Lab snapshot · 192.168.1.0/24

Fastigiata Systems Testing Lab

A mixed-platform (Apple, Linux) home laboratory for cybersecurity research, AI experimentation and virtualization—combining vulnerable targets, IoT and personal devices in a shared trust zone.

Ollama LLMs Penetration testing Virtualization Network administration Obsidian RAG
9 Library models
9 Tracked devices
Local intelligence

Model library

A varied local stack for writing, reasoning, code, vision, lightweight deployments and retrieval.

01

Gemma 4 12B

Main reasoning / writing model

Primary
02

Qwen3 9B

Strong general assistant

General
03

Qwen2.5 Coder 7B

Coding and VS Code

Code
04

DeepSeek R1 Qwen3 8B

Reasoning experiments

Reasoning
05

Phi 3.5 Vision

Vision tasks

Vision
06

Llama 3.2 3B

Fast lightweight assistant

Fast
07

Gemma 3 1B

Tiny network/mobile model

Mobile
08

Ministral 3B

Lightweight alternative

Lightweight
09

Nomic Embed

RAG embeddings

Embedding
Container workflow

Kali CLI via Docker

Start the Kali Docker container, open its command-line interface, run an authorised scan and stop the container cleanly.

1

Start the Kali container

docker start kali-toolbox
docker exec -it kali-toolbox bash
2

Run Nmap in Kali CLI

nmap -T4 -sC -sV 192.168.1.116 -oA "/lab/$(date +%Y%m%d)-192.168.1.116"
3

Exit the Kali shell

exit
4

Stop the Kali container

docker stop kali-toolbox
Cybersecurity toolkit

Six useful Nmap commands

Practical commands for host discovery, service detection, vulnerability checking and saving scan results.

1. Discover active devices

nmap -sn 192.168.1.0/24

Performs a ping scan of the subnet and lists devices that appear to be online without scanning their ports.

2. Scan common TCP ports

nmap 192.168.1.116

Scans the 1,000 most common TCP ports on the selected target and reports which ports are open, closed or filtered.

3. Detect services and versions

nmap -sV 192.168.1.116

Identifies services running on open ports and attempts to determine software names and version numbers.

4. Run default scripts

nmap -sC -sV 192.168.1.116

Combines service detection with Nmap's default script set to gather additional information about exposed services.

5. Scan every TCP port

nmap -p- 192.168.1.116

Scans all 65,535 TCP ports rather than only the common ports. This is more thorough but takes longer.

6. Save results in all formats

nmap -T4 -sC -sV 192.168.1.116 -oA lab-scan

Runs a faster scripted service scan and saves the output as normal text, XML and grepable files using the name lab-scan.

Network map

Mermaid topology

Logical view of the Fastigiata lab and its principal systems. 

flowchart TB
    ROUTER["Home Router / LAN
192.168.1.0/24"]

    ROUTER --> PI["Raspberry Pi
192.168.1.105
Utility node"]
    ROUTER --> MACSERVER["fastigiata-macserver
192.168.1.116
SSH · Samba"]
    ROUTER --> FEDSERVER["fastigiata-fedserver
192.168.1.117
Fedora 44 · Ollama"]
    ROUTER --> TARGET["Unpatched Linux
192.168.1.111
Vulnerable target"]
    ROUTER --> IPHONE["iPhone
192.168.1.103
2FA · Admin checks"]
    ROUTER --> MX["MX Linux Admin
192.168.1.130
Network administration"]
    ROUTER --> INTEL["Intel Mac Production
192.168.1.102
VM cyber lab · Ollama"]
    ROUTER --> MINT["MintBook Pro Production
192.168.1.123
Docker · Kali · Open WebUI"]
    ROUTER --> SILICON["Silicon Mac Production
192.168.1.115
AI lab · MLX · Ollama"]

