Windows Server 2016 (FILE01) — vulnerable to MS17-010 - Windows Server 2019 (DC01) — domain controller - Ubuntu 20.04 (WEB01) — running a vulnerable web application - Kali Linux — attacker machine