Summary Nova Forge is a HacksmarterLabs internal penetration test against a two-host Active Directory environment (DC at 10.0.0.100 and STORAGE at 10.0.0.101, forest novaforge.local). The engageme...

Summary Implicit is a HackSmarter web application lab that packages two objectives into a single Flask process. The first objective is an unauthenticated OAuth attack against a self-hosted “HackSm...

Summary SysAdmins is a HacksmarterLabs Linux box, starting unauthenticated on the VPN and ending at root. The recon phase hands us three things. Anonymous FTP serves a “data breach notification” ...

Summary ShadowGate2 is a HacksmarterLabs internal Active Directory engagement against a single domain controller, SG-DC01.shadowgate.local, starting unauthenticated on the VPN and ending at Domain...

Summary Rotation is a HackSmarter AWS scenario. It starts with a valid access key for manager_lab in AWS account 946925698533, and asks for a secret held in Secrets Manager that the user has no di...

Summary Embedded is a HackSmarter web application lab. The client is standing up a SaaS file-storage platform called HackSmarter Cloud, the web app is the only thing in scope, and a flag has been ...

Summary Beanstalk is a HackSmarter AWS scenario. The starting position is a long-lived access key for lab_low_priv_user in AWS account 588137275719, and the target is a flag stored in AWS Secrets ...

Summary Fragments is a HacksmarterLabs Active Directory box built around a very literal theme: every single step of the chain is a fragment. No individual finding is an exploit on its own, and alm...

Summary Willmore Group is a HacksmarterLabs range built as an external penetration test against a single in-scope host, with internal pivoting authorised once a foothold is established. It is nine...

Summary Sorcery is an Insane-rated Linux machine built around a full open-source stack: a Rust/Rocket backend, a Next.js frontend, Neo4j, Kafka, a custom DNS service, FTP, MailHog, Gitea, and a he...