Version 1 · runs fully offline

Networking and cyber labs.
Right on your laptop.

Build a routed network, then attack it and defend it. Routers, firewalls, Kali, Windows and SIEM on one drag-and-drop map, every console in your browser, marked as you go.

Download for WindowsVMware, VirtualBox and Mac

Version 0.1.0 · Hyper-V installer, 617 MB · 16 GB RAM

The gear, the attackers and the targets you'll meet on the job

  • Cisco
  • Juniper
  • FortiGate
  • Windows
  • Kali
  • pfSense
  • Ubuntu
  • Wireshark
  • Elastic
  • Docker

THE STUDIO

The whole lab.
In one app, on one laptop.

Other tools give you a simulator, a separate grader and a cloud bill. Lab Studio gives you real devices, live marking and zero internet, in a single virtual machine.

100+

device types, from Cisco IOL to Kali and Windows 11

4

lab formats imported: CML, EVE-NG, GNS3, containerlab

0

internet, cloud accounts or racks needed

1 VM

holds everything: the engine, the map and every device

01 · THE LAB MAP

Draw a network. Watch it come alive.

Drag routers, firewalls and hosts onto the canvas, cable their ports and press start. Every link turns green the moment it is up, and traffic flows across it.

Cyber-LabRunning9 devices · 8 links up
KALIKali · 203.0.113.66
INETInternet
FW1FortiGate
WEB1Web · 172.16.10.10
R1Core router
SW1Core switch
DC01DC · 10.0.10.10
PC1Win 11 · 10.0.10.50
SIEMSIEM · 10.0.10.5
link trafficstaff webattacklog to SIEM

02 · LIVE MARKING

The lab grades itself while you work.

Step-by-step guides with pictures. Each task is checked live against the real devices, and again at the end. Stuck? Take a hint, or the answer for half the marks.

Cyber-Lab5/7
DMZ isolated from LANPassed
SIEM receives FW1 logsPassed
Block KALI at FW1Hint used

03 · AI BUILT IN

Ask your AI to build the lab for you.

Connect Claude Code, Codex or any MCP client with a token. It can build, start and inspect labs, and with the author scope it writes the lab guide too.

› Build Cyber-Lab: Kali outside, WEB1 in a
DMZ, a LAN with a DC and a SIEM. Start it.
✓ created lab Cyber-Lab
✓ added 9 devices · 8 links · 2 zones
✓ started · all links up

04 · NETWORKING

Build it. Route it. Troubleshoot it.

A real campus on your laptop: a Cisco core with VLANs and trunks, a Juniper branch over the WAN, OSPF between sites and NAT to the internet. Every device is a real image, so every command works.

  • OSPF
  • VLANs and trunks
  • Inter-VLAN routing
  • NAT
Campus-NetworkRunning11 devices · 10 links upWAN · OSPF area 0 · 10.255.0.0/30
ISPInternet · NAT
HQ-R1Cisco · edge
BR-R2Juniper · branch
CORE-SW1Cisco L3 · core
FS01File · 10.10.99.10
ACC-SW1Access
ACC-SW2Access
HR-PCVLAN 10 · 10.10.10.21
ENG-PCVLAN 20 · 10.10.20.34
BR-SW1Juniper EX
BR-PCVLAN 30 · 10.20.30.15
link trafficOSPF helloping branch → HQinter-VLAN
HQ-R1 · console
HQ-R1# show ip ospf neighbor
Neighbor ID State Interface
10.20.255.2 FULL/ - Gi0/2
10.10.255.3 FULL/DR Gi0/1
HQ-R1# show ip route ospf
O 10.20.30.0/24 [110/2] via 10.255.0.2
BR-PC · console
user@br-pc:~$ traceroute 10.10.99.10
1 10.20.30.1 1.1 ms BR-R2
2 10.255.0.1 2.4 ms HQ-R1
3 10.10.255.3 2.9 ms CORE-SW1
4 10.10.99.10 3.2 ms FS01
Campus-Network4/6
OSPF FULL between HQ and branchPassed
VLAN 10 and 20 on trunksPassed
HR-PC reaches ENG-PCPassed
BR-PC reaches FS01Passed
NAT gives HQ the internetChecking
Branch fails over to ISPTo do

05 · CYBERSECURITY

Attack it. Defend it. Prove it.

One click turns a CTF box from the signed library into an isolated lab with Kali, already started. Then switch sides: stand up a Windows domain, firewalls and a SIEM, and catch the attack.

RED TEAM

Recon, exploit, escalate, capture the flag

BLUE TEAM

Windows domain, firewall rules, SIEM, capture

kali · Cyber-Lab
kali@lab:~$ nmap -sV 172.16.10.10
22/tcp open ssh OpenSSH
443/tcp open https nginx
SIEM ▲ FW1 log: port scan from 203.0.113.66
FW1 # config firewall policy · deny 203.0.113.66
kali@lab:~$ nmap -sV 172.16.10.10
All 1000 scanned ports are filtered
Block KALI at FW1Passed · 7 of 7

Big security labs (SIEM, Windows domain) need 32 GB of memory.

AND THAT'S NOT ALL

Built for the whole lab, not just the map.

FW1 # get system statusVersion: FortiGate-VM64

Browser consoles

A terminal for CLI gear and a full screen for Kali and Windows.

Packet capture

Capture any link and open it straight in Wireshark.

Exam locked until the teacher unlocks

Exam lock

Freeze editing and answers until the administrator unlocks. Marking keeps running.

Chaos mode and what-if

Break links on purpose and see who still reaches whom.

Cyber-Lab paused · state saved

Pause and resume

Every VM saves its state and comes back in seconds.

.yaml.unl.gns3.clab.yml

Import your old labs

Bring labs from CML, EVE-NG, GNS3 and containerlab.

FOR TEACHERS

Write the lab once. Grade a whole class automatically.

Author guides with pictures in the built-in editor. Every student is checked against the same tasks, in class or under exam lock, on their own laptop.

Bring Lab Studio to your class
Livetasks checked while students work
½marks when the answer is revealed
Lockedexam mode until you unlock it
Signedlibrary to share labs with students

Up and running in three steps.

Windows 10 or 11, Hyper-V or VMware, 16 GB of memory. 32 GB for big security labs.

  1. 01

    Download

    The Windows setup for Hyper-V, or the OVA for VMware Workstation Pro, VirtualBox and VMware Fusion.

  2. 02

    Install

    Run the setup, or import the OVA into your hypervisor. Give it 16 GB of memory.

  3. 03

    Open your studio

    Lab Studio runs on your own machine, at your own address.

    https://hurbad.local:8443

Your link is up.

Real networks, real attacks, real marks. Download Hurbad Lab Studio 0.1.0 and build your first lab today.

  • Windows · Hyper-VWindows 10 or 11 with Hyper-VHurbadLabStudio-Setup-0.1.0-3f603da.exe · 617 MBDownload setup (.exe)
  • OVA · VMware and VirtualBoxVMware Workstation Pro, VirtualBox, VMware Fusion on macOShurbad-engine-0.1.0-3f603da.ova · 881 MBDownload OVA

Cisco, Juniper, Fortinet, Microsoft, Kali and other names are trademarks of their owners. Lab Studio does not ship their images.