Vulnlab
@vulnlab_eu
Followers
4,463
Following
1,310
Media
62
Statuses
126
Labs & Training by @xct_de | | You are welcome to join the community @
EU
Joined September 2021
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
الرائد
• 292734 Tweets
Marçal
• 161140 Tweets
Beyoncé
• 122572 Tweets
sabrina
• 111581 Tweets
Bush
• 99282 Tweets
Barron
• 95750 Tweets
Ann Coulter
• 91060 Tweets
#النصر_الرايد
• 88219 Tweets
Boulos
• 77366 Tweets
MUERO X DECÍRTELO OUT NOW
• 58291 Tweets
#DNCConvention2024
• 55031 Tweets
#كاريزما47
• 40181 Tweets
shawn
• 35913 Tweets
Ken Salazar
• 28143 Tweets
The Chicks
• 27320 Tweets
Mike Pence
• 26984 Tweets
#ShortNSweet
• 24045 Tweets
Dinesh
• 21537 Tweets
ラストマイル
• 20943 Tweets
Elizabeth Warren
• 19642 Tweets
Mundial de Clubes
• 17931 Tweets
対象の3作品
• 15770 Tweets
Belgrano
• 14533 Tweets
Calleri
• 14495 Tweets
甲子園決勝
• 14016 Tweets
Morumbi
• 11867 Tweets
Colts
• 11452 Tweets
VAMOS FLAMENGO
• 11160 Tweets
Izquierdo
• 10158 Tweets
Bobadilla
• 10141 Tweets
Vulnlab just released a new Active Directory lab called Wutai!
Like Shinra, it’s a simulated corporate environment with about 15 machines spread across multiple networks, domains & forests. The lab focuses on exploiting misconfigurations & users - not CVEs.
10
158
563
A new Red Team Lab, Shiva, is coming to Vulnlab next week! This time you get to test a hardened Hybrid-AD environment that involves:
- Hybrid-AD with 10+ machines & active users
- Cloud exploitation
- SIEM, EDR on Clients & Servers
- Common enterprise software
- No CVEs
3
111
511
Another Active Directory Chain by
@xct_de
is getting released on Thursday! This one is rated easy and once again inspired by a real pentest.
2
31
224
Hey Vulnlab Community!
Just taking a moment to reflect on how far we've come together. It's been about a year since Vulnlab first launched, and now we've got around 100 vulnerable machines spread across 50 labs, 2300 Discord members and more than 700 lab users!
The main focus
7
30
176
The next Red Team Lab on Vulnlab will be released on August 8, 2024. This lab features over 10 machines and is rated Easy. The Active Directory environment mirrors what you typically encounter in penetration tests and is complemented by a robust SOC.
3
40
175
Prepare your debugger and expect to see some blue screens - Reaper is coming to Vulnlab this week!
2
17
157
An Active Directory Chain by
@snowscan
is arriving on Vulnlab this week! This one is rated "Insane" and completing it will teach some new tricks that you can use on your next engagement 🐛
0
27
137
Fresh Active Directory content is coming to Vulnlab this week! Don't miss "Phantom" by
@_ar0x4
, launching tomorrow!
1
20
135
A new Active Directory machine is coming to Vulnlab on Thursday👀. This one is suited for the beginner to intermediate level and involves some nice concepts we didn't cover before!
2
17
118
A new beginner-friendly machine by
@Fumenoid
will be coming to the lab this week! Once again inspired by a real pentest!
0
13
115
Great walkthrough by
@macz01590714
and
@k0zmer
on Reaper, a Windows binary exploitation focused machine on Vulnlab. It involves x64 userland exploitation (ASLR & DEP) and a kernel exploit targeting a custom driver.
0
33
109
🚨 Kaiju Invasion in the lab! Get ready to face a medium-difficulty Active Directory chain this week. This one is once again inspired by a real engagement and involves 3 machines.
1
23
106
Just in time for
@offensive_con
Reaper2 will be released on Vulnlab! This one is rated "Insane" and features both browser & kernel exploitation on Windows. First🩸will get a lab voucher!
3
15
106
Happy New Year everyone and big thanks for all your support!
We’re kicking off the new year with a medium-level Active Directory chain by
@k0zmer
. This one's packed with the kind of software and configurations you'd bump into in enterprise networks.
