Holo

Welcome to Holo!

Holo is an Active Directory and Web Application attack lab that teaches core web attack vectors and advanced\obscure Active Directory attacks along with general red teaming methodology and concepts.

In this lab, you will learn and explore the following topics:

• .NET basics
• Web application exploitation
• AV evasion
• Whitelist and container escapes
• Pivoting
• Operating with a C2 (Command and Control) Framework
• Post-Exploitation
• Situational Awareness
• Active Directory attacks

You will learn and exploit the following attacks and misconfigurations:

• Misconfigured sub-domains
• Local file Inclusion
• Remote code execution
• Docker containers
• SUID binaries
• Password resets
• Client-side filters
• AppLocker
• Vulnerable DLLs
• Net-NTLMv2 / SMB

This network simulates an external penetration test on a corporate network "Hololive" with one intended kill chain. All concepts and exploits will be taught in a red teaming methodology and mindset with other methods and techniques taught throughout the network.

This network brings you from zero to red-team, but you are expected to have a general understanding of basic Windows and Linux architecture and the command line for both Windows and Linux. If you need help, please feel free to ask in the TryHackMe Discord; there is a channel set up for this purpose in the help section there.