For this Lab, you’ll need:

• a Kali VM (Attack Box)
• a Windows 10 or Windows 11 target/victim VM
  • These two VMs must be able to ping one another and communicate.
• I suggest using VMware Workstation Player and making sure the network adapters are in bridged mode.

One concept every cybersecurity professional should know is the MITRE ATT&CK Framework.

• It describes all of the TTPs (Tactics, Techniques, and Procedures) that adversaries tend to utilize against target infrastructure.

We’ll use the Caldera attack platform to automate exploitation. Caldera was developed by MITRE to align with the framework. Trying to grasp all the TTPs outlined in the MITRE ATT&CK framework can be overwhelming because of the multitude of definitions and relationships across the various matrices.

• With Caldera, however, you can execute a variety of attacks, explore how each attack works, and gain insight into MITRE ATT&CK tactics, techniques, and procedures (TTPs) in a controlled lab environment.

Step 1: Install Caldera on Kali. (Tested in Kali 2025)

Caldera installation directions can Be Found here

Checkpoint 1: Screenshot that you have Caldera up and running.

Step 2: Create a vulnerable target environment (Windows VM)

• This set of steps is also known as ‘A Good Way to Get Fired in a Production Environment!’

On your Windows VM, let’s disable Defender first.

• We’ll create a deliberately vulnerable environment (No antivirus) on the target/victim VM first.
  • Again, antivirus bypass is a separate, much more involved topic. —Shields Down!
• Click Here For Directions (Disable Windows Defender via Group Policy)

Disable the Windows firewall

• Click Here for Directions (Disable Windows Firewall)