2
12
100
A new AD chain by
@_ar0x4
is coming to Vulnlab on Monday 🔥 This one has both Linux & Windows machines and involves a pretty unique attack vector.
2
13
101
A new Active Directory machine by
@0xr0BIT
is coming to the lab this week! Retro is a beginner friendly machine that teaches something you can use on real engagements.
4
14
97
New video by
@snowscan
on Klendathu! In this one you'll learn about a lesser known method of coercing authentication from MSSQL, Mixed Vendor Kerberos Stacks & Domain Backup Keys!
4
25
98
New windows machine coming soon! Job2 will be released next Tuesday at 17:00 UTC.
1
10
94
Intercept by
@xct_de
is coming to the lab next Thursday! It’s rated hard and involves some AD concepts that are useful in real engagements but not often seen in labs. This puts the lab at over 50 machines!
2
19
93
Intercept is a Windows AD chain that involves a RBCD workstation takeover and attacking ADCS.
0
17
92
We just published the video walkthrough on Retro by
@0xr0BIT
! Retro is one of the more beginner-friendly AD machines on Vulnlab - you'll learn about Pre-Created Computer Accounts & ADCS.
1
13
83
A new AD chain is coming to Vulnlab tomorrow! Tengu by
@0xr0BIT
is a 3-machine chain with both Windows & Linux machines. It contains parts of a real-life assessment.
0
9
82
A new Active Directory chain is coming to Vulnlab this week! Heron will be released on June 13th - just in time for
@x33fcon
! If you manage to solve it during the conference, swing by the
@MantodeaSec
booth for some swag.
0
14
79
We're welcoming Sendai, a new Active Directory machine, to the lab this week! This one got multiple paths to explore. Think you can exploit them all? Let's find out!
0
11
79
Great walkthrough by
@secure_sec77
on one of our Windows lab machines. This one involves DLL Hijacking & Kerberos Relaying:
0
23
78
A new machine is coming to Vulnlab this week! Sweep is a medium-rated Active Directory machine by
@Yeeb_
that covers an interesting real-life attack vector.
3
13
78
Check out this video on Baby2 if you want to learn about Logon Scripts, WriteDACL, Shadow Credentials & GPOs.
1
16
77
Next up is an Active Directory Chain by
@Geiseric4
! Definitely worth diving into if you're up for a challenge!
0
16
76
New linux machine coming up! Bamboo will be released next Tuesday at 17:00 UTC.
9
13
75
This week it’s time for a beginner friendly machine - Forgotten is coming to Vulnlab tomorrow!
1
15
72
Time to escape🍹A new beginner-friendly machine will be arriving in the lab this week! This one requires some creative thinking & will test your language skills.
0
14
73
Control by
@ATeamJKR
is getting released on Thursday - this is the first full linux chain on Vulnlab!
1
6
72
It’s time for a new Linux machine - Race will be released tomorrow! Thank you
@ATeamJKR
for creating the machine!
0
10
67
A new video is out! Finding a way around WDAC, Lateral Movement via Pass-the-Cache & exploiting Visual Studio Code.
1
25
69
Reflection involves MSSQL, relaying, dumping credentials & exploiting ACL misconfigurations.
0
13
65
A brand-new machine is coming to Vulnlab tomorrow! Watcher, created by
@Dark___CaT
and whatev3n, is a medium-difficulty Linux machine that combines recent vulnerabilities with a nice red teaming perspective.
0
16
65
In this week's video, we are exploiting ADCS (ESC4) to become Domain Admin!
0
18
62
A new machine is coming to the lab this week🎉Media by
@csenox1
is getting released on Thursday and will teach some nice Windows tricks.
0
11
62
New ⛓️ hitting the lab tomorrow! This one consists of 3 machines and is pure Linux. Thank you
@_kavigihan
for creating it!
1
3
59
Thanks to all the
@vulnlab_eu
machine & challenge creators 💙
@secure_sec77
@ATeamJKR
@macz01590714
@k0zmer
@Geiseric4
@csenox1
@0xr0BIT
VL is open for community submissions! If you want to contribute, reach out to
@xct_de
on discord.
1
8
58
That was a really fun CTF - thank you everyone for playing &
@hackthebox_eu
for organizing! Congrats to
@Synacktiv
&
@gmo_ierae
!
