PRO LABS
Train on real enterprise
infrastructures.
Simulate real-world cyber attackers’ TTPs to assess an
organization’s security posture. Become a skillful Red Teamer!
What are pro labs
Modern, hardened Operating Systems.
Pro Labs are premium training labs designed to
provide an accurate adversary
simulation against
challenging, and sometimes fully patched,
enterprise technologies.
Realistic
Created by seasoned industry practitioners, these labs
simulate real corporate environments and the skills
learned here are directly applicable to real-life
engagements.
Advanced
Advanced enterprise infrastructure that cannot be
replicated on a single machine. Sharpen your offensive tradecraft and
gain experience with the latest TTPs.
Simulated
Even if the network is secure, the human firewall is still the weakest
link. Leveraging interactive users will help you move laterally and vertically,
and get domain admin… Like in the real world!
Complex
Breach the perimeter, gain a foothold in the enterprise, and pivot through
multiple machines and networks to achieve the mission objectives. Prepare
for a masterclass in pivoting and lateral movement.
Discover what Red Teaming
means...in action!
penetration testing.
penetration testing.
Learn all the skills required to become a professional Red Team Operator. You will learn to conduct a Red Team engagement and challenge the defense capability of an advanced infrastructure.
enumeration &
exploitation.
enumeration &
exploitation.
All scenarios are focused on Active Directory, service for Windows network environments used by an estimated 95% of all Fortune 500 companies
simulation: Assess,
gain, pivot.
simulation: Assess,
gain, pivot.
Simulate a potential adversary attack! Learn how a Red Team professional would need to react to a real-world problem within a real company assessment.
Stop guessing, get prepared: discover the right labs to practice before taking a Pro Lab using the Academy x HTB Labs feature or completing the introductory Tracks.
Aside from the advanced practical skills that you will obtain, there is also a certificate of completion waiting for you at the end of each Pro Lab, granting 40 CPE credits.
Lab Rotation
Change scenarios,
unlock new skills.
Access all Pro Labs with a single
subscription and switch scenarios
at any moment!
Certificate of completion.
Aside from the advanced practical skills that you will obtain,
there is also a certificate of completion waiting for you at the
end of each Pro Lab.
Along with your certificate, successful Pro Lab completion
grants you with 40 CPE credits.
Lab Scenarios
PRO LAB DESIGNATION
Red Team Operator Level I
Dante
Dante is a modern, yet beginner-friendly pro lab that provides the opportunity to learn common penetration testing methodologies and gain familiarity with tools included in the Parrot OS Linux distribution.
Intermediate
Difficulty
16
Machines
27
Flags
CPE: 40
- Enumeration
- Exploit development
- Lateral movement
- Local privilege escalation
- Situational awareness
- Web application attacks
FullHouse
FullHouse is an intermediate-level real-world simulation lab that introduces participants to blockchain, artificial intelligence, and machine learning attacks. However, it is not limited to common network penetration testing and active directory misconfigurations.
Beginner
Difficulty
4
Machines
7
Flags
CPE: 10
- Source Code Review
- Web Application Attacks
- Reversing
- Windows exploitation
- Active Directory exploitation
- Blockchain exploitation
- AI bypass/exploitation
XEN
Xen is designed to upskill in enumeration, breakout, lateral movement, and privilege escalation within small AD environments. The goal is to gain a foothold on the internal network, escalate privileges and ultimately compromise the domain.
Intermediate
Difficulty
6
Machines
6
Flags
CPE: 10
- Enumeration
- Lateral Movement
- Privilege Escalation
- Pivoting
- Phishing techniques
- Situational awareness
- Active Directory enumeration and exploitation
P.O.O.
.O.O. focuses on enumeration, lateral movement, and privilege escalation within small Active Directory environments configured with the latest and greatest operating systems and technologies. The goal is to compromise the perimeter host, escalate privileges and ultimately compromise the domain.
Beginner
Difficulty
2
Machines
5
Flags
CPE: 10
- Enumeration
- Active Directory enumeration and attacks
- Lateral Movement
- Pivoting
- Local privilege escalation
- Situational awareness
- Web application enumeration and attacks
Hades
Hades is designed to put your skills in Active Directory enumeration & exploitation, lateral movement, and privilege escalation to the test within a small enterprise network. The goal is to gain a foothold on the internal network, escalate privileges and ultimately compromise the domain while collecting several flags along the way.
Advanced
Difficulty
3
Machines
7
Flags
CPE: 10
- Enumeration
- Active Directory enumeration and attacks
- Lateral Movement
- Network Pivoting
- Web Application attacks
- Password Cracking
- Disk Backup Forensics
- Network Sniffing
RPG
RPG is designed to put your skills in Active Directory, lateral movement, and privilege escalation to the test within a small enterprise network. The goal is to gain a foothold on the internal network , leverage active users and ultimately compromise the domain while collecting several flags along the way.
Advanced
Difficulty
4
Machines
6
Flags
CPE: 10
- Enumeration
- Web Application attacks
- Reverse Engineering
- Active Directory enumeration and attacks
- Lateral movement
- Network Pivoting
- Privilege escalation
- Phishing techniques
- Situational awareness
- Evading endpoint protections
Solar
Solar is designed to test your skills in Enumeration, Code Review, Pivoting, Web Exploitation and other attacking techniques. The goal is to gain a foothold on the internal network, escalate privileges and ultimately compromise the entire infrastructure, while collecting several flags along the way.
