An excellent learning resource for
students and teachers alike
HTB Machine Lab
20 active and 110+ retired machines
A new machine as well as standalone challenges released on a weekly basis. Play our 20 most recent (active) machines and all active challenges for free. With VIP, you will have access to our massive retired machine pool as well as full walk-throughs.
RastaLabs is a virtual red team simulation environment, designed to be attacked as a means of learning and honing your engagement skills. The focus of the lab is operating within a Windows Active Directory environment where players must gain a foothold, elevate their privilege, be persistent and move laterally to reach the goal of Domain Admin. The lab features a combination of attacking misconfigurations and simulated users. Prior experience is not strictly required to beat the lab, but it will be a steep learning curve!
Offshore is an Active Directory lab which simulates the look and feel of a real-world corporate network. Users start from an external perspective and have to penetrate the “DMZ” and then move laterally through the CORP.LOCAL, DEV, ADMIN and CLIENT forests to complete the lab. It was designed to appeal to a wide variety of users, everyone from junior-level penetration testers to seasoned testers as well as infosec hobbyists. Players will pick up at least a few new tricks which can be immediately applied to real-world engagements.
Cybernetics is a Windows Active Directory lab environment that has gone through various real-world penetration testing engagements in the past and therefore incorporates fully-upgraded operating systems with all patches applied, which have also been greatly hardened against attacks. The objective of the lab is to operate within a Windows Active Directory environment where players must gain a foothold, elevate their privileges, gain persistence on the network and move laterally to reach the end goal of Domain Admin. Ready?
Become part of
Hack The Box
Enroll today for free
After hacking our invite challenge, you can apply through the universities section of the dashboard. Students can submit an application on behalf of their university, however we require an authorization form to be completed and signed by a faculty member for all applications.