all domains
Internal / AD Pentest
Enumerate, kerberoast, harvest hashes, pivot DC → DA. The bread-and-butter of internal engagements.
0/16 modules · 0/4 levels complete · 0%
1
AD Recon & Enumeration
beginnerMap the domain. Who's a Domain Admin? Which boxes have SMB-null? Which service accounts use RC4?
quizlablabctf
0/4 done · 0%start
locked2
Hash Harvesting & Kerberos
intermediateKerberoast, AS-REProast, NTLM relay, crack offline against `rockyou`.
lablablabquiz
0/4 done · 0%
locked3
Lateral Movement & Privilege Escalation
advancedPass-the-hash, DCSync, AdminSDHolder abuse, ACL-based privesc.
lablablabctf
0/4 done · 0%
locked4
Persistence, Defense Evasion & Red Team
expertGolden tickets, certificate forgery (ESC1-ESC11), shadow credentials, EDR evasion.
lablablabquiz
0/4 done · 0%
Sign in to track your progress and unlock certificates.
sign in