root@kali:~$ ls ./writeups/pro-labs

HTB Pro Lab Write-ups

End-to-end, evidence-backed attack paths for retired Hack The Box Pro Labs.

2 published Retired content only RSS feed

Knowledge base

Retired Pro Lab archive

Multi-host attack chains from perimeter discovery through pivoting, lateral movement and domain compromise.

2 write-ups

Hack The Box

Hack The Box Mini Pro Lab — P.O.O.

P.O.O. chains exposed IIS metadata, an MSSQL linked-server trust loop, IPv6 WinRM and Kerberoasting into full Active Directory compromise.

Type
pro lab
OS
Windows
active-directoryiisds-storemssqllinked-servers
Read write-up
Hack The Box

Hack The Box Pro Lab — Xen

Xen chains SMTP phishing, a Citrix breakout, Windows privilege escalation, Kerberoasting, pivoting, NetScaler traffic capture and Backup Operators abuse into full Active Directory compromise.

Type
pro lab
Difficulty
Hard
active-directorycitrixphishingsmtp-enumerationwindows-breakout
Read write-up