Red Team Operator — Active Directory
Own the domain. Kerberoast, relay, and DCSync your way to Domain Admin.
About this exam
An advanced red-team credential focused on Windows Active Directory. Enumerate the domain, abuse Kerberos, relay authentication, and pull secrets straight from the DC. For operators who live in enterprise networks.
Skills verified
How the exam works
- 1Start when you're ready
The clock starts the moment you begin and keeps running even if you close the tab — there's no pause.
- 2Capture 5 of 6 labs
Open each lab, exploit it, and submit the flag it gives you. Solve any 5 within the 5-hour limit to pass.
- 3Proctored for integrity
Leaving the exam tab is recorded and factored into an integrity score printed on your credential — the pass has to mean something.
- 4Earn a verifiable credential
Pass and we mint a signed credential with a public verify page and a shareable certificate — provable, not self-reported. Plus +800 XP.
- 5Miss it? Cooldown, then retry
If you don't reach the threshold, a short cooldown applies before you can retake — so the credential stays meaningful.
Exam labs (6)
Solve any 5 of these 6 to pass. Once you start, the clock runs even if you close the tab.