📣 Give it up to the brave ones who made it to the vault of hope 📣
#BusinessCTF24
has come to an end, and these are its champions:
🥇
@Synacktiv
🥈 GMO Cybersecurity by IERAE
🥉
@vulnlab_eu
Thank you, everyone, for participating in the epic
#CTF
, and of course, stay tuned for
0
5
53
0
1
57
Both parts of the video walkthroughs for Kaiju are now out! Check them out if you want to learn about Filezilla, KeePass Plugins, Port Bending & ESC8!
Thanks to
@0xr0BIT
for recording the 2nd part!
0
9
53
It’s been a while since the last Linux machine so here we go - Slonik will be released on Thursday! This is the last machine before something “big” hits the lab soon :)
0
7
53
The walkthrough is now up! This one features Gitea Access Tokens, mRemoteNG & a nice vulnerability in PDF24 found by
@sec_consult
.
0
8
50
Together with Reaper2, we'll release a beginner-friendly box next week as well! Build is an "Easy" Linux machine that dives into CI/CD topics & legacy protocols seen again and again in production networks.
0
14
48
Atlas by
@secure_sec77
is coming to Vulnlab on Thursday - prepare some ☕️ and join the action!
0
10
46
The journey continues.. We are looting stored browser passwords and then get access to an ESXi server. This allows us to hop onto a Bitwarden server where we backdoor the login page to get even more credentials.
0
5
46
Next Wutai Video is up! We are reversing a small Windows binary to obtain a password and are using it to access ManageEngine. This then allows us to move laterally to a client machine.
0
7
44
And the last video on Wutai is out. We loot secrets from DPAPI and are then getting DA via Shadow Credentials. Like with Shinra, I won't show the rest of the lab so there is something left to explore on your own.
0
5
43
If you are stuck on the user part of the latest Vulnlab machine, check out this video by
@_JohnHammond
on escaping kiosk mode, especially the last part:
0
5
42
The video on Escape is up - this one involves escaping the Windows Kiosk, encrypted credentials & UAC.
0
8
39
Big congrats to...
@macz01590714
@szymex73
@Jester_Hacks
@CarlNykvist
@Sh4NaC1
@k0zmer
...for being the first ones to complete the Shinra Lab by obtaining all 12 flags 🎉
1
3
38
Another video on Shinra is out! We bypass WDAC by signing our beacon, do some basic .NET Reversing, and then escalate privileges via File Redirection.
0
7
37
In the latest video, we explore another path to DA in the initial domain using constrained & resource-based constrained delegation.
0
7
35
We just hit 1000 users on the Discord server - thank you everyone! 🎉
1
1
34
Check out part 5 of the Shinra series! We backdoor an npm package to get a shell on a developer machine and then escalate privileges.
0
7
28
The next video on Wutai is out - this time, we get DA in one domain & then find a way to get a foothold in the second one.
0
1
25
Great walkthrough by
@k0zmer
! Push brings SCCM and ClickOnce applications to the lab.
Push is a chain playable
@vulnlab_eu
made by myself and
@xct_de
, which focuses on initial access & exploiting common enterprise software.
Walkthrough available here:
3
11
45
0
3
24
Updated the website to show some more details & a short intro video on how the labs work.
2
2
23
There will be once again videos on big parts of the lab after it has been solved and some time has passed.
1
0
22
New machine "Dump" is going live today! Thank you
@ATeamJKR
for creating this machine for Vulnlab! This is already the second jkr box on the platform 🍾
0
1
20
Retro2 is making its way to the lab this Thursday! This Active Directory machine promises to be an easy yet nostalgic challenge that might stir up some memories.
1
16
93
What kind of content and labs do you want to see next? Please comment for other suggestions :)
Active Directory Chains
53
Large Red Team Labs
73
Linux Kernel Exploitation
18
Win Kernel Exploitation
24
4
2
12
0
1
11
Check out the
@MantodeaSec
booth at
@brucon
for a lab voucher! If you solve any machine before the conference ends you'll get a hoodie :)
1
0
8
0
2
8
1
0
6
@Geiseric4
And the 🩸 goes to
@toonii_14
and
@ATeamJKR
. Good job! Thank you
@Geiseric4
for creating the box!
0
1
4
@m4lici0u5
@MarcOverIP
@AlteredSecurity
@zeropointsecltd
@SEKTOR7net
@MalDevAcademy
@mrgretzky
@mariuszbit
Thank you
@m4lici0u5
:) I can also recommend the Entra ID Training by
@_dirkjan
0
0
3
0
0
1