Vulnlab just released a new Active Directory lab called Wutai!
Like Shinra, it’s a simulated corporate environment with about 15 machines spread across multiple networks, domains & forests. The lab focuses on exploiting misconfigurations & users - not CVEs.
A new Red Team Lab, Shiva, is coming to Vulnlab next week! This time you get to test a hardened Hybrid-AD environment that involves:
- Hybrid-AD with 10+ machines & active users
- Cloud exploitation
- SIEM, EDR on Clients & Servers
- Common enterprise software
- No CVEs
Hey Vulnlab Community!
Just taking a moment to reflect on how far we've come together. It's been about a year since Vulnlab first launched, and now we've got around 100 vulnerable machines spread across 50 labs, 2300 Discord members and more than 700 lab users!
The main focus
The next Red Team Lab on Vulnlab will be released on August 8, 2024. This lab features over 10 machines and is rated Easy. The Active Directory environment mirrors what you typically encounter in penetration tests and is complemented by a robust SOC.
An Active Directory Chain by
@snowscan
is arriving on Vulnlab this week! This one is rated "Insane" and completing it will teach some new tricks that you can use on your next engagement 🐛
A new Active Directory machine is coming to Vulnlab on Thursday👀. This one is suited for the beginner to intermediate level and involves some nice concepts we didn't cover before!
Great walkthrough by
@macz01590714
and
@k0zmer
on Reaper, a Windows binary exploitation focused machine on Vulnlab. It involves x64 userland exploitation (ASLR & DEP) and a kernel exploit targeting a custom driver.
🚨 Kaiju Invasion in the lab! Get ready to face a medium-difficulty Active Directory chain this week. This one is once again inspired by a real engagement and involves 3 machines.
Just in time for
@offensive_con
Reaper2 will be released on Vulnlab! This one is rated "Insane" and features both browser & kernel exploitation on Windows. First🩸will get a lab voucher!
Happy New Year everyone and big thanks for all your support!
We’re kicking off the new year with a medium-level Active Directory chain by
@k0zmer
. This one's packed with the kind of software and configurations you'd bump into in enterprise networks.
A new Active Directory machine by
@0xr0BIT
is coming to the lab this week! Retro is a beginner friendly machine that teaches something you can use on real engagements.
New video by
@snowscan
on Klendathu! In this one you'll learn about a lesser known method of coercing authentication from MSSQL, Mixed Vendor Kerberos Stacks & Domain Backup Keys!
A new machine is coming to Vulnlab this week! Lock by
@k0zmer
&
@xct_de
is a beginner-friendly windows machine that covers some topics we saw on recent engagements.
Intercept by
@xct_de
is coming to the lab next Thursday! It’s rated hard and involves some AD concepts that are useful in real engagements but not often seen in labs. This puts the lab at over 50 machines!
Push by
@k0zmer
&
@xct_de
is coming to Vulnlab on Thursday! This Active Directory chain focuses on initial access & exploiting common enterprise software.
We just published the video walkthrough on Retro by
@0xr0BIT
! Retro is one of the more beginner-friendly AD machines on Vulnlab - you'll learn about Pre-Created Computer Accounts & ADCS.
A new AD chain is coming to Vulnlab tomorrow! Tengu by
@0xr0BIT
is a 3-machine chain with both Windows & Linux machines. It contains parts of a real-life assessment.
A new Active Directory chain is coming to Vulnlab this week! Heron will be released on June 13th - just in time for
@x33fcon
! If you manage to solve it during the conference, swing by the
@MantodeaSec
booth for some swag.
We're welcoming Sendai, a new Active Directory machine, to the lab this week! This one got multiple paths to explore. Think you can exploit them all? Let's find out!
A new machine is coming to Vulnlab this week! Sweep is a medium-rated Active Directory machine by
@Yeeb_
that covers an interesting real-life attack vector.
Time to escape🍹A new beginner-friendly machine will be arriving in the lab this week! This one requires some creative thinking & will test your language skills.
A brand-new machine is coming to Vulnlab tomorrow! Watcher, created by
@Dark___CaT
and whatev3n, is a medium-difficulty Linux machine that combines recent vulnerabilities with a nice red teaming perspective.
📣 Give it up to the brave ones who made it to the vault of hope 📣
#BusinessCTF24
has come to an end, and these are its champions:
🥇
@Synacktiv
🥈 GMO Cybersecurity by IERAE
🥉
@vulnlab_eu
Thank you, everyone, for participating in the epic
#CTF
, and of course, stay tuned for
Both parts of the video walkthroughs for Kaiju are now out! Check them out if you want to learn about Filezilla, KeePass Plugins, Port Bending & ESC8!
Thanks to
@0xr0BIT
for recording the 2nd part!
It’s been a while since the last Linux machine so here we go - Slonik will be released on Thursday! This is the last machine before something “big” hits the lab soon :)
A new machine is coming to Vulnlab this week! Lock by
@k0zmer
&
@xct_de
is a beginner-friendly windows machine that covers some topics we saw on recent engagements.
Together with Reaper2, we'll release a beginner-friendly box next week as well! Build is an "Easy" Linux machine that dives into CI/CD topics & legacy protocols seen again and again in production networks.
The journey continues.. We are looting stored browser passwords and then get access to an ESXi server. This allows us to hop onto a Bitwarden server where we backdoor the login page to get even more credentials.
Next Wutai Video is up! We are reversing a small Windows binary to obtain a password and are using it to access ManageEngine. This then allows us to move laterally to a client machine.
And the last video on Wutai is out. We loot secrets from DPAPI and are then getting DA via Shadow Credentials. Like with Shinra, I won't show the rest of the lab so there is something left to explore on your own.
If you are stuck on the user part of the latest Vulnlab machine, check out this video by
@_JohnHammond
on escaping kiosk mode, especially the last part:
A new AD chain is coming to Vulnlab tomorrow! Tengu by
@0xr0BIT
is a 3-machine chain with both Windows & Linux machines. It contains parts of a real-life assessment.
Push is a chain playable
@vulnlab_eu
made by myself and
@xct_de
, which focuses on initial access & exploiting common enterprise software.
Walkthrough available here:
New machine "Dump" is going live today! Thank you
@ATeamJKR
for creating this machine for Vulnlab! This is already the second jkr box on the platform 🍾
Retro2 is making its way to the lab this Thursday! This Active Directory machine promises to be an easy yet nostalgic challenge that might stir up some memories.