01 / Everyday IT
Interfaces, routes, sockets, DNS, TLS and HTTP. Understand what each layer can tell you.
Read the guide →Start here
Before the tools, learn the system.
02 / Red, blue, purple
Red tests assumptions, blue observes and responds, purple joins the evidence and improves controls.
Read the guide →03 / Kali orientation
Kali packages tools. Learn versions, package documentation and a clean local environment.
Read the guide →04 / Six local labs
A harmless HTTP service, synthetic event triage, digest verification and manual-reading practice.
Read the guide →Who asks what?
RED
Question assumptions
What claim about a control deserves an agreed test? What evidence would show a gap?
BLUE
Observe and recover
Which events are recorded, which are missing, and can the system recover reliably?
PURPLE
Compare together
Join the question to the observation. Fix the gap and repeat the same comparison.
A local HTTP tutorial
From the repository root, start the supplied harmless web fixture. Open a second terminal to inspect its response.
python -m http.server 8765 --bind 127.0.0.1 --directory foundations/fixtures/web
curl --noproxy '*' --include http://127.0.0.1:8765/health.jsonRead the output: HTTP status, Content-Type and JSON body describe different parts of the result. Stop the server with Ctrl+C. Use the full lab to compare HTTP errors and transport errors.
Read the manual
