HTB PROFESSIONAL LABS

Professional Labs Directory

Explore HTB’s collection of Professional Labs, discover what each scenario offers, and find the right ones to develop and assess your team's cybersecurity skills.

Insane Professional Labs

These labs are the ultimate challenge for experienced penetration testers, featuring advanced Active Directory attacks, sophisticated lateral movement, persistence, and post-exploitation techniques. Set in highly security-mature enterprise environments, it demands expert-level red team tradecraft, custom exploitation, and abuse of advanced infrastructure such as SCCM, SCOM, and PKI.

Klendathu lab avatar
HTB MINI PRO LAB

Klendathu

DIFFICULTY Insane
MACHINES 3
FLAGS 3
NETWORK TOPOLOGY LAB ENVIRONMENT
Klendathu lab network topology diagram
ABOUT THE LAB

Klendathu simulates a hybrid enterprise infrastructure spanning Windows and Linux systems. The goal is to compromise the domain from an unauthenticated starting point by discovering sensitive information and abusing a range of Active Directory and credential-based misconfigurations.

THE SCENARIO

You are tasked with performing a penetration test on Klendathu, involving a mixed Active Directory environment.

Prerequisites

  • ✓Penetration testing methods
  • ✓AD
  • ✓C2

Learning outcomes

  • ✓Enumeration
  • ✓AD enumeration and attacks
  • ✓Mixed Kerberos Stacks
  • ✓Lateral movement
  • ✓Local privilege escalation
APTLabs lab avatar
HTB PRO LAB

APTLabs

DIFFICULTY Insane
MACHINES 18
FLAGS 20
NETWORK TOPOLOGY LAB ENVIRONMENT
APTLabs lab network topology diagram
ABOUT THE LAB

APTLabs is designed to replicate a real-life attack against a managed service provider and their clients. Elements include Active Directory, Windows and enterprise solutions. All domains are segregated into multiple subnets.

THE SCENARIO

APTLabs simulates a targeted attack by an external threat agent against an MSP (Managed Service Provider). The environment consists of fully patched servers, prevalent enterprise technologies, a simulated WAN network, and much more! Your goal is to compromise all five Forests and reach Domain Admin in every single one of them.

Prerequisites

  • ✓Windows OS & AD
  • ✓Network attacks
  • ✓Modern tools and techniques used to perform penetration testing in enterprise environments

Learning outcomes

  • ✓AD enumeration and exploitation
  • ✓Ability to compromise network without using any CVEs
  • ✓Bypassing common security features such as 2FA
  • ✓Evading endpoint protections
  • ✓Exploiting interactive users
  • ✓Lateral movement
  • ✓Local privilege escalation