DEFENSIVE · AUTHORIZED · LOCAL-FIRST

Learn the tools.
Know your scope.

A guided learning path across network visibility, Linux defense, application analysis, and forensics. Start with the local AstraOS training site; it is served only to your own computer.

The 0.2.1-alpha preview includes office, privacy and ethical security tools; desktop startup is not yet verified.

YOUR FIRST EXERCISE

A safe target
already on your desktop.

The AstraOS Toolkit starts a small static site at 127.0.0.1:8765. It has no login, collection form, or remote services. The server binds to loopback only.

STEP / 01
▶

Start the sample site

Open AstraOS Security Toolkit from the welcome window or XFCE menu. Choose Start local lab, then Open lab site.

See local setup
STEP / 02
⌁

Inspect this loopback host

Use only the built-in local practice target. These examples do not contact an internet host.

nmap -sV -p 8765 127.0.0.1
gobuster dir -u http://127.0.0.1:8765 -w /usr/share/astraos/lab-wordlist.txt
STEP / 03
■

Observe and stop

Study your own requests on the loopback interface. Stop the server from the Toolkit when the exercise ends.

sudo tcpdump -i lo -nn port 8765
Wireshark filter: tcp.port == 8765

THE DEVELOPMENT TOOLBOX

Four tracks.
One careful workflow.

Tool scope depends on the target and your authorization. The AstraOS Toolkit copies examples but does not execute them for you.

TRACK / 01
⌁

Network visibility

Nmap · Gobuster · Wireshark · tcpdump

Use the built-in 127.0.0.1 lab only
TRACK / 02
⌘

Linux defense

Lynis · UFW · Fail2ban · auditd

Review settings before changes
TRACK / 03
▤

App & binary analysis

Bandit · GDB · strace · ltrace · Binwalk

Your own code and firmware
TRACK / 04
◈

Forensics

YARA · The Sleuth Kit · Foremost

Authorized images and samples
✓

Clear scope is part of the skill. Practice on systems you own or have written permission to assess. No password guessing, other people's traffic capture, public-target scans, or automated exploitation is included in these guided labs.

Usage rules

PREVIEW BUILD IN PROGRESS

Checked before download.

The preview needs a new ISO build and boot checks before it is published. See the user guide for supported use and known limits.