HTB PROFESSIONAL LABS

Professional Labs Directory

Explore HTB’s collection of Professional Labs, discover what each scenario offers, and find the right ones to develop and assess your team's cybersecurity skills.

Beginner Professional Labs

Build foundational enterprise pentesting skills through hands-on exploitation of Active Directory, Windows/Linux systems, and common web vulnerabilities. Designed for beginner to intermediate penetration testers, these labs cover common attack vectors, privilege escalation, and pivoting techniques across realistic enterprise environments.

Dante lab avatar
HTB PRO LAB

Dante

DIFFICULTY Beginner
MACHINES 16
FLAGS 27
NETWORK TOPOLOGY LAB ENVIRONMENT
Dante lab network topology diagram
ABOUT THE LAB

Dante is a modern, yet beginner-friendly pro lab that provides the opportunity to learn common penetration testing techniques, and gain familiarity with tools included in the Parrot OS Linux distribution.

THE SCENARIO

Dante LLC has enlisted your services to audit their network. The company has not undergone a comprehensive penetration test in the past, and wants to reduce their technical debt. They are concerned that any actual breach could lead to a loss of earnings and reputation damage. Upon breaching the perimeter, you are required to explore the network, moving laterally and vertically, until you gain administrative control over all hosts and reach domain admin.

Prerequisites

  • ✓Buffer overflows
  • ✓Windows/Linux OS
  • ✓Penetration testing tools

Learning outcomes

  • ✓Enumeration
  • ✓Exploit modification
  • ✓Lateral movement
  • ✓Local privilege escalation
  • ✓Web application attacks
Genesis lab avatar
HTB PRO LAB

Genesis

DIFFICULTY Beginner
MACHINES 14
FLAGS 31
NETWORK TOPOLOGY LAB ENVIRONMENT
Genesis lab network topology diagram
ABOUT THE LAB

Genesis is an ideal first lab that features a wide-range of OWASP Top 10 vulnerabilities, common privilege escalation techniques, and real-world security misconfigurations.

THE SCENARIO

Genesis LLC is a start-up Cyber Security company. Prior to using their services, a potential client has asked for an internal pentest report of the Genesis network, as part of their due diligence. Genesis has tasked you with assessing the security of their internal infrastructure and creating a pentest report. They have asked you to assess the 10.10.110.0/24 range first, before moving on to any network beyond...

Prerequisites

  • ✓Windows/Linux OS
  • ✓Penetration testing tools

Learning outcomes

  • ✓Enumeration
  • ✓Exploit modification
  • ✓Lateral movement
  • ✓Local privilege escalation
  • ✓Mitigation & best practices
  • ✓Web application attacks
Trusted lab avatar
HTB MINI PRO LAB

Trusted

DIFFICULTY Beginner
MACHINES 2
FLAGS 2
NETWORK TOPOLOGY LAB ENVIRONMENT
Trusted lab network topology diagram
ABOUT THE LAB

Trusted is a small AD environment simulating an internal network assessment of a fictional organisation, Trusted Inc. You begin with access to the internal network but without any credentials, and are required to evaluate the security posture of the AD environment by identifying and exploiting potential attack paths.

THE SCENARIO

You are tasked with performing a red team engagement on Trusted Inc. You are provided access to the internal network with no credentials, and your goal is to assess the security posture of the AD environment.

Prerequisites

  • ✓Penetration testing methods
  • ✓AD
  • ✓Web vulnerabilities knowledge

Learning outcomes

  • ✓Web application attacks
  • ✓AD enumeration and attacks
  • ✓DLL Hijacking
  • ✓Abusing AD trusts
  • ✓Lateral movement
  • ✓Local privilege escalation
Orion lab avatar
HTB MINI PRO LAB

Orion

DIFFICULTY Beginner
MACHINES 5
FLAGS 6
NETWORK TOPOLOGY LAB ENVIRONMENT
Orion lab network topology diagram
ABOUT THE LAB

Orion is a condensed beginner-oriented scenario that introduces techniques relevant to tackling more complex infrastructure-simulated scenarios. As a gateway to larger entry-level scenarios (e.g. Genesis, Dante), Orion offers the practical foundations for teams to improve technical onboarding and become familiar with tools and techniques in Enumeration, Lateral Movement, Pivoting, Active Directory, Privilege Escalation, and other integral areas.

THE SCENARIO

Orion Ltd is a small enterprise looking to strengthen its security posture, and has tasked you with assessing its network perimeter and internal infrastructure by running a full penetration test. The goal of this challenging lab is to gain a foothold, elevate privileges, and move laterally, in order to reach the goal of domain admin.

Prerequisites

  • ✓Windows/Linux OS
  • ✓Penetration testing tools
  • ✓Networking

Learning outcomes

  • ✓Enumeration
  • ✓Public exploit research
  • ✓Lateral movement
  • ✓Privilege escalation
  • ✓Pivoting
  • ✓Active Directory
P.O.O. lab avatar
HTB MINI PRO LAB

P.O.O.

DIFFICULTY Beginner
MACHINES 2
FLAGS 5
NETWORK TOPOLOGY LAB ENVIRONMENT
P.O.O. lab network topology diagram
ABOUT THE LAB

P.O.O., is designed to put your skills in enumeration, lateral movement, and privilege escalation to the test within a small AD environment configured with the latest and greatest operating systems and technologies. The goal is to compromise the perimeter host, escalate privileges and ultimately compromise the domain.

THE SCENARIO

Professional Offensive Operations is a rising name in the cyber security world. Lately, they’ve been working on migrating core services and components to a state-of-the-art cluster that offers cutting-edge software and hardware.

Prerequisites

  • ✓Windows/Linux OS
  • ✓Penetration testing tools
  • ✓Web application attacks
  • ✓Active Directory

Learning outcomes

  • ✓Enumeration
  • ✓AD enumeration & attacks
  • ✓Lateral movement
  • ✓Local privilege escalation
  • ✓Web application enumeration & attacks