Summary

In this chapter, we were able to successfully build a penetration testing lab in GCP. We started by preparing the prerequisites, along with defining the project structure of the Terraform code for automating the lab environment. We then set up an isolated network for securing the lab environment resources from external attacks. Inside this isolated network, we launched a target VM instance running the OWASP Juice Shop application (inside a container). After that, we imported the Kali Linux Generic Cloud Image into our Google Cloud account. Using the imported image, we proceeded with the setup of the attacker VM instance inside the network environment. After completing the lab environment, we performed a simplified penetration testing simulation to verify that our lab had been (mis)configured correctly.

In the upcoming chapter, our focus will shift toward setting up a penetration testing lab in Microsoft Azure. We will set up a lab environment where we can practice container...