DarkCaT retweeted
Hello,
It's giveaway-number-plz-make-it-end
Our friends from @vulnlab_eu hooked us up with 10 vouchers to their Vulnerability Lab with full access for 90 days.
If you want to practice hacking stuff, on various difficulties, for 90 days, leave a comment below.
- Winners will be selected randomly in the next 24 hours.
- We will DM winners.
- If you do not confirm your win in 24 hours a new winner will be selected
- If your DMs are closed, you automatically forfeit your prize
DarkCaT retweeted
Time to relax with an easy machine before the AD madness continues🍹Down by @ATeamJKR is hitting the lab on Thursday!
DarkCaT retweeted
The next Red Team Lab on Vulnlab will be released on August 8, 2024. This lab features over 10 machines and is rated Easy. The Active Directory environment mirrors what you typically encounter in penetration tests and is complemented by a robust SOC.
Hope you will enjoy it :)
A brand-new machine is coming to Vulnlab tomorrow! Watcher, created by @Dark___CaT and whatev3n, is a medium-difficulty Linux machine that combines recent vulnerabilities with a nice red teaming perspective.
Congratulations! Awesome realistic boxes, red team labs, and rly great community! I am convinced that this is just the beginning, and there is more to come!
Hey Vulnlab Community!
Just taking a moment to reflect on how far we've come together. It's been about a year since Vulnlab first launched, and now we've got around 100 vulnerable machines spread across 50 labs, 2300 Discord members and more than 700 lab users!
The main focus always stayed on realistic enterprise environments but we also managed to dive a bit into other topics like AppSec, Reversing, Kiosk Escapes and even Windows Userland & Kernel Exploitation.
I want to give a big shoutout to all of you for making this possible. Whether you're giving support to the project, solving machines in the lab or creating content - your dedication and expertise are what make Vulnlab thrive. We've got some of the most talented and dedicated players and machine authors out there.
So, a huge shoutout to each and every one of you for making Vulnlab what it is today. Here's to countless more late nights, epic wins, and friendships.
@0xr0BIT @k0zmer @ATeamJKR @macz01590714 @Yeeb_ @_Sm1l3z @django88_ @snowscan @d3sty_ @ottersec_ @Geiseric4 @_ar0x4 @Fumenoid @csenox1 @secure_sec77 @toonii_14 @_kavigihan @Sno0wOfficial @MantodeaSec
DarkCaT retweeted
A new Red Team Lab, Shiva, is coming to Vulnlab next week! This time you get to test a hardened Hybrid-AD environment that involves:
- Hybrid-AD with 10+ machines & active users
- Cloud exploitation
- SIEM, EDR on Clients & Servers
- Common enterprise software
- No CVEs
DarkCaT retweeted
Delegate by @Geiseric4 is coming to Vulnlab this week! Expect some quality AD content 🔥
DarkCaT retweeted
Control by @ATeamJKR is getting released on Thursday - this is the first full linux chain on Vulnlab!
DarkCaT retweeted
Intercept by @xct_de is coming to the lab next Thursday! It’s rated hard and involves some AD concepts that are useful in real engagements but not often seen in labs. This puts the lab at over 50 machines!
Thanks @xct_de for amazing opportunity to learn something new! I can advise everyone who is involved in pentests to try #Vulnlab
api.eu.badgr.io/public/asser…
DarkCaT retweeted
Vulnlab just released a new Active Directory lab called Wutai!
Like Shinra, it’s a simulated corporate environment with about 15 machines spread across multiple networks, domains & forests. The lab focuses on exploiting misconfigurations & users - not CVEs.
DarkCaT retweeted
This is going to be interesting 👀
New machine "Dump" is going live today! Thank you @ATeamJKR for creating this machine for Vulnlab! This is already the second jkr box on the platform 🍾
DarkCaT retweeted
DroppedConnection - a fake VPN server that captures credentials and executes code via the Cisco AnyConnect client.
research.nccgroup.com/2023/0…
DarkCaT retweeted
Sliver C2 developers have recently implemented an "external builder" feature to compile implants on external servers, but why not just use it to create completely custom implants instead? 🙃
DarkCaT retweeted
I hacked a large company (70k+ employees) through social engineering. Legally of course.
• I set up the infrastructure
• Scraped names & emails with LinkedIn
• Sent 200 phishing emails.
I had access to their AWS console within 2 minutes.
And much more:
DarkCaT retweeted
Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard.
These techniques also work on victims logged on before the server was compromised.
research.ifcr.dk/pass-the-ch…

















