a specific product, CVE or misconfiguration. All catalog contributions welcome — Ansible roles, Docker stacks, and scenario bundles.