We're thrilled to introduce our latest Professional Lab scenario: Orion! Designed specifically for beginners in a time-efficient manner, Orion serves as the perfect entry point into hands-on security practice.

This scenario covers fundamental techniques of the penetration testing process for smoother technical onboarding, focusing on the following learning outcomes:

• Enumeration
• Public Exploit Research
• Lateral Movement
• Privilege Escalation
• Pivoting
• Active Directory

Orion comes with all business-exclusive features such as official write-ups, Restore Point, and MITRE ATT&CK mapping.

Dive into our fresh blog post to learn more!

Don’t have access to Professional Labs yet? Contact your Account Manager or hit the button below to unlock more.

Keep your streak alive with a little help from us! 🔥
Annual HTB Academy subscribers now enjoy the benefit of one (1) streak saver per month, up to three (3) savers in total.

Streak Savers are applied every Monday, ensuring your streak remains intact from the previous week as long as your annual academy subscription is active.

Ready to create the longest Streak ever? 👇

A new AI-powered assistant is now available for HTB Enterprise Platform members of Dedicated Labs, Professional Labs, and Cloud Labs.

This new support engine receives data from our labs to provide you with additional support and guidance concerning lab content completion.

You can now ask the AI Hivemind everything about content relevant to our existing write-ups!

How to access and use the AI support?

• Open Support & Updates
• Click on Messages
• Click on Ask a question
• Choose General Inquiry

FullHouse — the latest release within Professional Labs, now includes Restore Point feature.

Stay ahead of the latest technologies learning more about AI bypass and exploitation... Without losing your progress!

Restore Point saves your progress and allows you to quickly resume the Professional Lab scenario after a reset (or replacement of it), eliminating the need to replay the entire scenario from scratch.

Don’t have access to Professional Labs yet? Reach out to your account manager or click the button below to explore more.

HTB CTF events are used to regularly assess and benchmark skills and knowledge domains of teams and individuals.

Organizing a live CTF event involves a lot of planning and coordination. Setting up the event and managing the participants can be a time-consuming process.

The HTB CTF platform now offers enhanced event management features, which simplify the event coordination and provides comprehensive oversight, making the entire process more streamlined and flexible.

This enabler facilitates clear communication, collaboration, and event organization by:

• Automating team member sign-ups
• Keeping better track of members and participation
• Providing insights on purchased Challenges and content packs
• Enabling role assignment
• Aligning Challenge information and objectives to event (or company) goals

We are excited to announce the release Real Case Sherlocks within Dedicated Labs.

These scenarios are diligently crafted scenarios that emulate real case incidents shared by leading MSSPs directly with Hack The Box.

Continuous practice with hands-on industry-sourced scenarios can assist in developing a team’s acumen in threat mitigation and overall resilience.

This allows team leaders and management to cultivate a workforce equipped to confidently navigate the complexities of real-world incidents.

First release: Exitiabilis

Medium — SOC — Windows

Created in partnership with Aspire Technology Solutions. By recreating a closed-source incident, Exitiabilis tests the abilities of SOC teams to investigate a compromise of a corporate environment utilizing HELK.

This scenario immerses participants in the aftermath of a ransomware attack orchestrated by the notorious Akira group. The goal is to empower teams to proactively enhance their threat readiness and mitigation abilities by sharpening investigative skills and refining response tactics through a genuine industry-sourced threat.

Real Case Sherlocks are exclusive to businesses with access to Dedicated Labs. Don’t have access yet? Contact your Account Manager or hit the button below to unlock more.

Boost an effective purple-minded approach by navigating through an emerging threat landscape with these newly released scenarios on Dedicated Labs.

Moniker allows you to gain practical experience in exploiting the MonikerLink vulnerability (CVE-2024-21413), understand the insecure use of MkParseDisplayName() API, and learn how to handle links triggering the vulnerability.

Moniker-D enable teams to apply a defensive approach on the same vulnerability. Prepare for attacks directed to valuable NTLM hashes to fortify the organization’s defenses and investigate security breaches to identifying the attack path for an optimal vulnerability assessment.

Exercising with interconnected scenarios will provide a overall view on the vulnerability, and ultimately reduce the time-to-respond and time-to-detect of the team!

Don’t have access to Dedicated Labs yet? Contact your Account Manager or hit the button below to unlock more.

Sherlocks, our cyber attack investigation labs, are quickly finding their home throughout Hack The Box Labs!

Our most recent update allows you to view overall Sherlocks progress on your profile overview page. Take inventory of the cases you’ve cracked and gain insights on areas you have yet to explore:

• Digital Forensics & Incident Response (DFIR)
• Cloud
• SOC
• Malware Analysis
• Threat Intelligence

Sherlocks are currently covering multiple difficulty levels: from beginner-friendly labs to advanced, complex challenges to test defensive security skills.

Who isn’t a fan of data? Try your hand at Sherlocks!

Seeking extra help to complete Challenges within the Pwn category?

Access fresh write-ups to guide you through successful training and completion.

Leverage these step-by-step solutions to overcome any Challenge. If the write-ups aren't accessible, ensure your admin has activated them in your Dedicated Labs “Settings” tab.

Don’t have access to Dedicated Labs yet? Contact your Account Manager or hit the button below to unlock more.

Excited to embark on the thrilling Jinkies Sherlock adventure and apply your DFIR skills in real-world scenarios?

This defensive scenario allows participants to develop skills in Intellectual Property protection, timeline analysis, and remote investigation with KAPE triage.

Jinkies simulates the challenges and responsibilities associated with investigating potential data breaches in a corporate environment.

Don’t have access to Dedicated Labs yet? Contact your Account Manager or hit the button below to unlock more.