Connect to the labs
Every student gets a personal WireGuard profile. It only routes lab traffic (10.20.0.0/16) through the tunnel, so your normal internet keeps working.
1. Download your config
Sign in, open Labs, and click Download .conf. The file is yours alone. Don't share it; each profile is tied to your account.
2. Bring the tunnel up
WireGuard is in the Kali repos. Install it once:
sudo apt update && sudo apt install -y wireguard resolvconf
Then from the folder where you saved the file (replace student.conf with your file name):
sudo wg-quick up ./student.conf
3. Check it's working
sudo wg show
You should see latest handshake: a few seconds ago. Then start a machine on the dashboard and ping its IP:
ping -c 3 <TARGET_IP>
4. Disconnect when done
sudo wg-quick down ./student.conf
Troubleshooting
- No handshake. Your network may block UDP 51820. Try another network or a phone hotspot.
- Handshake OK, but can't reach the target. Make sure the machine shows running with an IP on the dashboard. New machines take about a minute to boot.
resolvconf: command not found. Run sudo apt install -y resolvconf, or delete the DNS = line from your config.- Using a Kali VM? Run WireGuard inside the VM, with the VM on NAT networking.
- Lost your config? Download it again from the dashboard. It's the same profile.