Build a home lab for free.

Recruiters love one question: "What have you practised hands-on?" A home lab is your answer. Today you'll set up a safe practice environment on your own laptop, and find free platforms when your laptop isn't strong enough.

Why a home lab?

You can't practise on real company systems, and you must never practise on other people's. A home lab is your own private training ground where breaking things is the whole point. It's like a cricket net: you practise there so you perform well in the match.

What you need

Don't have this? Skip to "Online labs" below. Many people start there.

The free building blocks

Step by step

1. Enable virtualisation in your laptop's BIOS (search "enable VT-x" + your laptop model).
2. Install VirtualBox from virtualbox.org.
3. Download the Kali Linux VirtualBox image from kali.org (official site only) and import it.
4. Download Metasploitable 2 (from SourceForge via the Rapid7 link) and import it.
5. In VirtualBox, put both machines on a Host-only or Internal network, so the vulnerable machine is never exposed to the internet or your home Wi-Fi.
6. Start both. In Kali, open a terminal and use what you learned: ip a to see your address, then nmap -sV on the Metasploitable machine's IP.

Safety rule

The vulnerable machine must never be on a bridged network or connected to the internet. It's full of holes on purpose. Internal/Host-only networking keeps it in its cage.

Online labs (no powerful laptop needed)

Your teacher says

Pick one path and finish it, rather than starting ten. A finished TryHackMe "SOC Level 1" path looks great on a fresher CV.

Document everything

Make a free GitHub account or a simple blog and write short notes for each lab: what you did, what you found, what you learned. These write-ups become your portfolio. Never publish anything about real systems or other people, only your labs.