Professional Labs Directory

Cybernetics is designed to simulate a real-life corporate environment, based heavily on Microsoft Windows systems. Elements include Active Directory (with a Server 2016 functional domain level), Exchange, Internet Information Services, and SQL Server. Machines are also segregated across multiple subnets.

Cybernetics have gone through multiple pentest engagements, iteratively hardening their environment each time, and therefore have a more mature security posture. Many protection technologies are present and the modern operating systems are fully updated. The goal of this challenging lab is to gain a foothold, elevate privileges, establish persistence and move laterally, in order to reach the goal of domain admin.

Breakpoint is a red team simulation environment, designed to be attacked as a means of learning and honing your engagement skills.

Breakpoint focuses on a software development startup, who take security seriously. They have enlisted your services to perform a red team assessment of their environment. The goal of this challenging lab is to gain a foothold, elevate privileges, establish persistence and move laterally, in order to reach the goal of domain admin.

Mythical simulates an assumed-breach scenario within a restricted AD environment. You begin with an active Mythic command and control (C2) beacon on an internal system and must navigate the network despite external network egress being blocked. The goal is to exploit trust relationships, abuse Active Directory Certificate Services (AD CS), and leverage Microsoft SQL Server (MSSQL) to escalate privileges and ultimately achieve full domain compromise.

You are tasked with performing a red team engagement on Mythical Inc. The company does not allow data to leave the internal network, so a C2 server has been set up internally, and an employee executed a payload in order to simulate a successful social engineering attack.

Vigilant is an advanced-level AD attack chain designed to evaluate penetration testing capabilities in hybrid Windows-Linux environments. The goal is to compromise the domain from a position of no initial access by systematically enumerating the environment, escalating privileges, and ultimately obtaining Domain Administrator access.

This penetration testing engagement simulates a comprehensive security assessment of Vigilant’s hybrid Active Directory infrastructure. The environment consists of a domain-joined Linux system and a Windows Domain Controller, presenting a realistic enterprise attack surface.

Argon simulates a challenging AD environment that combines traditional enterprise infrastructure with maritime operational technologies. The goal is to assess both the external and internal networks of Argon, a global maritime cargo and vessel transportation company, explore the environment, pivot across trust boundaries, and evaluate the security of both its enterprise and maritime operational infrastructure.

Argon is a global maritime cargo and vessel transportation company responsible for managing overseas shipping routes, port operations, and fleet logistics. As the organisation expanded, its infrastructure evolved into a hybrid environment combining AD based corporate systems with vessel tracking platforms and operational services used across international waters. The environment includes interconnected domains with trust relationships between shore offices and production systems, alongside web applications for cargo management and maritime coordination. You have been assigned to assess both the external and internal networks of Argon, explore the environment, pivot across trust boundaries, and evaluate the security of its enterprise and maritime operational infrastructure.

Hades is designed to test your skills in AD enumeration, lateral movement, and privilege escalation within a small enterprise network. The goal is to gain a foothold on the internal network, escalate privileges, and ultimately compromise the domain, collecting several flags along the way.

Gigantic Hosting is a leading website hosting and SSL certificate provider. Concerned about potential breaches, they have hired a penetration testing firm to assess their security.

RPG is designed to test your skills in Active Directory enumeration, lateral movement, and privilege escalation within a small enterprise network. The goal is to gain a foothold, escalate privileges, and compromise the domain while collecting several flags along the way.

Roundsoft, Inc., a startup developing video games, has hired a penetration testing firm to determine whether their perimeter can be breached, leading to a compromise of their domain.

Solar is designed to test your skills in enumeration, code review, pivoting, and web exploitation. The goal is to gain a foothold on the internal network, escalate privileges, and compromise the entire infrastructure while collecting several flags along the way.

SolarSystem Space Prospection, an innovative company focusing on space exploration, wants you to assess the security of their Earth-based infrastructure.

Ascension tests your skills in enumeration, exploitation, pivoting, forest traversal, and privilege escalation in two small AD networks. The goal of this scenario is to gain access to the trusted partner, pivot through the network, and compromise two AD forests.

Daedalus Airlines is quickly becoming a major player in global aviation! However, the pace of growth has meant that the company has accumulated a lot of technical debt. To avoid a data breach, Daedalus has hired your cybersecurity firm to test its systems.

Odyssey is designed to test your skills in enumeration, reverse engineering, VoIP exploitation, and more. The goal is to gain a foothold on the internal network, escalate privileges, and compromise the gaming infrastructure while collecting several flags along the way.

Odyssey Gaming is a fast-growing startup that has hired you to perform penetration testing on their infrastructure to safeguard against external threats.

Kaiju is a simulation set within a self-contained Active Directory environment. The goal is to gain an initial foothold by discovering and exploiting a series of service misconfigurations and ultimately achieving full domain compromise.

You are tasked with performing a red team engagement on Kaiju Inc. Your goal is to assess the security posture of the environment by attempting to gain access to the internal network and escalate privileges within the domain.

Push is a compact AD lab consisting of a single domain controller and one member server. The scenario focuses on advanced attack techniques, including ClickOnce application exploitation, Microsoft Configuration Manager (SCCM) coercion, and Active Directory Certificate Services (AD CS) abuse leading to Golden Certificate attacks.

You are tasked with performing a penetration test on Push, a small Windows AD environment. You will be required to exploit real-world applications and chain attack techniques using common services and management applications found in enterprise environments.

Sidecar is a compact AD environment comprising two Windows systems. Despite its small size, the scenario is intended for practitioners with prior Active Directory penetration testing experience, as it requires a solid understanding of enumeration, privilege escalation, and attack path identification.

You are tasked with performing a penetration test on Sidecar, involving a Windows-only Active Directory environment.

Control simulates a compact Linux-based environment that focuses on realistic post-exploitation techniques. The goal is to progress from an initial foothold to full root access across multiple hosts by exploiting web applications, abusing OSCTRL and osquery management tooling, and leveraging operational misconfigurations.

You are tasked with performing a penetration test on Control, a small multi-host Linux environment that simulates a realistic internal network and endpoint-management infrastructure. The lab contains two primary hosts ((os.control.vl and intra.control.vl) and a variety of services (web apps, OSCTRL/osquery, SSH, nginx, Docker) that chain together to a full domain compromise.

Intercept simulates a Windows-based enterprise environment containing a range of common AD vulnerabilities and misconfigurations. The goal is to compromise the domain from an unauthenticated starting point by performing thorough enumeration, exploiting authentication weaknesses, and abusing certificate services to achieve full domain administrator access.

You are tasked with performing a red team engagement on Intercept involving a Windows only AD environment.