Start the sample site
Open AstraOS Security Toolkit from the welcome window or XFCE menu. Choose Start local lab, then Open lab site.
See local setupDEFENSIVE · AUTHORIZED · LOCAL-FIRST
A guided learning path across network visibility, Linux defense, application analysis, and forensics. Start with the local AstraOS training site; it is served only to your own computer.
YOUR FIRST EXERCISE
The AstraOS Toolkit starts a small static site at 127.0.0.1:8765. It has no login, collection form, or remote services. The server binds to loopback only.
Open AstraOS Security Toolkit from the welcome window or XFCE menu. Choose Start local lab, then Open lab site.
See local setupUse only the built-in local practice target. These examples do not contact an internet host.
nmap -sV -p 8765 127.0.0.1
gobuster dir -u http://127.0.0.1:8765 -w /usr/share/astraos/lab-wordlist.txtStudy your own requests on the loopback interface. Stop the server from the Toolkit when the exercise ends.
sudo tcpdump -i lo -nn port 8765
Wireshark filter: tcp.port == 8765THE DEVELOPMENT TOOLBOX
Tool scope depends on the target and your authorization. The AstraOS Toolkit copies examples but does not execute them for you.
Nmap · Gobuster · Wireshark · tcpdump
Use the built-in 127.0.0.1 lab onlyLynis · UFW · Fail2ban · auditd
Review settings before changesBandit · GDB · strace · ltrace · Binwalk
Your own code and firmwareYARA · The Sleuth Kit · Foremost
Authorized images and samplesClear scope is part of the skill. Practice on systems you own or have written permission to assess. No password guessing, other people's traffic capture, public-target scans, or automated exploitation is included in these guided labs.
Usage rulesPREVIEW BUILD IN PROGRESS
The preview needs a new ISO build and boot checks before it is published. See the user guide for supported use and known limits.