Advanced
Difficulty
3
Machines
7
Flags
CPE: 10
- Enumeration
- Situational Awareness
- Reverse Engineering
- FreeBSD Exploitation
- Exploit Chaining
- Out-of-Band Data Exfiltration
- Web Application Attacks
- Source Code Review
Odyssey
Odyssey is designed to put your skills in enumeration, reversing, VoIP exploitation and much more. The goal is to gain a foothold on the internal network, escalate privileges and ultimately compromise the entire gaming Infrastructure while collecting several flags along the way.
Advanced
Difficulty
4
Machines
7
Flags
CPE: 10
- Enumeration
- Situational Awareness
- Reverse Engineering
- VoIP Exploitation
- Phishing Techniques
- Kubernetes Exploitation
- Solaris OS Exploitation
- Web Application Attacks
- Source code Review
- SGame Server Exploitation
Ascension
Ascension is designed to test your skills in enumeration, exploitation, pivoting, forest traversal and privilege escalation inside two small Active Directory networks. The goal is to gain access to the trusted partner, pivot through the network and compromise two Active Directory forests.
Advanced
Difficulty
5
Machines
7
Flags
CPE: 10
- Enumeration
- Exploitation
- Pivoting
- Forest Traversal
- Privilege Escalation
PRO LAB DESIGNATION
Red Team Operator Level II
Alchemy
Alchemy offers a simulated IT and OT scenario, specifically crafted for offensive training to enhance your ICS cybersecurity skills in enumeration and exploitation. Within Alchemy you will simulate brewery environment, adding layers of complexity and realism.
Intermediate
Difficulty
9
Machines
21
Flags
CPE: 40
- Enumeration of IT and OT networks
- Exploiting misconfigurations
- Lateral movement
- Privilege escalation
- Lateral movement and crossing trust boundaries
- Tunneling and pivoting
- Documentation analysis
- Web application attacks
- In-depth understanding of Modbus protocol
- Structured Text PLC code review
- Modbus network analysis
- Dynamic Analysis of Ladder Logic
Zephyr
Zephyr is an intermediate-level red team simulation environment, designed to be attacked as a means of learning and honing your engagement skills and improving your active directory enumeration and exploitation skills.
Intermediate
Difficulty
17
Machines
17
Flags
CPE: 40
- Enumeration
- Evading endpoint protections
- Exploitation of a wide range of real-world Active Directory flaws
- Relay Attacks
- Lateral movement and crossing trust boundaries
- SQL Attacks
- Privilege escalation
- Web application attacks
RastaLabs
RastaLabs is a red team simulation environment, designed to be attacked as a means of learning and honing your team’s engagement skills. This company have enlisted your services to perform a red team assessment of their secured AD environment.
Intermediate
Difficulty
14
Machines
20
Flags
CPE: 40
- Active Directory enumeration and exploitation
- Evading endpoint protections
- Exploit development
- Lateral movement
- Local privilege escalation
- Persistence techniques
- Phishing techniques
- Situational awareness
Offshore
Offshore is a real-world enterprise environment that features a wide range of modern Active Directory misconfigurations. If you manage to breach the perimeter and gain a foothold, you are tasked to explore the infrastructure and attempt to compromise all Offshore Corp entities.
Intermediate
Difficulty
18
Machines
34
Flags
CPE: 40
- Active Directory enumeration and exploitation
- Evading endpoint protections
- Lateral movement
- Local privilege escalation
- Situational awareness
- Tunneling and pivoting
- Web application enumeration and attacks
PRO LAB DESIGNATION
Red Team Operator Level III
Cybernetics
Cybernetics is an immersive enterprise Active Directory environment featuring advanced infrastructure and a strong security posture. Players must gain a foothold, elevate their privileges, be persistent and move laterally to reach the goal of domain admin.
Advanced
Difficulty
23
Machines
20
Flags
CPE: 40
- Active Directory enumeration and exploitation
- Advanced phishing techniques
- DevOPS security controls
- Evading endpoint protections
- Lateral movement
- Local privilege escalation
- Situational awareness
PRO LAB DESIGNATION
Red Team Operator Level IV
APTLabs
APTLabs is a modern and extremely challenging lab that provides the opportunity to hone your research skills and compromise networks without using any CVEs. APTLabs will put expert penetration testers and red team operators through an extremely challenging but extremely rewarding exercise.
Expert
Difficulty
18
Machines
20
Flags
CPE: 40
- Active Directory enumeration and exploitation
- Ability to compromise networks without using any CVEs
- Bypassing common security features such as 2FA
- Evading endpoint protections
- Exploiting interactive users
- Lateral movement
- Local privilege escalation
- Situational awareness
REVIEWS
What our
players say
AND MORE...
Fast-track your cybersecurity
career with Pro Labs.
Discover the power of community.
Pro Labs can connect you with great hackers and
employers all around the world. Join
Discord, find the
dedicated lab channels, and
hang out!
Nail your infosec job
interview.
Pro Labs will provide you with the skills to upscale
your career: take a look to the companies
hiring
through Hack The Box and apply.