> For the complete documentation index, see [llms.txt](https://mw1po.gitbook.io/devsecops/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mw1po.gitbook.io/devsecops/it-security-roles/web-application-security-testing/self-hosted-training-lab.md).

# Self-hosted Training Lab

I created my home penetration testing lab with existing virtual machines from pentester labs <https://pentesterlab.com/exercises> because they are relatively small. You can download the ISO images directly from the web page.

There are more machines available on <https://www.vulnhub.com/>

{% hint style="warning" %}
Once you run one of these machine, run `sudo ifconfig eth0 192.168.x.x` in a terminal to set a new ip address. Also think about setting the network of the VM with the vulnerable web app to host-only.
{% endhint %}

Another option is to install a vulnerable web app on your host machine if you know what you are doing. You don't want to break your host.  You can also install the web apps on a clean virtual machine:

{% content-ref url="/pages/-MYfw4gWyPHEYqsnOyAN" %}
[Vulnerable Web Apps](/devsecops/it-security-roles/web-application-security-testing/self-hosted-training-lab/vulnerable-web-apps.md)
{% endcontent-ref %}