For this lab, you’ll need:

• Kali Linux
• A Victim/Target VM running Windows 10 or 11
  • FYI: This lab was tested using Windows 11. (Windows 10 will most likely work.)
• You’ll want Caldera up and running.

Lab Objective:

• We’ll use Caldera to:
  • Upload a scary webpage to the Victim/Target Windows VM
  • We’ll encrypt a sensitive text file on the Victim/Target Windows VM using GPG4Win
  • We’ll delete the plaintext, leaving only the encrypted version.
  • We’ll display the scary webpage to the end user.

If you have your Caldera machine from the previous lab, you should be able to keep using it.

Fresh Caldera Install Directions can be found on the page below.

Install Caldera on Kali (2025)

Log in to Caldera.

• username: red
• password: admin

Step 1: Disable Windows Defender within Group Policy on the Victim Machine.

• We’ll deliberately create a vulnerable target environment (no antivirus) for this lab.

Follow the directions below on your target/victim Windows VM

Disable Windows Defender via Group Policy

Disable the Windows Firewall

Disable User Account Control