Setting up a local-only lab

Lesson

A local lab is the only safe place to practice offensive techniques. Common shapes:

• Docker containers on your laptop with no host networking (--network none or a private bridge).
• A virtual machine with two NICs: one isolated lab network, one for management.
• Dedicated air-gapped hardware for advanced practice.

The C-platform exercises sandbox each submission in a Docker container with --network none by default — your code can't reach anything but its own loopback fixtures.