CyraFlow Lab Network Topology demonstrates an isolated penetration testing environment where an AI pentest framework orchestrates attacks against intentionally vulnerable systems. The architecture connects a Kali Linux attacker VM (192.168.56.101) running CyraFlow with its ReAct engine, classifiers, and MCP manager to a Metasploitable 2 victim VM (192.168.56.102) via HexStrike MCP server, enabling automated reconnaissance and exploitation workflows. This host-only network segment isolates the lab from production infrastructure, allowing security teams to safely test AI-driven attack chains including nmap scanning, Metasploit RPC calls, credential scanning, and post-exploit techniques. Fork this diagram on Diagrams.so to customize your own AI pentest lab, integrate additional MCP servers, or adapt the topology for red team training scenarios. The stdio transport and credential scanner components highlight how CyraFlow bridges AI reasoning with traditional penetration testing tools.