Cloudflare Pages
This site is a static Next.js export at thelab.wofford.dev — fast to serve and safe for public browsing. No Domain Controllers on the edge.
Runtime
Built to browse publicly. Built to attack privately.
Professionals can explore the sample scenario and walk-through on Cloudflare. The live forest stays on self-hosted compute — adaptable without a surprise cloud bill.
Split responsibility
Cloudflare where it fits. Local compute where it must.
Self-hosted workstation
Windows AD fidelity and containers run on hardware you control. Cost stays local compute time, not always-on cloud Windows VMs.
Tunnel + Access (required)
Live demonstrations publish a private origin through Cloudflare Tunnel and must enforce Access allowlists — never an open DC on the internet.
Theme · topology · vuln packs
Tenant identity (domains, users, sites) is data. The sample MCU overlay is swappable — OS profiles and vuln packs compose without rewriting providers.
Status
Demo site live · Lab runtime self-hosted
v1 ships the adaptable lab demonstration you are reading, with an MCU-themed tenant for directory memorability. Lab VM automation and easy OS/theme swaps are the next build phase.
Links