    MINT -. scans .-> TARGET
    MINT -. scans .-> MACSERVER
    SILICON -. AI services .-> MINT
    FEDSERVER -. Ollama API .-> IPHONE

    classDef core fill:#2d1b46,stroke:#a78bfa,color:#f4eff8;
    classDef server fill:#172232,stroke:#67e8f9,color:#f4eff8;
    classDef workstation fill:#1d2b25,stroke:#6ee7b7,color:#f4eff8;
    classDef target fill:#351820,stroke:#fb7185,color:#f4eff8;

    class ROUTER core;
    class PI,MACSERVER,FEDSERVER server;
    class MX,INTEL,MINT,SILICON,IPHONE workstation;
    class TARGET target;
Mermaid source code 
flowchart TB
    ROUTER["Home Router / LAN<br>192.168.1.0/24"]

    ROUTER --> PI["Raspberry Pi<br>192.168.1.105<br>Utility node"]
    ROUTER --> MACSERVER["fastigiata-macserver<br>192.168.1.116<br>SSH · Samba"]
    ROUTER --> FEDSERVER["fastigiata-fedserver<br>192.168.1.117<br>Fedora 44 · Ollama"]
    ROUTER --> TARGET["Unpatched Linux<br>192.168.1.111<br>Vulnerable target"]
    ROUTER --> IPHONE["iPhone<br>192.168.1.103<br>2FA · Admin checks"]
    ROUTER --> MX["MX Linux Admin<br>192.168.1.130<br>Network administration"]
    ROUTER --> INTEL["Intel Mac Production<br>192.168.1.102<br>VM cyber lab · Ollama"]
    ROUTER --> MINT["MintBook Pro Production<br>192.168.1.123<br>Docker · Kali · Open WebUI"]
    ROUTER --> SILICON["Silicon Mac Production<br>192.168.1.115<br>AI lab · MLX · Ollama"]

    MINT -. scans .-> TARGET
    MINT -. scans .-> MACSERVER
    SILICON -. AI services .-> MINT
    FEDSERVER -. Ollama API .-> IPHONE

    classDef core fill:#2d1b46,stroke:#a78bfa,color:#f4eff8;
    classDef server fill:#172232,stroke:#67e8f9,color:#f4eff8;
    classDef workstation fill:#1d2b25,stroke:#6ee7b7,color:#f4eff8;
    classDef target fill:#351820,stroke:#fb7185,color:#f4eff8;

    class ROUTER core;
    class PI,MACSERVER,FEDSERVER server;
    class MX,INTEL,MINT,SILICON,IPHONE workstation;
    class TARGET target;
Asset inventory

Complete device table

Known inventory for the shared lab network.

Ask ChatGPT about this lab

Enter a question about the network, devices, services or security posture. The query opens in ChatGPT in a new tab.

9 devices
Device IP address OS Role / services
Raspberry Pi 192.168.1.105 Raspberry Pi OS / Linux Utility node, lightweight server
fastigiata-macserver 192.168.1.116 macOS SSH, Samba / file sharing
fastigiata-fedserver 192.168.1.117 Fedora 44 VM, SSH, Samba, Ollama Phi 3.5
Unpatched Linux 192.168.1.111 Linux Vulnerable lab target
iPhone 192.168.1.103 iOS Wi-Fi client, 2FA, network admin checks
MX Linux Admin 192.168.1.130 MX Linux Network admin machine, LAN checks, SSH admin
Intel Mac Production 192.168.1.102 macOS VM cyber lab: Kali, LMDE and Fedora 44; Ollama Llama 3.2 3B, Ministral 3B and Phi 3.5; Obsidian RAG
MintBook Pro Production 192.168.1.123 Linux Mint Docker, Open WebUI, Ollama Llama 3.2 3B, Ministral 3B, Phi 3.5, Obsidian RAG, Kali VM and native cyber tooling
Silicon Mac Production 192.168.1.115 macOS / Apple Silicon AI lab, graphics workstation, native cyber tooling, Ollama Llama 3.2 3B, Ministral 3B, Gemma 4 12B MLX, Obsidian RAG and planned Kali ARM CLI
No matching devices.